Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/94U75mwTa99YEQx7__9CqknF4Jk.roa
File: 94U75mwTa99YEQx7__9CqknF4Jk.roa (raw, json)
Hash identifier: 4ft0b94Z2dVIMpUt1p/2V+pDxVGJ8Lf7oa0tD+Pz4N4=
Subject key identifier: F7:85:3B:E6:6C:13:6B:DF:58:11:0C:7B:FF:FF:42:AA:49:C5:E0:99
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A17EB53215ECC92103E0236BAD4C64C092
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/94U75mwTa99YEQx7__9CqknF4Jk.roa
Signing time: Tue 27 Oct 2026 18:52:46 +0000
ROA not before: Tue 27 Oct 2026 18:52:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218311
IP address blocks: 179.236.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:b5:32:15:ec:c9:21:03:e0:23:6b:ad:4c:64:c0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 27 18:52:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7853be66c136bdf58110c7bffff42aa49c5e099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d0:85:c3:73:1e:8d:3f:75:b4:e8:a2:5f:e1:
ba:c3:51:ec:db:06:0e:0f:f2:6c:68:4b:6b:67:d1:
72:92:d0:f7:a4:ee:85:d0:47:79:3d:43:e8:5e:30:
35:45:d1:67:63:dc:25:78:59:38:f2:ff:b4:37:18:
88:29:46:82:17:75:0d:87:a7:95:71:1f:20:85:b4:
09:e6:69:8a:e8:2f:83:5d:9f:3d:db:1c:18:06:23:
a9:05:24:c1:a7:48:1b:53:a6:0f:3e:d6:15:b7:b5:
99:50:64:38:36:04:d2:24:de:af:f0:55:74:fe:05:
6d:b9:b8:ea:d8:c6:1f:a1:fb:b5:b0:77:28:78:9e:
af:55:71:94:0a:26:52:41:f7:7b:1d:9e:3b:a5:cc:
c9:14:8e:6a:c9:55:b2:90:ef:19:36:f1:33:7f:91:
0f:ae:0f:7f:e5:7e:6e:85:af:bf:11:ff:f7:3b:b1:
ad:48:0a:97:55:d9:d7:31:e7:0d:02:71:98:94:8f:
86:01:7d:ee:fb:b6:fb:f1:81:6f:dc:6c:f6:64:7d:
68:22:fa:67:35:9e:0a:89:ad:90:c7:47:67:15:8c:
81:40:da:d5:d1:25:90:9d:07:c0:18:15:ab:87:1f:
f9:02:bc:3d:f1:40:51:37:d7:8a:91:b2:4d:73:59:
3e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:85:3B:E6:6C:13:6B:DF:58:11:0C:7B:FF:FF:42:AA:49:C5:E0:99
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/94U75mwTa99YEQx7__9CqknF4Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.236.129.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:0d:f2:57:a3:8a:a4:ec:2c:f7:ee:a8:9b:6f:96:32:b2:81:
6a:12:ad:31:90:e6:8b:a6:79:cc:91:f7:fe:d6:a5:68:a2:e6:
aa:7f:3e:46:78:3d:9e:11:99:e0:65:d9:f1:93:8c:99:89:52:
f6:25:e8:48:c2:2b:27:e3:6c:5f:8b:4e:ac:29:54:b6:08:d0:
50:a5:35:9a:a1:a5:49:47:4b:c4:e4:8e:20:13:54:74:8b:8e:
86:5c:98:79:8f:fd:e8:35:c7:2a:67:95:87:a5:6c:9f:da:d7:
09:97:f0:bd:02:b8:2e:5a:fa:37:c8:88:8a:1e:9d:27:76:4f:
0a:19:1c:d5:4c:bd:15:c5:d9:50:6a:55:90:34:a1:51:b9:1d:
48:f4:65:f2:75:06:3f:5e:fc:12:92:1e:88:31:d6:69:d0:1b:
55:13:49:ce:de:9e:ec:98:7d:df:2c:fb:ee:c8:f2:84:de:f9:
c8:b2:71:94:04:15:48:ff:ec:e2:87:29:0a:59:22:be:5d:df:
c2:7b:e8:05:8e:f7:30:16:17:ab:7b:ff:bd:bf:cc:4e:de:89:
7b:d5:22:90:45:c1:77:11:0f:cb:1d:79:e9:4c:11:6f:a8:c8:
e4:7c:21:b3:16:31:e2:2d:bd:a0:59:c5:dd:a5:75:65:b5:18:
64:d2:de:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaF+tTIV7MkhA+Aja61MZMCSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYxMDI3MTg1MjQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzg1M2JlNjZjMTM2YmRmNTgxMTBjN2JmZmZmNDJhYTQ5YzVlMDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttCFw3MejT91tOiiX+G6w1Hs2wYO
D/JsaEtrZ9FyktD3pO6F0Ed5PUPoXjA1RdFnY9wleFk48v+0NxiIKUaCF3UNh6eV
cR8ghbQJ5mmK6C+DXZ892xwYBiOpBSTBp0gbU6YPPtYVt7WZUGQ4NgTSJN6v8FV0
/gVtubjq2MYfofu1sHcoeJ6vVXGUCiZSQfd7HZ47pczJFI5qyVWykO8ZNvEzf5EP
rg9/5X5uha+/Ef/3O7GtSAqXVdnXMecNAnGYlI+GAX3u+7b78YFv3Gz2ZH1oIvpn
NZ4Kia2Qx0dnFYyBQNrV0SWQnQfAGBWrhx/5Arw98UBRN9eKkbJNc1k+CQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPeFO+ZsE2vfWBEMe///QqpJxeCZMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvOTRVNzVtd1RhOTlZRVF4N19fOUNxa25GNEprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAs+yBMA0G
CSqGSIb3DQEBCwUAA4IBAQAKDfJXo4qk7Cz37qibb5YysoFqEq0xkOaLpnnMkff+
1qVoouaqfz5GeD2eEZngZdnxk4yZiVL2JehIwisn42xfi06sKVS2CNBQpTWaoaVJ
R0vE5I4gE1R0i46GXJh5j/3oNccqZ5WHpWyf2tcJl/C9ArguWvo3yIiKHp0ndk8K
GRzVTL0VxdlQalWQNKFRuR1I9GXydQY/XvwSkh6IMdZp0BtVE0nO3p7smH3fLPvu
yPKE3vnIsnGUBBVI/+zihykKWSK+Xd/Ce+gFjvcwFhere/+9v8xO3ol71SKQRcF3
EQ/LHXnpTBFvqMjkfCGzFjHiLb2gWcXdpXVltRhk0t6O
-----END CERTIFICATE-----
Generated at Wed Nov 4 21:18:33 2026 by rpki-client