Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/y1OlwTEQgFQhl8O7G2yKNt1u2Sc.roa
File: y1OlwTEQgFQhl8O7G2yKNt1u2Sc.roa (raw, json)
Hash identifier: L8JCojk1bW7uA+GBEMj/TxEpH9JC5Lvcnz1tOKlJ2C8=
Subject key identifier: CB:53:A5:C1:31:10:80:54:21:97:C3:BB:1B:6C:8A:36:DD:6E:D9:27
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019C7C1F9B1936382CB8091FD0E014F5792C
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/y1OlwTEQgFQhl8O7G2yKNt1u2Sc.roa
Signing time: Fri 20 Feb 2026 17:36:11 +0000
ROA not before: Fri 20 Feb 2026 17:36:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200733
IP address blocks: 144.31.126.0/24 maxlen: 24
144.31.230.0/24 maxlen: 24
144.31.249.0/24 maxlen: 24
150.241.64.0/24 maxlen: 24
193.23.194.0/24 maxlen: 24
193.23.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7c:1f:9b:19:36:38:2c:b8:09:1f:d0:e0:14:f5:79:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Feb 20 17:36:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb53a5c1311080542197c3bb1b6c8a36dd6ed927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c6:2b:ac:ee:87:df:99:f2:18:d1:9c:06:56:
b0:2b:e5:c5:45:71:3d:eb:82:13:aa:85:3b:41:fb:
44:66:7a:39:33:c9:8b:2e:16:fe:73:77:e3:f4:8a:
0f:8f:17:dd:d3:96:19:57:ea:eb:2d:e8:9d:21:4f:
8c:3b:83:71:1a:b1:01:4d:8d:f4:0a:6d:1c:ed:86:
42:93:bc:42:f5:d5:bd:5b:4f:60:77:48:61:fd:bd:
91:9d:09:eb:0b:26:4f:bd:20:78:ce:6d:11:03:f4:
04:f5:b2:b0:e2:cf:3f:1a:05:ac:50:cc:aa:b7:1d:
32:bc:7f:2c:e0:8f:37:14:f2:e1:08:74:5a:89:52:
c5:c5:ab:87:38:a1:05:64:1b:9b:19:b7:b9:50:8f:
bb:83:b9:50:bd:f0:8c:0c:17:43:6c:59:90:10:18:
61:78:6b:f1:e0:2d:9d:d3:4e:e2:5f:ec:0d:b2:8a:
8d:cd:e2:49:b1:25:55:c3:b1:ad:e2:d8:bf:d1:83:
95:5a:61:ac:f8:6d:fb:fe:d6:95:6e:87:eb:76:aa:
4e:e3:34:a3:ab:da:9c:2b:ce:8f:c1:4a:f6:c1:9e:
df:0c:ef:b9:17:f5:56:e1:14:09:fd:a9:6e:61:2d:
4f:3c:f2:92:fa:56:3c:20:ab:1b:12:49:2f:5f:eb:
15:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:53:A5:C1:31:10:80:54:21:97:C3:BB:1B:6C:8A:36:DD:6E:D9:27
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/y1OlwTEQgFQhl8O7G2yKNt1u2Sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.126.0/24
144.31.230.0/24
144.31.249.0/24
150.241.64.0/24
193.23.194.0/24
193.23.201.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:34:8c:70:3c:c3:3c:08:08:7b:6a:e7:de:32:3c:0c:ca:14:
04:ea:c4:e4:94:f7:8a:70:88:3b:bc:46:a5:cf:f1:e7:56:cb:
67:39:6a:34:5a:7c:fb:00:af:73:a6:52:66:1d:b8:6b:b5:0f:
73:34:ed:1e:98:0c:3f:c9:91:ec:fc:af:be:61:5e:7b:57:6f:
68:54:a1:c4:b5:c7:a7:ad:b1:fb:bb:93:66:18:55:bf:a0:e5:
68:88:17:b6:f7:68:33:8c:e4:57:cb:3a:9a:bb:04:cf:a6:6e:
4a:8d:2a:2e:af:5c:86:5d:10:05:d8:df:14:e3:09:80:89:ad:
66:3c:70:29:18:ed:c4:f6:81:16:9d:34:8a:95:c0:2c:e5:79:
d6:7b:aa:42:d8:ac:cf:fe:26:a2:19:1c:b5:2b:15:50:9e:5b:
ea:c5:c5:31:39:55:e7:bd:3d:65:33:db:9f:64:a1:f7:42:25:
76:93:54:8f:44:53:dd:3c:27:2d:0c:7e:ef:6f:4b:67:48:51:
d9:4f:97:7c:38:20:58:5d:7f:98:23:15:01:80:8e:18:64:68:
90:3c:35:0b:46:3a:8c:a3:bc:3a:ff:2f:98:56:e9:c9:31:14:
cb:dc:87:32:d3:8b:9b:39:9a:5e:07:5a:68:95:93:b0:f0:d6:
cc:47:d1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:14:36 2026 by rpki-client