Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ABRtPZDoMpbOydufC70nABu9biw.roa
File: ABRtPZDoMpbOydufC70nABu9biw.roa (raw, json)
Hash identifier: sIR1JZBBHb1BNAdcGq/Cr2fqZB1saZx8lselSOw8Q5E=
Subject key identifier: 00:14:6D:3D:90:E8:32:96:CE:C9:DB:9F:0B:BD:27:00:1B:BD:6E:2C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A188879AC782C3FB8C88AF154488B8F6EE
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ABRtPZDoMpbOydufC70nABu9biw.roa
Signing time: Thu 29 Oct 2026 16:39:10 +0000
ROA not before: Thu 29 Oct 2026 16:39:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219343
IP address blocks: 177.202.115.0/24 maxlen: 24
191.223.136.0/24 maxlen: 24
201.58.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:87:9a:c7:82:c3:fb:8c:88:af:15:44:88:b8:f6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 29 16:39:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00146d3d90e83296cec9db9f0bbd27001bbd6e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:07:29:af:d2:cb:ad:0f:ad:44:60:5a:a3:d3:
18:3e:5e:a4:b1:be:78:61:10:f4:a3:c1:1b:be:77:
73:1f:d3:70:8f:d3:70:6a:20:e3:b2:bd:69:3c:6a:
13:b5:ba:24:10:1f:c0:43:db:92:bd:c0:d9:25:f3:
1d:d5:7c:0a:05:44:1a:11:80:ad:19:68:c8:48:82:
83:13:91:eb:ae:01:ae:c0:f1:6b:b0:a2:55:8b:70:
32:44:62:77:4e:d6:68:45:b7:63:f7:55:bd:9f:41:
fc:b4:3a:36:cd:b3:dc:f6:f4:5c:69:ef:27:f6:ea:
31:3f:26:30:32:bc:84:31:55:16:2c:5f:57:40:6c:
4c:ce:aa:ca:77:e6:75:d6:d8:08:11:25:55:f9:88:
ac:52:93:00:12:89:bd:f9:9b:4d:5f:53:45:e2:ba:
a9:e1:1f:09:60:f9:ed:4e:48:9a:10:32:67:61:0e:
22:b8:ba:71:b5:51:01:af:c7:f8:e3:f9:8b:e5:9d:
03:53:31:fe:fb:a1:4a:4d:e8:36:3a:78:96:e6:d3:
e2:4c:4e:8b:d5:d0:03:69:2d:fe:12:cf:3f:20:a1:
5a:3c:22:54:34:a8:4b:f1:eb:e5:14:8f:24:4d:ef:
ae:94:35:07:b1:e6:f1:de:be:23:f7:42:41:e3:d1:
20:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:14:6D:3D:90:E8:32:96:CE:C9:DB:9F:0B:BD:27:00:1B:BD:6E:2C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ABRtPZDoMpbOydufC70nABu9biw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.202.115.0/24
191.223.136.0/24
201.58.136.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:56:28:c9:7b:0f:85:46:cf:0c:05:a5:21:7e:7e:b5:1c:73:
49:af:85:37:a7:50:53:a5:26:e7:6a:76:96:8c:25:fb:4c:65:
ca:bd:6a:51:88:4b:e3:6e:18:1a:7c:0d:6e:d4:59:a9:37:df:
f6:66:81:02:d7:4b:3a:89:21:65:56:cb:b9:56:6b:8f:a1:fc:
23:a8:4c:30:c2:ce:af:62:cd:b4:14:f0:ad:41:d4:cd:93:41:
df:03:ba:49:3b:90:4a:76:86:b6:19:be:50:31:58:04:68:6d:
1e:20:b2:b6:16:14:10:cf:72:06:53:e0:f1:14:c3:df:7f:67:
a0:54:1d:bb:a2:0a:0f:72:61:cf:95:cf:94:66:91:fc:8b:63:
56:c2:68:77:5a:96:8c:cc:af:c1:03:50:13:2a:d9:e1:d8:fe:
b0:a3:e8:51:c0:2d:32:30:97:a3:f4:5b:e3:ac:9b:8c:6b:e6:
23:c6:da:5e:a1:cd:9d:28:b1:7b:f1:62:21:36:cd:8b:ef:73:
f8:ac:61:22:58:f0:19:34:36:81:fa:2b:5e:05:6c:d2:75:5d:
b9:3f:95:f8:d9:e8:c2:ec:12:c4:f9:da:af:93:89:e4:6a:17:
ab:07:66:2b:32:f5:2c:31:6b:ed:90:e6:ba:ad:28:43:16:69:
66:96:09:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:47:02 2026 by rpki-client