Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/aWF0ec1Zpd1ucjk3TCWeqwbF9T4.roa
File: aWF0ec1Zpd1ucjk3TCWeqwbF9T4.roa (raw, json)
Hash identifier: 7PmQmHWXx57SM9L2WyrIMEg9p03mEbeipl/+Cg6fPLk=
Subject key identifier: 69:61:74:79:CD:59:A5:DD:6E:72:39:37:4C:25:9E:AB:06:C5:F5:3E
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A140F23D1B450FFCC13F419ACCB5109DF1
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/aWF0ec1Zpd1ucjk3TCWeqwbF9T4.roa
Signing time: Thu 15 Oct 2026 19:02:59 +0000
ROA not before: Thu 15 Oct 2026 19:02:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214647
IP address blocks: 179.236.136.0/24 maxlen: 24
179.236.137.0/24 maxlen: 24
179.236.138.0/24 maxlen: 24
201.58.140.0/24 maxlen: 24
201.58.141.0/24 maxlen: 24
201.58.142.0/24 maxlen: 24
201.58.143.0/24 maxlen: 24
201.58.144.0/24 maxlen: 24
201.58.145.0/24 maxlen: 24
201.58.146.0/24 maxlen: 24
201.58.147.0/24 maxlen: 24
201.58.148.0/24 maxlen: 24
201.58.149.0/24 maxlen: 24
201.58.157.0/24 maxlen: 24
201.58.164.0/24 maxlen: 24
201.58.165.0/24 maxlen: 24
201.58.166.0/24 maxlen: 24
201.58.167.0/24 maxlen: 24
201.58.168.0/24 maxlen: 24
201.58.169.0/24 maxlen: 24
201.58.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:f2:3d:1b:45:0f:fc:c1:3f:41:9a:cc:b5:10:9d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 15 19:02:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69617479cd59a5dd6e7239374c259eab06c5f53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8c:d9:24:fa:78:3b:9e:d6:a4:6e:5e:f9:a0:
83:0e:35:3d:50:bd:41:06:a1:47:1e:73:72:0f:5c:
1b:53:fb:f4:bd:f4:2a:47:66:d5:2c:af:bd:29:8e:
64:9b:c8:82:49:3f:20:14:10:13:17:b1:96:c5:13:
c4:69:cc:b0:1f:25:9d:c7:f2:83:b7:22:38:d6:e0:
4a:bd:46:e0:78:85:8e:47:3d:6e:ae:71:e0:10:65:
fc:54:98:2d:64:f3:0f:18:e3:9d:9a:26:8b:db:f8:
89:05:df:85:fd:a9:ba:ae:42:3a:70:73:21:79:d9:
db:6f:94:35:cb:87:57:8a:55:f0:d5:97:ed:64:3b:
86:61:79:ac:df:79:05:29:23:77:99:e9:dc:02:73:
2b:1c:b3:33:4b:68:9e:52:02:08:71:78:fd:40:f8:
e9:97:2c:38:6f:d8:79:8c:b1:6f:bf:30:02:f5:69:
ab:85:10:cf:78:6a:1e:70:45:bc:1a:be:a5:9e:1f:
0a:06:3c:50:b6:73:59:f0:21:c7:57:87:9f:74:d6:
77:6f:a9:46:4b:b6:7b:f2:ea:49:c1:da:07:77:aa:
e6:13:6d:24:7e:0a:f0:08:12:a1:52:6f:5f:87:e8:
c0:a5:c2:f5:29:7b:05:67:2d:4b:80:c7:e1:6c:fc:
75:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:61:74:79:CD:59:A5:DD:6E:72:39:37:4C:25:9E:AB:06:C5:F5:3E
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/aWF0ec1Zpd1ucjk3TCWeqwbF9T4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.236.136.0-179.236.138.255
201.58.140.0-201.58.149.255
201.58.157.0/24
201.58.164.0-201.58.170.255
Signature Algorithm: sha256WithRSAEncryption
09:7f:98:40:ab:97:12:5d:95:5b:ce:22:4c:b5:83:af:b1:5a:
86:45:0c:b8:51:ea:e0:03:d4:a5:04:0d:b9:04:5e:4c:d7:b3:
98:d0:8e:a6:8b:e3:c2:c2:bb:2f:8d:2a:3b:7e:58:ed:d7:32:
e2:0e:20:67:c9:81:a6:b4:61:a0:bf:09:e8:e0:f1:4b:72:31:
d7:a6:7b:08:9a:f5:ab:dc:08:f9:62:cd:41:aa:bc:ba:87:bf:
5e:8d:6c:77:f3:23:90:7e:2c:ee:38:f3:00:9c:a9:e0:5e:e7:
0d:df:b7:78:a9:0d:9f:81:2e:d1:e0:3b:15:e5:f6:a8:96:bb:
a7:26:57:cb:5c:5c:16:da:2c:cb:f5:86:15:68:04:fd:15:c9:
7d:20:34:6d:0b:d0:25:a7:5f:6f:b4:af:c9:33:0c:bd:0b:77:
cd:a8:4b:04:c4:a6:62:f9:b7:fe:ad:fc:f0:50:3d:b8:4d:8c:
0f:75:6e:f4:8d:ca:32:1c:95:9f:4e:de:6a:8f:25:a6:b6:05:
4b:cc:4b:3e:f9:08:3f:2b:e9:a3:d5:90:0f:03:71:1c:47:48:
c7:3d:92:c4:d1:38:02:da:b1:60:2b:44:ca:a6:2b:ff:57:b6:
e1:8c:ee:82:1e:73:c0:bc:45:45:68:22:7c:30:b3:5b:f4:0a:
62:7c:97:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:08:34 2026 by rpki-client