Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8vR0LcKNB1bRMREAz7rLXJkVSwE.roa
File: 8vR0LcKNB1bRMREAz7rLXJkVSwE.roa (raw, json)
Hash identifier: gkM+0rOh1qsj5qelxW3OPHjsuD02VEotvW6X3KpJVWQ=
Subject key identifier: F2:F4:74:2D:C2:8D:07:56:D1:31:11:00:CF:BA:CB:5C:99:15:4B:01
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A19D06B9F1D7139E4E544A322BF468FB56
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8vR0LcKNB1bRMREAz7rLXJkVSwE.roa
Signing time: Mon 02 Nov 2026 16:10:26 +0000
ROA not before: Mon 02 Nov 2026 16:10:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219268
IP address blocks: 177.3.197.0/24 maxlen: 24
177.3.200.0/24 maxlen: 24
179.236.130.0/24 maxlen: 24
179.253.99.0/24 maxlen: 24
179.253.111.0/24 maxlen: 24
179.253.182.0/24 maxlen: 24
179.253.187.0/24 maxlen: 24
201.8.82.0/24 maxlen: 24
201.58.133.0/24 maxlen: 24
201.58.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:06:b9:f1:d7:13:9e:4e:54:4a:32:2b:f4:68:fb:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 2 16:10:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2f4742dc28d0756d1311100cfbacb5c99154b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d5:0f:2f:74:50:5d:6d:2f:5f:92:c4:29:be:
a7:32:ff:3a:92:00:a6:d9:62:c6:57:52:2b:0a:49:
03:2c:2b:9a:3f:04:c6:e1:99:29:ad:05:5a:86:02:
88:22:10:43:8c:cb:34:23:43:00:1a:36:6c:6e:48:
58:cb:24:b9:5b:dd:ff:e8:22:46:89:c5:bd:bf:81:
ac:f7:05:0d:0b:fa:04:c0:c1:bb:71:f7:6f:75:dd:
34:cf:55:49:ad:bf:16:7a:7b:bb:ac:df:52:73:58:
63:cf:de:26:86:c6:dc:86:5e:f4:a9:ea:9c:eb:13:
6b:5f:3b:7c:f0:f5:2d:96:dc:18:1f:96:54:c7:be:
42:ec:60:d2:29:a7:c9:e4:79:ea:0a:ea:a6:c9:4b:
59:e1:c9:f6:39:74:55:87:f7:61:9b:91:31:99:96:
34:a4:3f:73:62:d7:11:1b:0c:c8:21:8c:3b:95:07:
55:c5:6f:43:24:02:49:96:80:00:d0:e3:9d:d6:4c:
23:fc:7b:8a:87:fa:6f:1b:55:6e:9d:b8:b2:3c:d6:
8c:6b:5b:0d:a5:5e:d2:78:aa:d2:8d:ab:36:2d:87:
f2:ca:58:c8:5b:df:cd:95:17:b2:52:e7:66:9b:6f:
81:a5:c7:0b:b2:16:e1:5a:f0:e9:95:0e:7f:c8:92:
cd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F4:74:2D:C2:8D:07:56:D1:31:11:00:CF:BA:CB:5C:99:15:4B:01
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8vR0LcKNB1bRMREAz7rLXJkVSwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.3.197.0/24
177.3.200.0/24
179.236.130.0/24
179.253.99.0/24
179.253.111.0/24
179.253.182.0/24
179.253.187.0/24
201.8.82.0/24
201.58.133.0/24
201.58.135.0/24
Signature Algorithm: sha256WithRSAEncryption
99:64:be:a7:80:de:50:2f:48:43:bb:47:b7:22:38:73:66:54:
5c:37:fa:9f:7d:2f:34:9b:de:65:ae:bb:38:b8:83:ad:e5:ff:
8c:e6:e5:e2:7c:6d:43:04:ff:79:65:3a:24:b9:4a:38:cb:c6:
f8:bc:77:e0:cb:41:46:23:3d:c8:f8:92:54:2b:a4:5b:72:9c:
74:58:ad:af:fa:bb:c0:81:92:1e:45:76:01:e8:0e:a5:a4:49:
15:bb:26:0b:4a:0e:55:cf:b0:53:bb:02:81:4e:52:cb:1e:f9:
ba:25:f2:a1:27:90:a6:41:e3:f6:16:bb:92:23:ff:d7:31:fc:
02:4c:bf:fe:b0:43:27:67:9a:9f:f6:95:7a:bb:04:f4:5f:6d:
6e:ad:07:28:8e:76:d6:a9:cf:bc:fe:f3:43:a8:53:76:08:16:
bd:99:4f:93:e8:52:0a:39:18:6a:96:8b:b4:9a:b7:3f:d0:cb:
de:36:61:12:86:71:ac:00:d5:5e:49:11:6c:0d:44:ce:23:4e:
d4:32:69:79:5b:6a:e8:b7:c9:cc:f7:e7:25:db:9d:de:5b:10:
b5:79:4a:13:e4:ba:dd:e1:c7:c3:f5:5c:99:bf:3f:8c:dc:e5:
d1:48:2e:45:08:ac:aa:d5:1f:5d:c5:80:3c:e0:84:33:fb:69:
d3:fe:f9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:41:53 2026 by rpki-client