Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/aBDg5aGhtjIn8MUR_oRUr_BVQMo.roa
File: aBDg5aGhtjIn8MUR_oRUr_BVQMo.roa (raw, json)
Hash identifier: WNiqtJoGrVbqhBDa4u21KXJIoiwsgVX/IaLTdEK0gTI=
Subject key identifier: 68:10:E0:E5:A1:A1:B6:32:27:F0:C5:11:FE:84:54:AF:F0:55:40:CA
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A150D1E3ECBBEF005226D03C8190D59EE8
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/aBDg5aGhtjIn8MUR_oRUr_BVQMo.roa
Signing time: Sun 18 Oct 2026 21:01:34 +0000
ROA not before: Sun 18 Oct 2026 21:01:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218569
IP address blocks: 191.217.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:50:d1:e3:ec:bb:ef:00:52:26:d0:3c:81:90:d5:9e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 18 21:01:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6810e0e5a1a1b63227f0c511fe8454aff05540ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a1:fc:67:c8:43:39:cd:ce:ed:53:eb:6b:fc:
5f:b9:94:c2:6f:d7:06:b2:37:1a:30:52:00:6b:41:
2c:a5:a6:3e:50:29:c5:8e:f8:bc:a1:3f:97:f1:ef:
a6:8d:7c:a7:1e:21:4c:87:df:95:7c:67:60:ab:90:
aa:ea:9f:e4:76:41:5e:a1:28:d0:37:f2:0a:ce:56:
a0:ec:a7:7f:46:17:a1:a9:ae:58:a7:bc:0a:89:34:
e9:52:c6:de:a1:e7:d7:db:78:71:f6:38:35:60:be:
7b:b7:85:38:c6:8c:6e:bc:98:65:53:8b:d6:54:ad:
dd:24:6d:67:ac:a2:f6:19:59:19:1a:85:d6:22:3c:
bb:75:2b:c8:7a:98:d1:20:ae:5b:9d:c4:c5:bd:92:
64:7e:de:89:da:41:b3:d4:96:59:45:f8:ca:70:b3:
55:ba:c0:9f:4d:74:a1:b5:d5:e1:23:a7:7e:07:0c:
e6:16:ef:ea:8b:b7:d0:13:91:4f:75:76:7a:43:98:
cb:ae:98:cb:ed:8b:5c:e3:81:32:22:04:37:86:86:
0e:7f:a4:37:db:1e:1a:e0:d8:88:c8:f5:6e:a4:d1:
cd:2b:80:2b:c5:04:ef:f1:27:65:fe:6c:c9:8b:5a:
81:7a:a4:b9:fe:ca:ab:9d:e3:cd:e8:48:08:70:0f:
da:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:10:E0:E5:A1:A1:B6:32:27:F0:C5:11:FE:84:54:AF:F0:55:40:CA
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/aBDg5aGhtjIn8MUR_oRUr_BVQMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.217.235.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:a9:81:e5:45:04:4a:ec:ae:fc:4f:dd:1c:20:5e:7e:3a:80:
df:8f:73:00:36:be:d3:e0:f8:55:aa:fd:ae:79:b3:e0:22:f2:
d1:86:9f:88:6b:f7:d1:34:77:f2:8e:15:57:8a:eb:c6:b5:3a:
99:83:96:3a:83:53:1f:78:33:0e:63:c2:06:96:54:87:d6:13:
15:b5:80:6c:6a:b5:87:e2:84:53:78:31:fb:93:9f:b0:d7:82:
72:89:e6:40:dc:63:51:99:4e:07:fc:43:31:54:e6:fe:e5:73:
92:42:9c:9c:81:ee:59:3e:93:e2:2a:44:52:96:23:71:0a:ea:
b0:f1:79:d5:70:5d:c4:1d:90:b4:b9:5c:c6:d8:53:1d:3f:22:
e7:10:91:c1:8f:68:48:66:e3:e2:91:64:a6:09:80:9d:66:5c:
27:53:2d:1f:4a:3c:49:18:56:f5:5c:40:b3:61:d8:75:05:23:
11:51:4e:62:39:ff:61:62:60:7a:69:a2:1b:f6:91:48:51:28:
28:3e:18:49:85:2b:15:59:3d:f2:7d:33:2f:18:39:f9:b5:b0:
98:74:dc:a1:8b:c4:0e:56:32:fc:4b:e6:d7:b6:c3:80:90:cb:
d9:5e:6e:1f:0d:be:f6:cc:2b:c1:0c:ca:96:f3:2f:ce:28:32:
fc:61:c3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:14:11 2026 by rpki-client