Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/CUs0iLuMbKVzgpWdHE6uMIhSFTE.roa
File: CUs0iLuMbKVzgpWdHE6uMIhSFTE.roa (raw, json)
Hash identifier: vxEddN2o+93x4Ky9sjyPcGLN/BFTr2dMEvCQCWRkrJ8=
Subject key identifier: 09:4B:34:88:BB:8C:6C:A5:73:82:95:9D:1C:4E:AE:30:88:52:15:31
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A17924ED1E8EE9BEC89E21F7068260C1BB
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/CUs0iLuMbKVzgpWdHE6uMIhSFTE.roa
Signing time: Mon 26 Oct 2026 16:57:05 +0000
ROA not before: Mon 26 Oct 2026 16:57:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197256
IP address blocks: 177.3.199.0/24 maxlen: 24
201.8.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:24:ed:1e:8e:e9:be:c8:9e:21:f7:06:82:60:c1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 26 16:57:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=094b3488bb8c6ca57382959d1c4eae3088521531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:27:16:a7:24:09:b0:bd:fc:4a:fd:8a:2f:02:
5a:30:84:67:d1:b1:01:49:0c:07:53:f4:d0:d1:44:
de:0e:6f:a4:09:54:e9:10:16:1f:76:5e:5b:3e:32:
f7:01:22:3f:d3:d7:11:ab:7a:76:60:dc:97:39:77:
44:d4:4f:d5:39:e0:5d:b7:a7:66:46:65:01:4c:5b:
63:a7:20:76:5c:4f:c4:11:b6:e3:93:01:57:80:14:
c9:0e:52:6b:fb:b0:f0:33:e8:bd:b0:1b:52:19:69:
8b:c6:57:cd:88:5f:50:73:c6:34:27:20:f9:18:a6:
4c:c7:10:c5:27:6c:e6:71:cf:63:f5:1f:90:d5:5b:
9c:4e:1d:3b:2b:cc:2c:51:81:c7:2e:12:e6:b5:8f:
05:31:56:40:4b:6c:f4:15:6f:ce:12:06:fa:46:2b:
f3:7b:e3:f4:1c:8f:1b:cb:aa:6b:86:6e:cf:da:1e:
f6:1a:68:d8:d3:54:e2:62:ef:21:74:ca:e7:48:9b:
89:5e:06:5c:7b:c1:9e:07:21:92:28:d8:27:84:9c:
47:06:ad:85:19:d5:5a:fd:0e:6b:19:45:66:c2:e3:
79:cd:ed:3c:61:e5:60:6d:f4:0c:73:69:1e:8b:51:
38:55:31:00:66:76:27:07:16:e7:c9:c6:da:41:89:
0a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4B:34:88:BB:8C:6C:A5:73:82:95:9D:1C:4E:AE:30:88:52:15:31
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/CUs0iLuMbKVzgpWdHE6uMIhSFTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.3.199.0/24
201.8.83.0/24
Signature Algorithm: sha256WithRSAEncryption
92:a7:0d:ce:09:40:99:a9:c3:6e:15:26:f1:bd:00:9f:8e:fb:
20:c7:c5:92:f9:8f:57:80:15:b7:71:49:84:84:8e:90:51:5c:
02:06:f2:f0:ac:60:ef:5e:0a:3b:1a:1d:c1:e6:be:fc:ad:20:
70:48:9c:99:b7:9c:94:57:a8:e6:bc:dd:47:4a:48:90:53:49:
fe:c2:23:8c:27:d1:81:0d:5d:3c:fb:c7:e4:45:c7:fe:f5:00:
b2:2b:3b:8e:42:53:62:63:bd:58:2c:b3:60:29:27:fd:1f:47:
3c:9d:3d:f0:59:2a:60:ce:16:8d:14:1d:ad:e7:40:28:fc:e4:
58:57:32:a7:0a:41:cf:21:41:ab:de:0f:09:b8:bb:c6:2e:8b:
b2:89:e8:eb:e6:e6:2b:f2:59:da:c5:f6:cd:9e:51:1e:03:eb:
d5:77:9e:98:fb:ad:07:69:ed:db:a1:ed:1a:c2:bd:02:ab:20:
a1:ef:75:6b:22:b3:c8:a3:33:c4:cd:55:58:1c:f4:18:c2:1d:
a8:58:55:d5:24:a8:07:98:23:40:39:b2:5f:a7:2b:41:d2:71:
76:4f:b8:30:80:4d:bc:d8:3e:58:8c:a5:19:43:84:22:5c:8f:
d9:45:76:e6:2b:99:6e:fa:ef:d5:73:23:bd:d3:2f:ad:09:4e:
1f:2b:ad:34
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaF5JO0ejum+yJ4h9waCYMG7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYxMDI2MTY1NzA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTRiMzQ4OGJiOGM2Y2E1NzM4Mjk1OWQxYzRlYWUzMDg4NTIxNTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCcWpyQJsL38Sv2KLwJaMIRn0bEB
SQwHU/TQ0UTeDm+kCVTpEBYfdl5bPjL3ASI/09cRq3p2YNyXOXdE1E/VOeBdt6dm
RmUBTFtjpyB2XE/EEbbjkwFXgBTJDlJr+7DwM+i9sBtSGWmLxlfNiF9Qc8Y0JyD5
GKZMxxDFJ2zmcc9j9R+Q1VucTh07K8wsUYHHLhLmtY8FMVZAS2z0FW/OEgb6Rivz
e+P0HI8by6prhm7P2h72GmjY01TiYu8hdMrnSJuJXgZce8GeByGSKNgnhJxHBq2F
GdVa/Q5rGUVmwuN5ze08YeVgbfQMc2kei1E4VTEAZnYnBxbnycbaQYkKlQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAlLNIi7jGylc4KVnRxOrjCIUhUxMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvQ1VzMGlMdU1iS1Z6Z3BXZEhFNnVNSWhTRlRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsQPHAwQA
yQhTMA0GCSqGSIb3DQEBCwUAA4IBAQCSpw3OCUCZqcNuFSbxvQCfjvsgx8WS+Y9X
gBW3cUmEhI6QUVwCBvLwrGDvXgo7Gh3B5r78rSBwSJyZt5yUV6jmvN1HSkiQU0n+
wiOMJ9GBDV08+8fkRcf+9QCyKzuOQlNiY71YLLNgKSf9H0c8nT3wWSpgzhaNFB2t
50Ao/ORYVzKnCkHPIUGr3g8JuLvGLouyiejr5uYr8lnaxfbNnlEeA+vVd56Y+60H
ae3boe0awr0CqyCh73VrIrPIozPEzVVYHPQYwh2oWFXVJKgHmCNAObJfpytB0nF2
T7gwgE282D5YjKUZQ4QiXI/ZRXbmK5lu+u/VcyO90y+tCU4fK600
-----END CERTIFICATE-----
Generated at Wed Nov 4 16:43:32 2026 by rpki-client