Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/CATk07fAJ8hdJqENCXFr2-_XcFI.roa
File: CATk07fAJ8hdJqENCXFr2-_XcFI.roa (raw, json)
Hash identifier: GfFJ2cUCvtT1Q2KyNU44Ur5FmypsmSgW4g2al1mj9cQ=
Subject key identifier: 08:04:E4:D3:B7:C0:27:C8:5D:26:A1:0D:09:71:6B:DB:EF:D7:70:52
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A016AA3600D4F1A8AEB42EB393FB79D775
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/CATk07fAJ8hdJqENCXFr2-_XcFI.roa
Signing time: Tue 18 Aug 2026 20:57:28 +0000
ROA not before: Tue 18 Aug 2026 20:57:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47690
IP address blocks: 179.254.83.0/24 maxlen: 24
179.254.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:16:aa:36:00:d4:f1:a8:ae:b4:2e:b3:93:fb:79:d7:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 18 20:57:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0804e4d3b7c027c85d26a10d09716bdbefd77052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:56:02:0b:b4:26:f2:0d:21:53:db:4b:f7:
da:d5:f6:7f:e1:d9:9f:87:93:ed:2c:c3:fc:fd:4e:
6f:8c:af:e1:05:c3:4a:3c:0a:43:e1:d9:c4:bd:06:
f6:77:e2:eb:85:e3:dc:16:9e:60:3d:3a:0d:40:b8:
17:4e:94:b3:ea:48:4c:74:d7:50:7c:4a:0b:60:95:
2d:0a:0b:27:d1:8f:6b:e5:7d:83:16:b2:7a:0f:de:
01:0a:99:7a:53:4e:83:98:a4:b7:a4:db:21:4c:e2:
7e:f5:66:a5:da:1a:4f:33:fd:38:0b:5f:9d:9f:01:
52:e6:0c:eb:e6:a4:40:48:eb:1a:0f:89:44:29:e7:
32:18:32:1e:e8:4f:9c:fd:f1:b2:ea:49:d7:9b:af:
82:29:7c:a5:9e:1f:11:42:38:28:36:33:86:9a:a1:
0e:1d:f7:b8:e0:52:f6:d4:47:e4:7b:b0:66:59:70:
87:55:c3:40:40:e2:ec:14:94:c1:4e:83:4b:e6:e7:
f1:77:31:0d:9b:c4:40:44:2c:5e:7e:95:59:20:64:
65:ac:05:ee:7c:c3:66:39:88:36:83:af:ed:35:92:
ee:f2:a8:84:34:3e:47:ec:38:a8:36:3a:72:a9:c6:
cc:1e:45:6c:40:b2:15:72:d7:e5:8e:67:b8:b9:a7:
9f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:04:E4:D3:B7:C0:27:C8:5D:26:A1:0D:09:71:6B:DB:EF:D7:70:52
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/CATk07fAJ8hdJqENCXFr2-_XcFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.254.83.0/24
179.254.87.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:38:cc:72:58:96:81:bc:06:7f:dc:d1:ed:99:37:2e:27:84:
94:02:c0:db:68:bc:96:fd:e1:f4:a1:e8:35:7f:10:a8:a6:f6:
27:5d:af:ef:39:94:80:28:ab:a1:5b:1f:67:0e:3e:a5:2c:48:
e0:ba:5d:8e:f2:66:56:e5:e0:b5:5d:ed:28:91:54:bd:85:30:
d6:04:b9:b3:81:bf:f9:45:ad:c4:eb:d9:c8:0f:a0:4e:5a:62:
fc:71:6f:88:41:8a:c6:cb:42:a7:01:75:e6:48:2b:23:93:7a:
71:09:43:9a:83:15:9c:b7:a8:a5:12:e7:14:b5:78:14:9d:a0:
ff:6e:1b:72:46:40:3b:08:78:66:32:24:09:da:f0:a0:79:d4:
cd:c0:7a:ae:39:5a:0c:f1:b5:a5:cf:0e:3b:91:46:69:69:0f:
5f:30:7c:2b:46:12:ef:eb:ae:6c:0d:5f:97:fb:15:c8:a6:5b:
bb:8a:35:a5:72:55:f7:03:4a:41:ab:53:a7:ee:12:bf:a3:6d:
3b:48:7c:ac:b8:aa:c8:f3:e5:ca:0c:44:31:1c:bc:5f:21:d5:
b4:7f:ee:24:32:59:41:16:6c:9d:8e:e2:95:b4:f1:65:b0:66:
52:9a:bd:7b:35:a0:92:32:27:f3:a3:cb:a1:58:c6:57:6e:a0:
a9:9f:0f:17
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaAWqjYA1PGorrQus5P7edd1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwODE4MjA1NzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODA0ZTRkM2I3YzAyN2M4NWQyNmExMGQwOTcxNmJkYmVmZDc3MDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2JWAgu0JvINIVPbS/fa1fZ/4dmf
h5PtLMP8/U5vjK/hBcNKPApD4dnEvQb2d+LrhePcFp5gPToNQLgXTpSz6khMdNdQ
fEoLYJUtCgsn0Y9r5X2DFrJ6D94BCpl6U06DmKS3pNshTOJ+9Wal2hpPM/04C1+d
nwFS5gzr5qRASOsaD4lEKecyGDIe6E+c/fGy6knXm6+CKXylnh8RQjgoNjOGmqEO
Hfe44FL21Efke7BmWXCHVcNAQOLsFJTBToNL5ufxdzENm8RARCxefpVZIGRlrAXu
fMNmOYg2g6/tNZLu8qiEND5H7DioNjpyqcbMHkVsQLIVctfljme4uaeflQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAgE5NO3wCfIXSahDQlxa9vv13BSMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvQ0FUazA3ZkFKOGhkSnFFTkNYRnIyLV9YY0ZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAs/5TAwQA
s/5XMA0GCSqGSIb3DQEBCwUAA4IBAQA7OMxyWJaBvAZ/3NHtmTcuJ4SUAsDbaLyW
/eH0oeg1fxCopvYnXa/vOZSAKKuhWx9nDj6lLEjgul2O8mZW5eC1Xe0okVS9hTDW
BLmzgb/5Ra3E69nID6BOWmL8cW+IQYrGy0KnAXXmSCsjk3pxCUOagxWct6ilEucU
tXgUnaD/bhtyRkA7CHhmMiQJ2vCgedTNwHquOVoM8bWlzw47kUZpaQ9fMHwrRhLv
665sDV+X+xXIplu7ijWlclX3A0pBq1On7hK/o207SHysuKrI8+XKDEQxHLxfIdW0
f+4kMllBFmydjuKVtPFlsGZSmr17NaCSMifzo8uhWMZXbqCpnw8X
-----END CERTIFICATE-----
Generated at Wed Aug 26 20:24:52 2026 by rpki-client