Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ulP4sH7UNrluHAcrHbilqaLov3Q.roa
File: ulP4sH7UNrluHAcrHbilqaLov3Q.roa (raw, json)
Hash identifier: fR1hTd/gsBmaBMXkfaVQqfw6LgSP92SHHerPYFYRCRg=
Subject key identifier: BA:53:F8:B0:7E:D4:36:B9:6E:1C:07:2B:1D:B8:A5:A9:A2:E8:BF:74
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F203E0BDB79E0D8866CE29779C9471EF4
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ulP4sH7UNrluHAcrHbilqaLov3Q.roa
Signing time: Thu 02 Jul 2026 00:32:44 +0000
ROA not before: Thu 02 Jul 2026 00:32:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210654
IP address blocks: 144.31.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:20:3e:0b:db:79:e0:d8:86:6c:e2:97:79:c9:47:1e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 2 00:32:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba53f8b07ed436b96e1c072b1db8a5a9a2e8bf74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:09:51:0b:cf:2f:92:66:76:f3:b5:29:7f:d1:
d6:bf:23:ec:04:24:3a:0a:2f:eb:b1:39:29:ad:97:
47:e8:ea:65:42:77:e6:84:54:fb:db:fa:05:dd:a5:
1d:35:c8:bb:9e:b5:4d:af:dc:5c:2b:1b:34:87:28:
c7:d8:01:08:a8:b8:ec:9b:f7:85:0f:26:5c:bb:09:
7b:03:98:2f:43:df:ef:45:52:fd:a2:97:8f:65:b4:
cf:4a:5f:5d:f7:ee:e8:81:c9:f5:7d:15:89:a0:16:
7a:83:c0:dd:cb:74:dd:de:36:35:b5:3f:fc:5f:7f:
71:11:80:55:c0:b6:ea:14:57:40:8d:a4:6e:b3:f2:
82:80:57:16:c7:61:41:28:b4:0a:25:7d:41:4b:01:
e6:db:86:5b:fc:32:d3:f7:03:8b:8a:6e:79:4b:90:
6b:f0:81:ce:ae:2b:a2:c4:aa:bd:b3:c9:75:92:65:
e1:90:b7:99:7d:c9:fe:f7:82:22:ba:82:57:eb:4d:
96:5f:dc:18:48:83:d3:c3:77:49:a2:ba:62:38:96:
f0:07:99:f2:58:df:6d:c2:53:fc:76:e8:ec:89:f4:
50:3c:47:97:85:5b:53:9c:26:d9:92:be:1f:be:eb:
be:3a:58:8e:9a:8d:f0:97:30:4e:cf:48:06:d4:1c:
40:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:53:F8:B0:7E:D4:36:B9:6E:1C:07:2B:1D:B8:A5:A9:A2:E8:BF:74
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ulP4sH7UNrluHAcrHbilqaLov3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.172.0/22
Signature Algorithm: sha256WithRSAEncryption
53:56:1d:54:83:f1:cf:da:0b:06:c7:37:c8:9d:2e:38:6c:65:
65:35:7b:4f:66:c0:54:b3:07:af:57:6c:74:33:c2:73:5c:52:
2e:d2:e9:6e:5e:35:03:a7:ae:cd:e8:35:cc:e9:e4:5f:c6:0a:
65:e5:25:d5:66:2e:77:5d:c1:e6:1f:71:56:2c:87:c7:fd:f2:
a6:86:4b:c1:c4:0b:ae:82:ac:88:2e:a1:b3:4d:75:db:ce:fe:
02:d7:93:c1:c7:60:f2:99:80:51:f5:22:63:7f:9a:75:a4:ab:
42:1a:c8:b4:f4:a9:3b:ce:1a:55:b0:02:76:70:80:2f:cc:b2:
c1:73:e1:cf:71:47:d2:64:a5:e3:04:64:67:50:79:17:35:42:
06:08:c2:93:ed:c7:59:37:fe:f0:fd:1c:2d:bc:0f:b2:08:57:
12:2b:1b:5e:56:01:c3:4c:ee:76:4f:3b:e9:a9:dc:28:80:dd:
f6:80:71:94:ec:3c:9d:49:35:d4:f1:ce:6f:87:2a:2e:50:85:
de:3e:ea:c6:1a:51:36:81:4b:1b:78:60:1b:30:5e:95:b7:c3:
db:63:d7:9a:e3:ae:a5:47:e4:48:1a:5c:ff:b1:94:4f:f2:9b:
b7:c2:f2:1f:ed:c1:ca:4a:18:64:5a:2a:1a:21:e6:dd:c2:e0:
f3:64:d5:b6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8gPgvbeeDYhmzil3nJRx70MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNzAyMDAzMjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTUzZjhiMDdlZDQzNmI5NmUxYzA3MmIxZGI4YTVhOWEyZThiZjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1glRC88vkmZ287Upf9HWvyPsBCQ6
Ci/rsTkprZdH6OplQnfmhFT72/oF3aUdNci7nrVNr9xcKxs0hyjH2AEIqLjsm/eF
DyZcuwl7A5gvQ9/vRVL9opePZbTPSl9d9+7ogcn1fRWJoBZ6g8Ddy3Td3jY1tT/8
X39xEYBVwLbqFFdAjaRus/KCgFcWx2FBKLQKJX1BSwHm24Zb/DLT9wOLim55S5Br
8IHOriuixKq9s8l1kmXhkLeZfcn+94IiuoJX602WX9wYSIPTw3dJorpiOJbwB5ny
WN9twlP8dujsifRQPEeXhVtTnCbZkr4fvuu+OliOmo3wlzBOz0gG1BxACQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLpT+LB+1Da5bhwHKx24pami6L90MB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvdWxQNHNIN1VOcmx1SEFjckhiaWxxYUxvdjNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkB+sMA0G
CSqGSIb3DQEBCwUAA4IBAQBTVh1Ug/HP2gsGxzfInS44bGVlNXtPZsBUswevV2x0
M8JzXFIu0uluXjUDp67N6DXM6eRfxgpl5SXVZi53XcHmH3FWLIfH/fKmhkvBxAuu
gqyILqGzTXXbzv4C15PBx2DymYBR9SJjf5p1pKtCGsi09Kk7zhpVsAJ2cIAvzLLB
c+HPcUfSZKXjBGRnUHkXNUIGCMKT7cdZN/7w/RwtvA+yCFcSKxteVgHDTO52Tzvp
qdwogN32gHGU7DydSTXU8c5vhyouUIXePurGGlE2gUsbeGAbMF6Vt8PbY9ea466l
R+RIGlz/sZRP8pu3wvIf7cHKShhkWioaIebdwuDzZNW2
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:28 2026 by rpki-client