Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/SrnodoJl08YOlWKiRtOMZ2CrYRo.roa
File: SrnodoJl08YOlWKiRtOMZ2CrYRo.roa (raw, json)
Hash identifier: vN/y0wiyZg44nKgZ4jKX+af3Q8aaWhalNFxUicQR9+8=
Subject key identifier: 4A:B9:E8:76:82:65:D3:C6:0E:95:62:A2:46:D3:8C:67:60:AB:61:1A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0199EE1C5842E077854E5F4C4EF6C1CB9482
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/SrnodoJl08YOlWKiRtOMZ2CrYRo.roa
Signing time: Thu 16 Oct 2025 17:40:58 +0000
ROA not before: Thu 16 Oct 2025 17:40:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210457
IP address blocks: 144.31.25.0/24 maxlen: 24
144.31.221.0/24 maxlen: 24
193.23.199.0/24 maxlen: 24
193.23.209.0/24 maxlen: 24
193.23.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ee:1c:58:42:e0:77:85:4e:5f:4c:4e:f6:c1:cb:94:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 16 17:40:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ab9e8768265d3c60e9562a246d38c6760ab611a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:75:4d:d1:ab:69:47:18:6f:7d:1c:f7:78:2d:
a0:e4:3c:a6:fa:87:c4:98:3d:22:f8:c2:4f:58:e0:
e6:51:e7:0b:9b:de:a7:f9:4f:88:47:5f:b3:ca:13:
76:84:d2:94:07:59:03:6a:01:8c:fd:7d:e8:6a:8f:
2d:a1:af:27:45:c4:60:ff:1c:d2:cf:93:68:b1:26:
da:e4:62:5a:36:4e:c4:02:09:e2:d5:53:a2:be:78:
fb:0c:d6:1f:97:0d:ed:3c:04:49:c1:cf:77:ad:22:
b5:69:a5:7c:84:e9:a1:bd:35:11:92:5d:9d:e4:ed:
81:cc:21:aa:13:c1:17:f6:c9:2c:9c:84:7d:7c:22:
1d:67:0f:83:30:fc:f1:dc:5b:ff:dc:2a:e2:86:5a:
69:01:f8:3f:fe:b5:f9:99:a2:1b:cc:ab:77:31:44:
a8:0b:9d:ed:4a:62:84:bd:a5:e6:84:b5:79:9a:14:
f1:81:96:c7:74:43:6d:ec:30:08:5e:bc:2d:f3:69:
e2:34:83:40:44:f0:9b:04:f7:17:4c:40:d4:36:a5:
48:df:25:7f:3e:61:68:7c:bc:05:bd:ea:46:dc:d9:
ad:83:04:70:ad:83:5a:ef:85:22:c1:64:55:9e:08:
b6:c5:52:b2:00:ec:7b:5c:73:c6:18:7d:6f:de:4e:
9e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B9:E8:76:82:65:D3:C6:0E:95:62:A2:46:D3:8C:67:60:AB:61:1A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/SrnodoJl08YOlWKiRtOMZ2CrYRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.25.0/24
144.31.221.0/24
193.23.199.0/24
193.23.209.0/24
193.23.221.0/24
Signature Algorithm: sha256WithRSAEncryption
58:89:99:46:b7:8b:2c:20:51:ff:4d:b7:23:9c:11:59:ab:e6:
af:fc:6a:86:91:35:d1:4f:fb:4f:7a:84:ff:2b:fd:43:63:fc:
2d:1f:75:bd:06:43:33:3d:5b:f1:7b:8b:dd:65:32:eb:c1:58:
28:86:95:c0:eb:a8:5c:98:ee:b0:06:6d:24:63:da:79:1a:34:
c2:85:71:dd:6c:20:f6:77:03:78:83:eb:68:c6:3e:bc:53:8e:
e0:89:50:5a:fc:7c:3e:72:ab:5a:05:c3:42:4c:c5:15:e0:a9:
b3:cf:2d:53:86:6a:d4:6d:e4:5a:8e:d1:fa:14:8f:1a:8b:6a:
52:3a:d9:0d:80:80:6b:32:c1:5c:7b:2b:7f:53:f5:2e:99:1b:
3a:52:a2:80:32:ac:72:f1:fc:86:32:ec:df:e0:7e:71:1d:04:
58:5b:a3:c6:9c:01:bd:ea:5f:a7:58:b6:46:cd:21:90:f5:8b:
9a:ae:ed:a4:20:ff:21:6c:11:fb:9e:22:42:c5:bb:c8:97:f0:
d5:4c:81:8a:82:22:62:13:66:f8:ef:5c:f0:31:b3:0f:0c:36:
bb:63:a8:77:7e:71:58:4f:a8:8c:37:5b:99:dc:97:f9:dc:3e:
9d:e6:d3:3a:9c:e9:f1:ea:a1:09:28:83:cc:4c:3c:64:7d:5d:
dd:cc:5d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:41:05 2025 by rpki-client