Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/l-wybHF4Y8YldlMH60jaKQ-5rxA.roa
File: l-wybHF4Y8YldlMH60jaKQ-5rxA.roa (raw, json)
Hash identifier: 55bFrPIZ85c4I6fBF4Tc3nUqCm+oUdKs8BF/DKBfy3s=
Subject key identifier: 97:EC:32:6C:71:78:63:C6:25:76:53:07:EB:48:DA:29:0F:B9:AF:10
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019C76F1074A3B6491609508C339B53059D9
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/l-wybHF4Y8YldlMH60jaKQ-5rxA.roa
Signing time: Thu 19 Feb 2026 17:27:13 +0000
ROA not before: Thu 19 Feb 2026 17:27:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200823
IP address blocks: 144.31.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:76:f1:07:4a:3b:64:91:60:95:08:c3:39:b5:30:59:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Feb 19 17:27:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97ec326c717863c625765307eb48da290fb9af10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:73:9a:80:15:24:b8:8b:e1:62:f2:5a:4e:d1:
51:81:bd:2e:99:d5:54:82:7b:4f:95:72:1a:63:63:
4b:c1:fe:ea:3c:ba:dc:2a:e4:35:08:a2:c3:13:3b:
b1:08:e2:4c:10:04:c1:24:9e:5e:82:33:26:08:c2:
95:71:a0:48:96:95:c9:51:e6:46:47:1f:49:f1:4e:
04:f6:92:7f:a2:af:95:f4:e4:8c:6d:f1:47:0d:46:
2c:02:92:b4:ae:2e:07:85:1b:37:40:d7:81:6b:b9:
54:73:93:97:12:e7:4b:c3:f7:05:70:70:e5:03:ad:
b9:be:0b:ba:2b:d8:5d:26:7e:73:a6:0b:51:2f:0e:
54:b2:85:04:74:cd:36:88:e5:11:b7:f7:e0:32:ae:
8a:cc:b0:dc:b9:04:e3:2e:af:0f:f0:e8:f9:42:a6:
69:c7:a6:7b:eb:a1:dd:7e:e7:90:45:fe:c0:53:d2:
e7:60:34:64:12:0f:8f:3c:eb:d1:8e:7b:9c:5a:67:
ee:ea:d0:a2:c5:a8:13:bf:b3:79:d8:01:9c:1a:7a:
08:17:0b:8e:d5:a4:14:56:32:e3:70:35:29:e8:81:
2c:b7:7c:11:0b:97:36:a8:17:49:5c:8e:80:2e:6e:
60:89:07:52:d1:94:6f:14:72:d8:64:f1:aa:6f:3f:
a6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EC:32:6C:71:78:63:C6:25:76:53:07:EB:48:DA:29:0F:B9:AF:10
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/l-wybHF4Y8YldlMH60jaKQ-5rxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.57.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:44:24:01:83:83:a9:a0:a4:5a:41:a1:74:d9:af:76:3f:1e:
98:cb:87:16:4a:cf:5f:b5:ef:80:8d:5a:61:a3:e7:89:ef:90:
ef:97:1f:fa:cd:e0:d8:5c:eb:23:77:a8:6e:fc:4c:e2:53:c8:
13:92:68:c8:73:e5:c0:66:2b:79:75:80:5c:e9:fd:82:f3:08:
e1:85:c3:d1:06:18:65:16:95:96:74:c6:b9:3d:e2:cb:7f:34:
d6:1f:f6:97:6f:4c:d3:2e:c6:1a:2b:51:fd:8b:bb:8a:09:01:
3f:26:72:65:3e:51:d2:75:9d:84:fd:85:2c:c9:82:51:0d:d6:
82:92:76:bf:eb:e9:dd:80:0a:52:14:4a:9c:9c:90:b7:24:ab:
65:e8:a4:22:d1:03:67:e8:ff:eb:78:6e:ba:e0:8e:c8:09:23:
f7:15:f4:17:1f:30:27:e3:94:7f:83:9b:b3:a4:1a:fc:14:ce:
08:c3:c8:99:fb:33:0c:45:ed:df:2d:24:f5:82:81:5d:7a:c1:
02:4e:f5:82:59:ba:11:55:86:d9:6d:fe:a0:20:80:52:1a:97:
54:9c:61:fa:f2:57:fc:5b:8d:5e:0e:72:6d:02:2d:59:9f:2f:
0b:01:9a:46:59:ad:c0:ec:96:76:73:10:86:5e:39:3d:21:77:
d1:47:e0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:53:52 2026 by rpki-client