Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/fBrT5RrVaTlJrHNJfFDqolZoOrE.roa
File: fBrT5RrVaTlJrHNJfFDqolZoOrE.roa (raw, json)
Hash identifier: 4awrmE5I3bNmrGjoQQ0ZU1lxhBz02vsuGPKzQx+xiRI=
Subject key identifier: 7C:1A:D3:E5:1A:D5:69:39:49:AC:73:49:7C:50:EA:A2:56:68:3A:B1
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019C44D2D36C3F1B784DE1946FDC4BA7CC51
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/fBrT5RrVaTlJrHNJfFDqolZoOrE.roa
Signing time: Mon 09 Feb 2026 23:53:13 +0000
ROA not before: Mon 09 Feb 2026 23:53:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34202
IP address blocks: 144.31.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:d2:d3:6c:3f:1b:78:4d:e1:94:6f:dc:4b:a7:cc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Feb 9 23:53:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c1ad3e51ad5693949ac73497c50eaa256683ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e1:50:8a:33:84:9d:cc:d6:ee:e4:d7:ec:b7:
6a:40:a5:f7:c8:ca:c5:e7:5c:c4:89:71:60:30:0a:
5f:8d:a7:0e:5c:0c:70:3f:f7:d3:de:ea:62:4a:e0:
2b:1d:42:73:b3:fb:80:9d:9f:2d:04:40:e2:80:f4:
02:34:3e:c3:dc:14:c0:56:31:5e:63:d0:00:ee:b0:
81:d8:ec:79:52:fa:51:96:cb:18:db:66:ff:42:7b:
4d:21:bb:7e:e3:d2:94:d4:ca:b4:03:fd:3c:23:82:
c7:17:5a:84:2c:9e:33:26:2d:48:13:e2:20:ac:3d:
82:5f:58:bc:3a:31:b0:1c:bb:1d:f9:e6:3f:1e:9d:
d5:ba:43:3a:57:18:2f:65:8f:ee:23:67:c8:a6:e7:
d6:27:14:5a:19:9a:a5:ba:f4:5b:0b:d7:4d:96:ac:
c1:3c:92:2d:fb:2a:67:e0:8e:74:95:0e:c8:3a:f7:
8e:16:3d:89:fd:31:60:16:cc:b0:3b:7f:4e:20:b9:
18:2e:37:66:da:9d:ee:52:84:3f:09:88:42:88:c6:
6f:cf:a4:a5:65:c8:6a:ce:f2:f3:31:53:d1:82:db:
c2:d6:b1:9f:27:38:c5:ff:65:37:69:33:c6:28:aa:
50:0d:66:8d:b9:f6:8f:09:3c:5a:6e:8a:6b:08:49:
bb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1A:D3:E5:1A:D5:69:39:49:AC:73:49:7C:50:EA:A2:56:68:3A:B1
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/fBrT5RrVaTlJrHNJfFDqolZoOrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.146.0/24
Signature Algorithm: sha256WithRSAEncryption
59:ef:68:11:e8:ed:09:70:aa:bd:f4:35:43:cf:a8:98:c4:2d:
99:36:a8:0b:6d:78:92:f4:50:4a:48:25:b2:91:25:de:9c:a1:
41:fd:24:6f:4a:6b:57:04:92:77:d0:b8:d1:da:66:6c:9a:dc:
ed:53:2e:cb:e6:c3:aa:65:4f:fa:a0:63:93:f2:c5:95:5c:bf:
b4:dd:da:4a:22:f3:79:fe:cd:e7:3e:d0:34:25:f2:7d:1f:71:
3c:0a:e7:be:cb:d9:bd:c6:1d:46:4c:32:c6:ad:a6:56:f4:05:
df:5d:cf:55:db:f7:d2:8b:67:57:f2:5a:41:75:ad:90:12:12:
ba:c2:91:5e:45:15:39:b5:86:f8:e3:37:8f:b9:aa:14:0e:a7:
6a:6d:e2:4c:9c:8d:b4:9f:f1:79:50:5c:2e:c7:d6:84:41:40:
86:0f:ca:09:9f:84:b7:43:fc:06:b0:b9:fa:33:90:aa:7b:24:
1a:03:89:eb:69:7e:39:f9:9e:69:bf:4c:db:06:f1:03:6f:9d:
3b:7d:8b:12:b1:d4:4d:66:49:60:5e:b3:3a:d5:5f:58:f3:ce:
82:a5:91:99:6b:78:ca:7e:b0:1d:a0:38:a8:f0:36:09:75:f8:
21:77:fb:ff:ba:bd:0c:60:cb:6b:b6:7b:c6:ab:e2:ac:81:f2:
d5:02:49:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:04:33 2026 by rpki-client