Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8iuPDA8ufvAqJgmzKJKqryY9eV8.roa
File: 8iuPDA8ufvAqJgmzKJKqryY9eV8.roa (raw, json)
Hash identifier: kkYXze6wLliEpWBz1EKQLj8JYnpFd0Z34x1JFd1Kiws=
Subject key identifier: F2:2B:8F:0C:0F:2E:7E:F0:2A:26:09:B3:28:92:AA:AF:26:3D:79:5F
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A19D06B77D66F2F0ED8DCFE3104A21D863
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8iuPDA8ufvAqJgmzKJKqryY9eV8.roa
Signing time: Mon 02 Nov 2026 16:10:25 +0000
ROA not before: Mon 02 Nov 2026 16:10:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213823
IP address blocks: 179.254.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:06:b7:7d:66:f2:f0:ed:8d:cf:e3:10:4a:21:d8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 2 16:10:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f22b8f0c0f2e7ef02a2609b32892aaaf263d795f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:78:f3:16:77:d6:2f:bc:d1:6b:a2:3b:bf:c9:
64:fe:d3:64:54:42:3c:c4:1c:3d:cb:0e:74:f6:38:
d9:6a:4f:b2:a1:ff:17:79:71:01:55:db:5f:fb:98:
d6:b7:7e:f3:15:47:8c:3e:a3:31:67:1d:41:42:e2:
9c:86:68:14:5d:10:2d:52:85:fe:ca:ce:90:06:1d:
cc:e1:34:e0:c3:38:78:1d:e8:cf:e8:22:9f:c7:92:
bf:da:08:7d:6f:6e:ce:ed:a8:2b:65:f3:49:b4:10:
07:5f:33:0c:85:07:55:c6:39:2b:2f:84:a8:0c:c7:
d3:82:bc:89:5f:87:26:89:2e:c3:a3:b8:ea:f5:a1:
88:a9:08:51:d3:00:19:a6:b2:52:6b:88:16:f3:b0:
d8:8f:f3:88:3c:77:12:0c:06:5f:6f:c9:a0:d3:08:
61:90:f6:d4:8f:de:68:5d:cb:ed:7b:fc:c3:4e:05:
a5:a3:b6:63:8c:19:0c:6c:17:f0:88:45:61:de:2a:
53:b8:f4:d8:5b:7f:48:6f:2d:51:02:74:36:4a:fe:
79:1a:f0:fd:8d:08:90:b7:be:1a:fe:64:b6:d3:1d:
63:fe:fb:0f:9a:85:7c:80:c8:a8:9c:5b:23:e3:49:
c4:69:d9:3b:2d:56:d5:43:ef:06:c1:bc:45:d0:66:
4c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2B:8F:0C:0F:2E:7E:F0:2A:26:09:B3:28:92:AA:AF:26:3D:79:5F
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8iuPDA8ufvAqJgmzKJKqryY9eV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.254.114.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:5a:d7:ef:72:d8:3e:ee:15:ac:f1:a8:9f:6f:59:0a:5c:ac:
28:41:f4:59:05:9b:5b:c3:08:66:0a:56:6a:56:c2:6f:21:88:
95:f5:1b:90:24:eb:33:8f:32:6a:13:3d:c0:97:82:78:45:47:
f3:be:d1:41:a2:b0:3e:b6:22:a8:75:28:b9:7c:55:db:c6:d5:
e0:60:50:7c:d7:24:b0:47:a7:52:d8:4c:96:d3:61:36:6b:8c:
5d:12:76:c5:59:ac:e5:54:5f:9f:52:0b:a4:22:16:8c:bb:0d:
77:d8:6b:90:17:7d:1c:6f:29:38:ca:6b:ad:5a:36:44:a1:12:
b0:a6:ce:83:13:ff:95:17:96:91:fc:24:12:4d:89:4f:6c:af:
80:55:d6:d1:6a:2f:2e:a3:97:e7:76:0f:9b:7a:67:ed:ee:6b:
a1:36:4a:d6:ab:19:11:96:f8:ab:c5:fc:aa:92:a7:56:60:f5:
3d:a2:3d:7c:3e:af:ac:94:3b:18:35:e8:97:4a:d7:76:0e:8a:
77:8b:61:c3:66:67:7d:2d:f9:cc:83:12:2a:5c:67:e3:b8:91:
3f:2f:77:76:15:0e:ea:03:9d:79:c1:47:7d:72:5e:55:33:80:
30:2f:5f:65:73:1e:c9:94:48:04:01:db:7d:41:75:4c:17:2b:
c5:f2:10:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:30:22 2026 by rpki-client