Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3e_Y2qRuHR9Qv4sfTjN6_CvG6RU.roa
File: 3e_Y2qRuHR9Qv4sfTjN6_CvG6RU.roa (raw, json)
Hash identifier: zBfn3aijUU1PSPWPyUwAl7N0CvDRVfFWqYVeP3kT7OU=
Subject key identifier: DD:EF:D8:DA:A4:6E:1D:1F:50:BF:8B:1F:4E:33:7A:FC:2B:C6:E9:15
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A17EFE7A8690CA6AABEAA4EF69502417BF
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3e_Y2qRuHR9Qv4sfTjN6_CvG6RU.roa
Signing time: Tue 27 Oct 2026 20:12:48 +0000
ROA not before: Tue 27 Oct 2026 20:12:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218897
IP address blocks: 201.8.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:fe:7a:86:90:ca:6a:ab:ea:a4:ef:69:50:24:17:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 27 20:12:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddefd8daa46e1d1f50bf8b1f4e337afc2bc6e915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f0:a2:e9:82:02:8f:eb:b0:eb:96:67:73:d5:
b6:e1:f7:0f:f0:85:d7:ba:f3:ac:1e:99:d4:f3:8c:
33:1f:80:51:d3:9c:12:b5:99:34:4b:16:1d:6d:ac:
71:c8:d5:1c:71:88:8a:2d:12:6f:05:5f:62:59:0f:
7c:54:c8:a5:fa:42:ae:5d:a5:0e:f8:61:30:46:bd:
1c:d3:dd:50:7f:97:81:63:b1:74:e7:b5:42:04:cb:
86:8d:b5:fa:9e:bf:a7:8e:18:fa:31:37:5b:01:ea:
5a:80:14:7f:10:bc:b5:7d:c8:a4:02:f2:07:43:72:
cd:e2:0a:01:a5:ca:89:00:c2:dd:26:27:b7:9d:48:
9a:ff:d5:ed:db:a5:61:b1:f3:d6:03:5b:71:a8:11:
92:b2:b6:07:e6:51:22:db:a8:71:c6:d8:23:a6:a0:
38:56:8d:5e:72:1e:9f:32:06:dd:b3:a1:5e:28:89:
ba:95:d0:c9:22:d1:5a:88:fd:73:51:0f:83:bb:d2:
69:66:cd:13:36:7f:49:32:31:95:d1:1b:d1:67:72:
36:14:d3:a1:d4:17:52:88:8d:f1:7b:28:fc:40:66:
00:c8:91:2e:f2:1b:82:61:93:eb:c3:5e:d3:88:ad:
46:6a:2b:e0:86:66:15:cd:32:8d:b6:b9:65:d2:04:
c2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EF:D8:DA:A4:6E:1D:1F:50:BF:8B:1F:4E:33:7A:FC:2B:C6:E9:15
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3e_Y2qRuHR9Qv4sfTjN6_CvG6RU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.8.86.0/24
Signature Algorithm: sha256WithRSAEncryption
83:56:73:7b:4f:6b:39:5c:d6:23:ca:21:d8:b5:6c:08:1a:78:
c2:5c:6f:0d:3c:d2:37:c9:06:44:53:f8:73:23:ba:1a:a0:6b:
1a:9f:a0:7b:a6:b9:ba:01:25:19:6a:44:27:4c:2e:bd:14:fd:
2e:58:53:fc:32:48:a9:1c:5d:cb:bd:25:c6:08:42:a8:1c:d2:
0c:ea:f9:fa:cb:17:cc:de:8e:0f:de:3c:ea:7a:6d:ee:59:28:
e7:b5:69:d3:bb:78:6b:dd:f0:59:08:df:1b:61:2e:26:6d:65:
c9:5b:31:37:3f:d3:bb:e5:f2:ae:de:b8:bf:95:30:ef:e3:cf:
1a:53:2c:af:c7:20:a4:59:87:a9:16:2f:58:96:31:1b:a1:ec:
5c:aa:9a:f5:c3:16:5d:0c:b2:a7:04:81:aa:fc:3e:97:df:00:
e8:50:b6:ac:db:1f:7a:9b:33:19:6e:fc:6f:73:ff:fd:77:41:
6a:3c:06:4c:8c:e6:d7:03:a3:fa:0c:71:08:30:6e:bd:5b:d0:
98:70:a3:4f:1a:a8:ed:81:0b:64:d5:01:65:ae:e5:53:34:e5:
b0:97:10:fa:e5:d8:db:97:f9:ab:95:55:89:a3:22:95:1b:28:
0b:84:b7:66:a7:13:78:91:c9:60:d4:6c:36:14:49:44:97:3c:
a2:7b:47:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:28:57 2026 by rpki-client