Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7J8YecZtiIflbtcMJxpZxecV_fo.roa
File: 7J8YecZtiIflbtcMJxpZxecV_fo.roa (raw, json)
Hash identifier: FLZFZWnPi1oJhkxHAI5CNGmMJV1AQQRBSv7K0ZG0amI=
Subject key identifier: EC:9F:18:79:C6:6D:88:87:E5:6E:D7:0C:27:1A:59:C5:E7:15:FD:FA
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F5D935727B4D723F559E41333846C53CC
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7J8YecZtiIflbtcMJxpZxecV_fo.roa
Signing time: Mon 13 Jul 2026 22:22:44 +0000
ROA not before: Mon 13 Jul 2026 22:22:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205089
IP address blocks: 144.31.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5d:93:57:27:b4:d7:23:f5:59:e4:13:33:84:6c:53:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 13 22:22:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec9f1879c66d8887e56ed70c271a59c5e715fdfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:82:71:e3:e9:82:5a:35:34:da:70:f1:1f:7e:
a4:27:49:89:f7:95:bc:db:b8:d8:15:17:80:85:85:
2b:24:17:68:c3:fd:e8:7d:72:2d:80:c8:1c:7c:79:
35:7f:f3:f6:06:28:b8:93:2a:c1:a9:48:ee:73:9d:
b3:c8:57:fa:6f:ea:c6:62:33:72:8c:a9:dd:4f:a4:
6f:08:fc:96:21:bd:4f:f6:48:00:95:4a:5e:60:74:
9c:ed:77:0a:d1:88:ce:33:eb:d3:47:d7:e3:d4:dd:
be:f1:c8:7e:c9:1e:99:f4:07:5a:4a:1e:6a:e4:3f:
1c:d3:18:49:fb:0d:9a:39:d5:5c:c5:f9:c0:1b:9f:
e7:c2:98:13:1f:0d:5c:34:6b:a6:68:e4:98:51:48:
40:b6:5a:9d:20:53:8b:a0:75:5c:49:f4:4c:54:f2:
23:65:79:03:32:01:5a:f9:8f:3d:6c:08:28:67:74:
ab:51:a5:23:91:08:5d:51:a0:13:ef:0a:c7:7d:75:
ac:bd:55:6c:d6:5a:47:a3:4f:29:4c:09:0b:df:71:
25:3b:0c:6e:97:d7:d2:4e:8e:f0:b1:13:a7:db:ad:
3c:f6:24:b4:71:4f:ff:cc:c9:0d:a9:94:b4:07:46:
cf:07:b6:05:d3:4e:84:c8:47:2b:a7:c8:00:e6:17:
ae:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9F:18:79:C6:6D:88:87:E5:6E:D7:0C:27:1A:59:C5:E7:15:FD:FA
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7J8YecZtiIflbtcMJxpZxecV_fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.24.0/24
Signature Algorithm: sha256WithRSAEncryption
29:a2:f9:a9:32:ad:91:19:e6:bb:ed:f5:d2:95:5a:9a:af:c5:
a7:3a:e3:4d:83:de:05:4b:9c:29:33:04:57:77:f4:bc:51:83:
e9:5a:8f:0b:70:3e:64:99:59:f2:ea:31:e6:92:74:25:45:02:
b3:6f:cb:3d:d5:c8:96:f6:98:1d:56:64:19:d8:f0:e0:25:dc:
9f:66:c5:54:1c:66:de:22:9b:8f:27:a6:40:1a:39:e3:35:61:
87:cf:09:55:b0:e3:9b:89:a0:45:7d:a5:f3:59:7d:63:f4:41:
94:a6:14:d5:a6:25:a6:03:10:c0:f1:c2:6c:34:88:f7:65:c1:
c5:9c:b0:d3:47:c7:ea:b6:06:1a:48:a4:82:59:ea:9c:41:f8:
66:eb:d0:d2:45:54:9a:2a:65:7a:65:d8:81:8e:36:03:b4:d0:
e8:4f:32:67:95:42:fd:87:41:8f:d3:9d:be:a0:73:de:12:01:
b0:cc:28:af:a1:7f:51:ed:d2:be:3e:b8:a8:79:0f:fc:47:c6:
5c:db:6e:82:dc:0a:b6:51:69:ee:c4:53:4e:a4:47:00:ee:5f:
2f:9a:7f:3d:2e:b2:7b:59:71:f3:15:53:d5:64:e4:78:e5:d1:
19:63:45:36:d6:f9:57:f2:a5:62:33:2a:40:86:25:14:73:b6:
17:07:ba:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:24 2026 by rpki-client