Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wCJevHAyM9z050n4h_2B2UjP9Qw.roa
File: wCJevHAyM9z050n4h_2B2UjP9Qw.roa (raw, json)
Hash identifier: 5oK2luRtyNgIJJPsVf8K1gewjr5k4ClVD0dmW8h8lzc=
Subject key identifier: C0:22:5E:BC:70:32:33:DC:F4:E7:49:F8:87:FD:81:D9:48:CF:F5:0C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D880F0C04D45853663EBBC7A53D8CE690
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wCJevHAyM9z050n4h_2B2UjP9Qw.roa
Signing time: Mon 13 Apr 2026 18:16:20 +0000
ROA not before: Mon 13 Apr 2026 18:16:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3320
IP address blocks: 144.31.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:88:0f:0c:04:d4:58:53:66:3e:bb:c7:a5:3d:8c:e6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 13 18:16:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0225ebc703233dcf4e749f887fd81d948cff50c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:86:dc:92:a4:60:18:a5:a9:cf:27:40:81:9e:
50:6a:4e:79:67:90:6a:8c:f4:29:d5:ad:43:e8:2d:
fb:0f:d4:95:a3:fe:e5:9b:8f:32:f0:59:c0:fe:33:
fe:a6:ed:ef:e7:8f:a4:bf:dc:3c:ee:3e:bc:d4:4c:
ef:74:d0:9d:13:87:b9:6a:11:39:70:1d:63:2b:bd:
47:25:38:8b:a6:e4:35:83:b5:49:75:ee:f1:68:df:
99:0e:38:c4:32:59:16:27:aa:2c:6d:b2:5b:ae:ea:
1f:96:bb:30:dd:c7:86:00:b2:6d:50:3e:2c:6a:72:
ae:b6:8a:01:df:f7:bb:70:16:93:8d:b4:42:fb:69:
fa:a0:7a:d7:c2:5b:18:0f:e2:6f:17:4c:4c:47:03:
af:bf:4e:24:35:ed:65:16:48:d5:af:6a:43:93:4b:
38:00:e3:fd:a8:88:9d:26:fb:55:ea:02:d4:da:e1:
ef:51:a9:f2:69:12:ca:84:99:67:35:e8:20:a1:72:
e6:d2:61:7f:a6:dc:f6:70:6f:d8:7f:5f:8d:1d:a3:
bc:75:2f:f3:ed:8e:33:5f:04:60:a5:7d:0a:9a:f5:
37:cd:27:ca:43:c1:6a:79:97:1e:ee:94:ff:4a:cb:
13:3b:90:11:b1:75:e4:ce:8c:6a:36:09:44:35:23:
bb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:22:5E:BC:70:32:33:DC:F4:E7:49:F8:87:FD:81:D9:48:CF:F5:0C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wCJevHAyM9z050n4h_2B2UjP9Qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.145.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:b2:41:f2:04:13:e8:06:2e:fb:07:a8:e4:3a:b8:a1:10:f3:
ff:9b:5f:4c:72:7e:3f:ea:db:3d:7d:5a:97:96:b1:ea:8e:6b:
4e:81:4b:da:e0:82:61:ab:bc:77:6d:a9:cf:71:d6:c8:4d:9e:
26:9f:e0:55:5e:34:b4:65:c4:eb:ed:5c:ad:0d:d7:a6:d3:b8:
b0:49:4f:85:8b:a4:63:2c:e1:9f:0b:6d:dd:42:eb:68:25:8a:
c2:3a:ab:ed:4d:91:e4:2d:30:b2:e8:98:29:a1:d5:fd:f8:02:
c4:92:65:e7:2a:db:7b:11:a4:7e:57:c1:1f:cd:9d:6c:04:78:
62:69:ca:ad:3e:4a:54:a0:44:27:af:fe:58:29:1e:fe:d0:76:
83:46:89:a2:52:b2:83:90:2b:84:8f:9d:b0:78:47:e2:6c:58:
48:1b:b0:ca:94:f2:a8:39:d9:8d:77:e4:85:c4:36:bf:7f:7c:
0b:55:76:b7:0f:22:a4:26:13:ef:ea:27:b4:d6:14:48:a5:49:
7b:02:25:a8:38:0a:01:d7:98:db:08:ff:c2:57:ef:0f:2d:e2:
a4:51:c8:fb:66:eb:1a:80:77:64:58:b0:c4:3d:09:52:46:6f:
9f:db:e2:60:69:95:0a:3a:41:da:cd:bc:fd:7a:11:a4:25:73:
61:b3:b5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:28:58 2026 by rpki-client