Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/dUNdXoYtQR3EC0Crxfx1DBA1tLM.roa
File: dUNdXoYtQR3EC0Crxfx1DBA1tLM.roa (raw, json)
Hash identifier: nMCx2xQaNtvIKCm/JdLRKYEWMluc7HFsuSY3c368Se0=
Subject key identifier: 75:43:5D:5E:86:2D:41:1D:C4:0B:40:AB:C5:FC:75:0C:10:35:B4:B3
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019C393D6EFD47AC01EC8B747567C91F3626
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/dUNdXoYtQR3EC0Crxfx1DBA1tLM.roa
Signing time: Sat 07 Feb 2026 17:54:13 +0000
ROA not before: Sat 07 Feb 2026 17:54:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 265517
IP address blocks: 144.31.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:39:3d:6e:fd:47:ac:01:ec:8b:74:75:67:c9:1f:36:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Feb 7 17:54:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75435d5e862d411dc40b40abc5fc750c1035b4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b5:7b:23:bc:d9:ad:4a:3a:62:79:d4:4b:e9:
29:20:c6:7a:26:0d:9c:92:ce:c9:67:f2:4e:d0:c2:
c1:ce:95:e1:94:62:dd:a6:d4:d1:03:56:17:ad:5c:
65:3c:79:4c:84:44:95:45:45:bb:3d:bb:c6:3b:aa:
d5:07:2a:ef:bf:f1:39:4a:b2:98:72:29:90:88:62:
7f:94:f9:88:89:e5:ef:62:dc:93:13:c2:75:5e:0c:
91:83:72:15:d5:d9:27:e7:8d:f2:ba:16:f7:34:b2:
1a:21:8f:76:fb:1d:04:78:1a:2e:2b:ac:70:ef:ef:
73:47:1b:fa:f3:b0:eb:82:0a:54:59:fc:19:32:fa:
13:20:b8:9c:ff:ff:48:c7:bd:6f:41:f5:ea:24:74:
8a:29:eb:97:e9:fd:9f:8d:cb:85:52:1a:fa:ad:6b:
6b:ef:b1:c1:51:e5:6b:a4:65:1c:31:85:3a:d5:0d:
81:ab:ac:7b:80:ac:fa:23:e3:e6:d0:a8:35:ab:d5:
5f:67:59:b2:e0:c0:a5:9d:ef:16:b7:b2:33:ec:17:
d5:20:b6:ba:ec:57:5f:60:35:07:7d:bc:97:c9:c0:
3f:52:10:0f:22:bf:3c:4b:d3:3d:7f:87:5c:77:be:
2b:22:cf:b6:89:23:67:29:c6:5d:c7:81:21:f5:0f:
8d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:43:5D:5E:86:2D:41:1D:C4:0B:40:AB:C5:FC:75:0C:10:35:B4:B3
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/dUNdXoYtQR3EC0Crxfx1DBA1tLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.144.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:fa:c4:5b:49:f0:55:b8:3d:55:e2:24:06:e7:3a:38:c8:5f:
f9:8f:02:ca:74:41:67:cf:68:a6:a7:bd:b4:f3:a9:0b:0a:e2:
c3:04:86:16:98:4d:44:39:c0:01:3c:0d:3d:98:79:46:7c:2e:
0e:3c:94:76:62:dd:e4:a2:be:d2:46:42:2c:1e:93:f5:68:76:
ae:48:5d:d1:91:bb:fe:f0:5d:c7:c7:a4:69:f4:07:44:48:20:
9e:d4:36:2b:83:00:5f:0b:52:e8:ba:9d:d4:e8:49:45:be:d4:
e9:95:79:90:99:49:ef:5f:e0:7e:d4:9d:6a:9b:f4:ab:32:e0:
6c:d9:3e:56:24:e1:70:13:fd:da:24:32:f4:bb:b0:85:a8:f8:
9e:c4:b8:9f:a3:df:1d:1b:54:bf:76:13:65:9b:90:e0:73:59:
6e:4c:5b:bb:47:99:ef:f3:ad:ee:ec:ea:f5:89:f4:d7:39:d7:
f5:05:0f:51:bc:cd:e7:11:f4:84:d8:7a:9e:e3:0a:69:12:a7:
3c:da:8e:84:26:2f:1f:d5:6b:ae:da:be:0c:82:ae:7b:a5:fa:
18:01:54:99:5d:81:e6:49:89:85:ec:84:ae:2a:d2:a0:42:9b:
b5:74:19:21:da:96:80:4b:c9:23:13:da:e2:bc:af:16:5f:f3:
10:be:c7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:49:53 2026 by rpki-client