Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8gAbb4jHB-mqxawGjD2x5hZtoNM.roa
File: 8gAbb4jHB-mqxawGjD2x5hZtoNM.roa (raw, json)
Hash identifier: IJ98DPjY8EEO+VNibHck8lmcikJ7lk8mZniX4s4DKuc=
Subject key identifier: F2:00:1B:6F:88:C7:07:E9:AA:C5:AC:06:8C:3D:B1:E6:16:6D:A0:D3
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A18F075A0F63F9993CDF686E1CD436D793
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8gAbb4jHB-mqxawGjD2x5hZtoNM.roa
Signing time: Fri 30 Oct 2026 22:56:26 +0000
ROA not before: Fri 30 Oct 2026 22:56:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14315
IP address blocks: 177.202.119.0/24 maxlen: 24
179.254.92.0/24 maxlen: 24
201.58.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:07:5a:0f:63:f9:99:3c:df:68:6e:1c:d4:36:d7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 30 22:56:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2001b6f88c707e9aac5ac068c3db1e6166da0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:ab:8f:b1:af:43:97:39:19:c6:b0:95:ba:
94:75:77:25:21:15:45:61:52:02:bc:13:e7:5b:93:
8a:76:c6:32:a5:35:36:d1:98:34:21:38:0c:31:b3:
d6:99:b8:5c:91:2d:77:63:21:75:12:aa:40:6e:fe:
52:57:4d:8a:45:72:71:18:43:e2:96:d1:6f:b1:1c:
75:ac:ce:d4:0c:2e:70:9b:86:bb:10:ba:e6:a1:7c:
ec:20:90:51:79:54:0d:7c:c8:62:64:18:2a:ab:70:
26:49:ce:db:48:1e:9f:a6:89:9d:0c:f2:8a:72:da:
f2:c6:34:c8:d0:c0:2f:49:f3:06:a4:59:11:6d:9f:
b4:5b:9f:4d:f8:57:4a:33:5b:e5:36:1a:e5:f3:3b:
e2:22:71:50:b4:7a:31:b0:f4:92:af:d9:8e:3d:05:
08:36:19:c8:d8:ff:c5:e9:a6:e7:58:4a:04:65:64:
c0:1d:d8:35:88:55:20:16:f0:a0:ea:62:11:1f:b3:
68:1e:5a:5a:e1:1f:a2:dc:de:3e:46:82:81:d0:39:
bf:14:23:3a:9f:bf:94:aa:c5:23:ba:71:a2:5b:57:
72:af:d0:e9:1b:49:e6:02:11:33:ed:90:c6:39:03:
ca:22:ea:85:01:55:84:37:7e:d0:da:72:23:7b:6d:
96:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:00:1B:6F:88:C7:07:E9:AA:C5:AC:06:8C:3D:B1:E6:16:6D:A0:D3
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8gAbb4jHB-mqxawGjD2x5hZtoNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.202.119.0/24
179.254.92.0/24
201.58.151.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:27:2a:ce:3b:3d:3c:fd:f0:28:3e:ee:fa:c8:ab:18:4a:a0:
ca:4c:cf:27:d7:cd:e4:e7:d9:c6:7e:df:fa:36:14:53:fb:16:
d1:ec:03:16:2b:2d:26:b5:9c:8d:9c:d5:32:b1:a7:18:df:b3:
ac:fa:4e:a1:07:a6:5d:a4:81:ab:46:85:37:47:23:81:cf:1c:
fe:f3:5a:3d:6c:c7:90:79:7b:1b:92:87:75:e2:0b:ff:e4:55:
54:85:20:d5:5a:38:92:e7:e8:27:ad:b8:49:03:cd:5b:5b:70:
b0:a4:63:1a:c1:67:46:92:88:52:a7:31:7a:d2:14:91:b4:59:
97:54:a4:4e:49:95:f3:57:8b:76:a5:c3:a1:e8:9b:e1:35:cb:
58:18:66:45:19:96:30:a9:2b:31:e8:61:db:b2:4d:d6:17:89:
ce:96:a1:03:61:14:61:1b:38:47:0d:d3:14:10:98:fa:90:17:
a3:17:a5:ad:c8:e3:89:72:8a:9b:ae:94:f3:0b:17:13:0d:c5:
45:a8:61:0b:c6:58:4e:85:20:da:96:8f:56:bc:92:05:9b:b0:
22:4a:24:1a:d9:b1:04:9b:06:d8:26:29:48:20:10:12:97:ac:
44:9b:16:ac:df:87:ee:ce:cd:45:b5:7c:8b:5d:c2:be:64:50:
91:a2:7a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:01:42 2026 by rpki-client