Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5TnzIbUZzOTTZ8HXacxKy13OiYY.roa
File: 5TnzIbUZzOTTZ8HXacxKy13OiYY.roa (raw, json)
Hash identifier: NHeE5Z7cAm/aYhIO848tf/zFujerbLn5snRU7CC2QJI=
Subject key identifier: E5:39:F3:21:B5:19:CC:E4:D3:67:C1:D7:69:CC:4A:CB:5D:CE:89:86
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A145B0C4EA14D776AF7262CDFDFA48F87E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5TnzIbUZzOTTZ8HXacxKy13OiYY.roa
Signing time: Fri 16 Oct 2026 17:09:34 +0000
ROA not before: Fri 16 Oct 2026 17:09:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218483
IP address blocks: 179.253.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:b0:c4:ea:14:d7:76:af:72:62:cd:fd:fa:48:f8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 16 17:09:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e539f321b519cce4d367c1d769cc4acb5dce8986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3f:50:47:f2:cb:79:93:70:c8:6b:a9:18:eb:
69:2f:69:f0:c6:4a:ce:9f:9c:cf:00:07:27:61:76:
18:59:da:bc:b6:0d:65:ec:30:7b:c7:72:f9:9e:24:
09:b4:aa:92:ed:14:35:f3:cd:36:a8:bc:f3:34:4b:
a9:02:94:5a:1a:9b:37:14:c0:54:ba:14:68:32:72:
b2:8a:04:38:b3:20:5d:52:1e:38:47:bd:92:8e:07:
6d:f2:9e:5a:64:e5:77:59:3b:41:12:cd:30:15:b8:
dd:01:69:0b:b8:2f:53:f3:28:78:7e:d0:e8:35:c4:
17:45:c2:34:5a:7f:5c:95:04:8d:54:5e:eb:90:01:
7b:7c:5a:60:91:2f:7d:44:51:5e:9d:c9:be:aa:8b:
6c:2d:a1:f6:ea:63:41:a3:ad:ae:7d:9e:b1:47:ab:
ef:1d:29:e6:7c:99:b4:d3:53:4d:f8:4f:c6:f0:36:
43:a6:c3:be:8e:00:58:8d:18:39:88:60:8e:35:4c:
90:5f:e9:54:5f:93:67:7c:d1:23:e9:d9:d0:d5:fe:
46:78:7a:46:e4:1d:a7:67:2a:26:e8:18:93:59:dd:
8e:a9:83:01:01:45:5b:f0:46:19:85:cc:9d:a6:15:
57:fa:cb:25:6a:2c:ca:d2:ed:8f:27:1d:ba:cf:b5:
f4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:39:F3:21:B5:19:CC:E4:D3:67:C1:D7:69:CC:4A:CB:5D:CE:89:86
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5TnzIbUZzOTTZ8HXacxKy13OiYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.253.180.0/24
Signature Algorithm: sha256WithRSAEncryption
43:c5:d3:9f:0d:32:9d:f9:2f:d7:46:82:53:c9:a1:f0:92:e9:
45:ac:44:5f:9b:2c:11:48:77:c8:ab:c4:c9:35:eb:d5:c0:1d:
10:77:29:c4:c8:71:29:0f:cc:42:ed:e5:65:0d:68:af:a2:a7:
cd:85:36:cb:21:05:b0:94:e9:d5:df:96:93:47:df:71:61:da:
8b:82:c1:cc:24:6a:9d:86:00:3a:39:72:22:fd:7e:9d:88:41:
c1:5f:58:67:40:e8:c7:85:c0:13:b2:99:8b:62:ce:a8:1f:e7:
2a:fe:52:38:91:d8:15:a4:17:4c:72:55:f4:f1:01:ca:c1:47:
e9:18:1b:c6:2b:73:6b:ae:50:66:26:95:c8:c3:20:a5:90:2f:
e2:86:5f:38:81:48:f7:26:6b:76:4a:80:bc:72:50:cc:26:4e:
0d:f7:63:41:93:e4:87:e0:13:54:fe:29:a9:de:21:28:66:d9:
a4:7e:4d:2f:a1:8e:73:26:fe:53:49:25:08:c8:9a:c5:f1:22:
29:aa:f5:28:89:20:33:1b:14:bd:12:a5:d6:b2:70:c2:46:50:
87:51:8f:56:63:81:27:9f:fc:ab:dd:ac:81:3e:76:42:cc:01:
bb:18:9b:06:bf:f1:ce:18:4e:48:49:bb:29:1c:c5:3f:c5:a2:
27:d0:64:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:47:35 2026 by rpki-client