Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/b7MnNZ863PrErqTATC_u6l8tMDQ.roa
File: b7MnNZ863PrErqTATC_u6l8tMDQ.roa (raw, json)
Hash identifier: hw884Ox5pwt7qGkba2L3owZXglWssd0GbAxRo75DOnw=
Subject key identifier: 6F:B3:27:35:9F:3A:DC:FA:C4:AE:A4:C0:4C:2F:EE:EA:5F:2D:30:34
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D2B8B3B54588EEF7CCDBCDBDA1228F068
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/b7MnNZ863PrErqTATC_u6l8tMDQ.roa
Signing time: Thu 26 Mar 2026 19:07:18 +0000
ROA not before: Thu 26 Mar 2026 19:07:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15083
IP address blocks: 144.31.20.0/22 maxlen: 24
144.31.88.0/24 maxlen: 24
144.31.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:8b:3b:54:58:8e:ef:7c:cd:bc:db:da:12:28:f0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 26 19:07:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fb327359f3adcfac4aea4c04c2feeea5f2d3034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5d:3b:a5:1e:24:0e:4e:97:b9:da:23:02:73:
e5:52:ce:17:d3:bc:bf:4b:b7:64:a7:fa:d3:2f:8d:
d1:67:7d:78:cb:37:4f:f6:9d:69:96:8f:df:85:e0:
a5:56:36:fc:14:84:ef:38:de:a4:79:aa:d4:e9:dc:
7a:0e:b8:c9:62:b5:7b:91:15:8e:f2:24:ba:7d:06:
25:00:48:95:bb:28:29:3e:c3:99:62:5e:60:cf:0b:
eb:8d:f6:4a:8c:d4:bf:01:ab:a3:b1:50:18:e4:1d:
00:43:4a:8f:3e:b4:9e:9d:5f:4c:7b:c4:fa:39:4c:
1f:86:87:a0:99:43:d8:dd:e7:3c:8e:63:c7:9c:f9:
a0:42:c1:e9:ba:ce:51:05:88:ab:38:87:d7:5a:76:
bd:72:1d:b3:58:2a:d8:24:ae:46:e3:5f:3a:91:42:
26:f5:3c:0f:63:00:83:09:fd:7e:b2:dc:c7:5f:0d:
37:88:2f:01:60:86:44:a8:5a:36:b0:a8:77:ed:35:
a8:98:c8:27:03:d8:f9:92:68:cc:48:92:a8:68:4c:
1b:fa:50:bd:83:4f:49:f0:1a:66:15:c5:b0:32:e4:
7a:ed:66:7b:47:06:42:1d:56:6a:bd:1c:84:9b:8d:
65:d9:e3:2d:3c:9b:81:da:31:6a:81:a4:a2:59:77:
9d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B3:27:35:9F:3A:DC:FA:C4:AE:A4:C0:4C:2F:EE:EA:5F:2D:30:34
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/b7MnNZ863PrErqTATC_u6l8tMDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.20.0/22
144.31.88.0/24
144.31.124.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:05:0b:8c:75:6f:b0:cd:43:55:5e:b2:e9:b7:8b:91:69:e3:
26:54:18:0d:bd:4d:4c:a9:e9:d8:a8:2e:c1:d8:1e:fa:74:58:
4a:fe:71:89:92:58:e8:e5:5b:8b:60:46:16:78:66:e7:39:c9:
27:0b:45:6d:bb:2c:84:1a:59:29:bc:53:a4:6b:3a:7c:ef:0f:
39:08:0f:89:26:58:f2:b6:26:80:bf:54:8b:c4:1c:55:ce:51:
46:ba:f1:32:0b:88:2b:75:14:30:b1:db:f5:4b:96:9d:cc:e6:
ff:45:c7:b1:68:b3:2b:4a:fe:d7:33:79:51:00:cf:ba:20:c3:
de:3c:0c:d7:59:65:6e:27:27:74:53:24:d7:be:ab:ce:5d:34:
9c:e2:a9:32:58:bb:cb:0c:a5:26:76:97:fe:30:0f:eb:75:43:
30:3a:c3:53:d2:84:f7:81:4b:9b:52:63:06:4c:52:86:fd:d6:
3d:06:ad:f6:77:82:17:cf:de:01:61:8c:f9:7f:4b:db:2d:36:
8c:c7:57:63:9f:fd:7a:d1:d9:7a:ce:4e:6f:0f:29:b4:67:8e:
5a:0a:f6:c3:86:4a:a1:a7:d2:7f:db:c4:93:21:3f:01:c7:59:
97:41:88:ed:07:2d:e0:71:85:9e:dd:00:17:67:bf:80:3e:47:
e9:d3:52:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:58:36 2026 by rpki-client