Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wSw4XEV-J3PsphDvvk19LtbXpUw.roa
File: wSw4XEV-J3PsphDvvk19LtbXpUw.roa (raw, json)
Hash identifier: qP38Ao0y/GaPtMgLC88eO56hXxvdqADQCCH/dLcJcxA=
Subject key identifier: C1:2C:38:5C:45:7E:27:73:EC:A6:10:EF:BE:4D:7D:2E:D6:D7:A5:4C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E040F62CC2CBB3136EF424F84B95C35F3
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wSw4XEV-J3PsphDvvk19LtbXpUw.roa
Signing time: Thu 07 May 2026 20:09:37 +0000
ROA not before: Thu 07 May 2026 20:09:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208905
IP address blocks: 144.31.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:04:0f:62:cc:2c:bb:31:36:ef:42:4f:84:b9:5c:35:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 7 20:09:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c12c385c457e2773eca610efbe4d7d2ed6d7a54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:e2:5f:3a:d9:b2:9e:c6:d3:d5:54:03:9c:
cd:94:4d:9c:ad:6a:09:66:d0:3e:c2:a6:f4:1f:c0:
ab:a1:40:68:07:a8:52:c5:6c:7b:01:34:1b:e2:29:
40:38:dd:ef:67:fb:dc:64:83:b6:2b:28:1c:fc:ff:
94:45:7e:93:8a:c8:33:c4:30:3a:04:16:ac:b5:70:
db:6b:65:d3:a1:40:df:73:a8:0d:48:be:c0:6a:f8:
d7:d4:19:b6:f0:0d:f5:8a:f9:0e:cb:16:7b:91:71:
33:2d:ce:55:01:23:a9:35:dd:1f:94:3f:9d:cf:72:
82:b0:e3:81:87:ca:84:fe:ec:7c:f8:fe:10:36:14:
f4:45:a4:8c:f7:40:cc:c1:0e:0c:40:11:d7:1b:24:
ea:f4:5b:a0:5f:20:44:a9:10:41:84:d3:2e:5c:09:
cb:c4:18:2c:32:08:d3:0e:cf:0f:ab:cc:d6:41:7f:
5a:40:04:06:aa:4d:d5:0f:7f:61:9c:6f:a3:1d:a9:
07:e7:25:a7:bd:65:9f:9a:7f:42:42:fd:af:f3:31:
25:f2:ac:ca:d4:6a:0f:03:0d:bb:a9:4d:68:07:73:
ea:a7:ee:25:a9:cd:3f:6b:33:8f:50:31:59:0c:12:
77:e3:4b:c2:ae:bb:eb:cd:43:ee:fd:86:e7:6d:f7:
6e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2C:38:5C:45:7E:27:73:EC:A6:10:EF:BE:4D:7D:2E:D6:D7:A5:4C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wSw4XEV-J3PsphDvvk19LtbXpUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.37.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:84:13:8f:60:63:85:61:76:c8:fe:01:5e:ab:a5:5d:c1:3d:
72:3f:3f:f7:eb:06:06:92:87:85:6c:ca:1d:72:88:92:67:ed:
3a:03:25:ee:7b:e4:21:ef:a3:85:3f:fc:8d:a9:91:d7:10:b9:
e6:1e:42:47:0e:ad:da:28:32:fe:e5:de:a3:fb:8b:e3:22:8e:
51:ee:b3:17:1a:43:d1:39:44:1a:ee:e1:b2:be:ce:0b:fc:41:
21:76:23:ad:be:9f:6b:72:a6:7d:8e:35:65:79:2f:49:e8:a4:
df:64:fd:50:9f:5f:e7:66:be:16:e3:5a:95:21:ec:1d:60:5a:
12:a7:15:b1:66:0d:64:d5:8f:06:09:03:ec:c4:fb:f4:24:77:
f8:6a:79:3a:f4:bc:5a:ef:b4:e1:ea:88:c4:98:e6:b1:ce:f5:
af:5f:60:11:db:ae:22:34:16:53:59:b1:6a:66:43:99:68:5b:
c1:a9:72:a9:aa:fc:b5:14:77:4a:c0:94:4f:80:9b:5c:83:a5:
f7:8f:bc:7e:5c:ec:56:72:4d:e2:8a:fc:10:d4:79:fe:95:31:
97:f4:2b:01:d9:0e:26:1a:53:de:ab:ef:4f:85:4c:de:ba:51:
44:cf:d3:70:6a:1e:c6:22:0a:1a:0b:40:78:b2:dd:fa:76:32:
dc:5d:31:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:04 2026 by rpki-client