Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/raXXxZiy4wG7cytIoz99hhGH0yc.roa
File: raXXxZiy4wG7cytIoz99hhGH0yc.roa (raw, json)
Hash identifier: kLx6mqa/6+Tq3TP2MQkikeuQfy4HQvd1vNRlGwa0Wek=
Subject key identifier: AD:A5:D7:C5:98:B2:E3:01:BB:73:2B:48:A3:3F:7D:86:11:87:D3:27
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019C4DC0E5C3CFD242FC99EE67DD28F76C57
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/raXXxZiy4wG7cytIoz99hhGH0yc.roa
Signing time: Wed 11 Feb 2026 17:30:13 +0000
ROA not before: Wed 11 Feb 2026 17:30:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206134
IP address blocks: 64.188.115.0/24 maxlen: 24
77.239.127.0/24 maxlen: 24
144.31.98.0/24 maxlen: 24
144.31.154.0/23 maxlen: 24
144.31.180.0/22 maxlen: 24
144.31.188.0/23 maxlen: 24
144.31.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4d:c0:e5:c3:cf:d2:42:fc:99:ee:67:dd:28:f7:6c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Feb 11 17:30:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ada5d7c598b2e301bb732b48a33f7d861187d327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:87:ac:5a:b0:97:79:18:40:81:86:4c:ae:c8:
92:4b:e7:a5:f1:3d:79:68:18:24:4a:72:13:0a:23:
33:c6:1c:0c:59:c9:fe:8f:62:36:8b:1b:44:a9:c6:
58:01:a7:ab:0d:25:3c:78:47:58:d8:9c:a0:b9:7b:
bb:c0:7b:f6:f3:9d:b3:ea:bd:14:7b:25:8b:83:09:
0c:27:30:28:b0:a2:3f:fa:7d:7b:54:6d:d3:8d:0a:
12:c9:9d:be:71:ef:a3:92:e8:e5:4c:e1:e9:e7:c5:
fe:41:32:56:3f:00:a2:ad:01:26:45:b2:dc:eb:13:
b3:db:97:ab:fd:84:63:81:8b:df:b1:c8:e3:43:a5:
ac:ef:52:83:53:c4:b7:e8:f8:b1:1b:39:f5:12:81:
e0:ca:a7:5d:72:51:c8:2c:10:3f:df:77:4f:f3:21:
f0:ad:36:c7:e3:e3:7a:ad:b4:8b:f6:53:24:cf:4a:
62:cf:54:d5:c7:19:c4:31:d0:92:ce:cc:09:4b:50:
f6:0b:7c:06:cb:b4:49:ec:d2:71:2c:d6:0a:4e:4d:
22:58:75:51:07:cc:b5:dd:e1:f6:47:10:40:e1:36:
63:96:66:c0:2a:f4:a5:c6:66:6f:d9:25:6e:97:b4:
4b:f9:4b:1f:e1:b3:16:98:b6:43:55:7f:45:a8:61:
33:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A5:D7:C5:98:B2:E3:01:BB:73:2B:48:A3:3F:7D:86:11:87:D3:27
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/raXXxZiy4wG7cytIoz99hhGH0yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.115.0/24
77.239.127.0/24
144.31.98.0/24
144.31.154.0/23
144.31.180.0/22
144.31.188.0/23
144.31.251.0/24
Signature Algorithm: sha256WithRSAEncryption
72:74:88:5a:db:ae:60:9a:48:04:f6:42:b1:4e:76:c8:53:d4:
c0:52:79:8f:75:1d:f3:74:0d:c0:4b:b9:88:ee:ce:ac:84:b3:
c0:81:67:56:7e:48:32:73:e5:5c:fa:54:5a:42:ff:8f:9c:a5:
62:0b:1a:f4:1c:ea:be:2c:43:5c:fb:72:26:96:41:28:c6:7a:
bb:b6:10:9e:0a:47:dc:20:e9:5b:c3:78:e3:99:63:97:bf:2b:
1c:98:22:17:4b:4e:0b:6c:07:83:c0:d6:b8:66:ef:94:26:48:
9e:ae:78:57:c2:a3:17:f8:53:ce:d6:68:f3:e7:38:fc:45:c9:
67:f0:1f:f0:b3:ba:ca:70:de:b9:ab:58:8e:a6:17:c3:8d:76:
6c:8a:c7:b1:70:0e:be:53:92:be:44:9a:2f:75:4d:0a:bd:e0:
89:08:f1:44:35:92:4a:24:bb:75:6e:9d:2e:9c:65:7f:af:15:
dc:99:8d:38:85:81:98:a2:9c:50:74:30:6b:d9:a4:b6:d6:c8:
3f:73:0a:3c:14:b4:88:c0:cf:28:5c:b3:78:60:b8:88:8b:fa:
1f:a6:3a:6b:42:a6:7c:08:7c:bd:12:e8:c2:d2:85:3e:1d:1c:
bf:a6:d0:f5:65:6a:5d:4b:43:5f:e3:98:a1:2b:c9:fe:44:52:
9a:4b:70:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:25:16 2026 by rpki-client