Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/p8_RWQYRaUHUxLWAQpagoMybd5Q.roa
File: p8_RWQYRaUHUxLWAQpagoMybd5Q.roa (raw, json)
Hash identifier: rz09Sflj4/LDp3uc0C9iq2XDsEPBDZUGE5/7HZOnNZk=
Subject key identifier: A7:CF:D1:59:06:11:69:41:D4:C4:B5:80:42:96:A0:A0:CC:9B:77:94
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019C2EB18B197FA373DECDB56F1CFAEBE1D2
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/p8_RWQYRaUHUxLWAQpagoMybd5Q.roa
Signing time: Thu 05 Feb 2026 16:45:13 +0000
ROA not before: Thu 05 Feb 2026 16:45:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137897
IP address blocks: 144.31.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2e:b1:8b:19:7f:a3:73:de:cd:b5:6f:1c:fa:eb:e1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Feb 5 16:45:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7cfd15906116941d4c4b5804296a0a0cc9b7794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:44:80:a8:46:54:08:9c:ce:14:54:10:3a:63:
09:1f:65:3b:27:79:e5:4f:81:4e:7b:9f:34:7d:ec:
8f:94:0b:ba:8b:8a:bd:81:b5:a9:6a:ed:6c:86:4e:
a8:bd:52:a8:0a:62:fb:5f:81:95:d6:f0:7d:24:39:
43:7e:85:8e:d3:4f:d9:9b:67:b7:fc:f2:75:be:0a:
d4:a6:71:c4:aa:6b:48:9d:9f:6a:c5:1c:2d:02:b4:
ec:30:c1:08:f8:72:64:f5:94:64:9a:1e:04:14:57:
84:2a:54:49:38:b2:52:25:2c:74:78:b1:db:3e:6d:
eb:19:24:cb:ff:20:27:48:b5:1d:16:94:e5:82:90:
be:49:d4:dd:b3:d3:ba:54:f3:88:3b:41:b0:17:2f:
98:91:9e:6b:c7:36:52:a8:d0:c7:10:a1:4a:1c:f3:
22:43:c6:fc:4b:c3:0c:5f:05:6b:98:99:95:28:16:
6c:67:4d:7a:4a:4f:9b:f6:47:4d:1a:06:c3:2e:74:
b2:47:d2:7f:ea:0e:7e:54:58:e5:f7:e2:45:45:61:
dd:4c:61:3f:b6:06:f4:b1:c7:cf:53:d1:4e:2f:0e:
c2:34:87:89:28:fe:22:39:de:c9:e1:90:04:29:1d:
ad:c5:7e:78:c7:11:6b:a5:04:f7:8b:22:e6:04:c7:
4d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CF:D1:59:06:11:69:41:D4:C4:B5:80:42:96:A0:A0:CC:9B:77:94
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/p8_RWQYRaUHUxLWAQpagoMybd5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.45.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:cf:71:3b:91:c2:38:b3:15:fa:9f:5f:50:e2:16:bb:94:fb:
2a:0c:11:c1:76:54:73:00:ad:43:b4:b0:5a:e9:d5:43:c6:83:
f8:b4:2c:f2:07:b2:95:6c:74:36:47:99:0c:f3:78:6a:da:61:
6b:98:bc:9c:36:3a:fd:17:b3:a5:72:e3:fc:19:ef:44:f9:fa:
fc:7c:ad:80:80:9a:3a:c8:78:85:be:3f:21:ca:4e:86:d0:df:
c8:b5:71:cf:fb:ce:4f:ce:b7:84:0a:a4:03:2d:3b:79:3d:11:
1f:19:cd:3a:8e:dd:b7:9d:68:14:90:05:cd:d5:03:77:5a:fc:
48:91:a8:cd:ac:a1:f0:bc:2c:31:93:d9:38:46:eb:aa:92:58:
34:6c:26:90:03:f3:62:76:b0:97:86:d0:00:54:b7:2f:76:10:
49:80:d7:38:ba:bd:e3:25:1e:9a:af:31:24:9b:2b:6a:27:21:
e2:a0:41:b2:ce:b4:61:7b:a9:26:d6:0a:a6:27:95:b0:44:02:
c8:70:34:df:4d:21:bb:bd:3a:83:e0:3e:ba:10:f0:cb:b6:f5:
d8:55:d4:0e:fd:e7:2d:62:24:82:0f:6b:77:ae:ab:9d:9b:bc:
bc:5a:b7:43:6a:b9:7e:d4:5f:5c:ec:37:41:b0:a7:37:f6:64:
2b:d7:51:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:07:08 2026 by rpki-client