Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0YqBUK1vJqRLdtNWh-ZM4gSafEU.roa
File: 0YqBUK1vJqRLdtNWh-ZM4gSafEU.roa (raw, json)
Hash identifier: ETEIbZgh5BcyegiR+fB+kY+T7ieh0VQS9SbT/hNw77s=
Subject key identifier: D1:8A:81:50:AD:6F:26:A4:4B:76:D3:56:87:E6:4C:E2:04:9A:7C:45
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A18887989E1CBE370A398F63E52A620EDF
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0YqBUK1vJqRLdtNWh-ZM4gSafEU.roa
Signing time: Thu 29 Oct 2026 16:39:10 +0000
ROA not before: Thu 29 Oct 2026 16:39:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34989
IP address blocks: 177.202.116.0/23 maxlen: 24
201.8.68.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:87:98:9e:1c:be:37:0a:39:8f:63:e5:2a:62:0e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 29 16:39:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d18a8150ad6f26a44b76d35687e64ce2049a7c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:40:68:2a:62:74:12:c6:27:31:e4:93:a4:
8f:99:db:29:02:7a:ef:ba:1d:70:94:51:f7:f5:86:
00:d6:5e:0f:06:7b:73:8b:d0:62:78:af:0a:02:89:
a8:30:64:e7:ea:3f:89:a7:42:92:4b:d7:46:93:66:
ff:1c:0d:17:ec:c5:3a:1c:7c:42:c6:97:7f:41:3d:
42:9e:40:b8:c4:83:00:88:c9:db:75:3b:75:03:13:
39:23:58:f2:92:53:21:b0:43:fa:3e:42:07:5d:0a:
63:c9:15:b1:46:52:07:3f:4e:47:52:7a:48:af:c7:
a4:08:90:ce:45:21:6d:99:b8:d0:ad:66:4a:f7:a2:
f9:1e:53:40:a8:f2:ae:30:cd:5f:d0:45:b0:f2:f0:
1d:46:40:3a:87:8f:d8:ea:6b:29:a1:ca:30:2c:42:
6c:46:be:68:7c:bc:ff:97:3e:fe:99:fe:97:d2:86:
10:59:63:f8:d5:37:e4:28:43:30:e4:c8:7a:cf:2c:
e3:73:3d:48:21:9f:9d:ee:bd:54:e2:b0:b9:a7:bc:
15:0a:d1:89:25:39:0b:a9:b9:bf:15:37:a7:62:02:
a3:22:76:b8:c6:ad:3b:d0:6a:d3:04:5f:ad:ec:c7:
8c:0c:a8:4b:10:91:56:ec:57:33:fd:d3:3e:3e:c5:
66:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8A:81:50:AD:6F:26:A4:4B:76:D3:56:87:E6:4C:E2:04:9A:7C:45
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0YqBUK1vJqRLdtNWh-ZM4gSafEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.202.116.0/23
201.8.68.0/23
Signature Algorithm: sha256WithRSAEncryption
68:24:1e:0c:65:8e:4c:33:37:4c:f0:13:71:95:2f:a7:4a:25:
2a:59:2a:53:69:d0:d1:a5:fa:0f:d6:bd:b3:0e:34:d6:7a:3b:
d0:9e:22:8a:17:1e:28:43:cb:24:a2:77:82:50:9e:a9:60:93:
41:6c:a4:72:56:f9:25:ba:3e:8e:65:b0:4b:38:6e:4c:40:be:
74:d8:d0:a7:50:9c:fa:82:7b:e9:46:9a:e1:5c:4f:e7:0e:c0:
85:fc:73:34:5f:07:ba:e4:f3:36:60:6d:69:f1:4f:40:fe:3b:
74:aa:4c:94:21:23:a0:a4:ea:cc:c5:1b:a8:99:c4:b8:13:ee:
24:13:4a:29:bd:60:61:27:ab:85:c3:05:7c:73:92:60:bf:90:
7e:e8:66:c2:b2:84:54:74:2a:ef:8b:75:32:3f:0e:31:58:33:
0c:0a:bb:f1:80:ec:e5:89:50:17:60:9a:da:d7:98:60:9f:39:
99:d2:cf:59:27:c5:5e:f4:31:9c:49:af:6e:27:f4:1b:18:46:
eb:1e:42:b6:7c:0d:80:53:74:87:f4:1d:98:12:cf:67:1a:26:
1f:be:cb:b8:09:7c:52:e7:0c:77:cd:06:4b:3f:3f:e7:4a:bd:
71:d2:1c:2a:c5:7e:51:a1:0e:bd:6f:e5:50:66:47:f5:db:00:
6b:26:07:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:44:11 2026 by rpki-client