Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Ecf51CB0ljgaULMXGINKO8i7qmc.roa
File: Ecf51CB0ljgaULMXGINKO8i7qmc.roa (raw, json)
Hash identifier: IVOukZ0IskNfNUzUPPtqC1/ncdOd30Lod7yOIoqqa9U=
Subject key identifier: 11:C7:F9:D4:20:74:96:38:1A:50:B3:17:18:83:4A:3B:C8:BB:AA:67
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FC9277FDD64F029021EA80D7554C95D49
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Ecf51CB0ljgaULMXGINKO8i7qmc.roa
Signing time: Mon 03 Aug 2026 19:43:56 +0000
ROA not before: Mon 03 Aug 2026 19:43:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1273
IP address blocks: 152.234.192.0/18 maxlen: 18
177.1.180.0/22 maxlen: 22
177.3.192.0/20 maxlen: 20
177.3.216.0/21 maxlen: 21
177.3.224.0/19 maxlen: 19
177.202.64.0/19 maxlen: 19
177.202.96.0/20 maxlen: 20
177.202.112.0/21 maxlen: 21
179.67.128.0/18 maxlen: 18
179.236.128.0/20 maxlen: 20
179.236.144.0/22 maxlen: 22
179.253.64.0/18 maxlen: 18
179.253.128.0/18 maxlen: 18
179.254.128.0/18 maxlen: 18
191.217.192.0/18 maxlen: 18
191.223.136.0/21 maxlen: 21
201.8.64.0/19 maxlen: 19
201.58.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c9:27:7f:dd:64:f0:29:02:1e:a8:0d:75:54:c9:5d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 3 19:43:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11c7f9d4207496381a50b31718834a3bc8bbaa67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:65:a2:ac:82:49:21:e1:b4:a3:d9:42:59:52:
b3:89:db:1b:35:1a:ef:8d:e9:a7:c0:e2:7f:5e:a8:
cb:d1:3f:de:5c:c2:e9:c2:83:b1:f9:77:6c:e1:e9:
aa:3f:bb:da:81:6c:35:60:9c:69:f9:20:0d:22:ea:
e3:cd:e0:b7:79:91:7b:7d:72:77:bc:89:7f:cd:bc:
da:83:08:35:88:48:f6:d3:d4:d1:e8:3e:4c:4b:70:
d7:1e:db:39:42:17:d8:40:50:b4:e2:89:be:60:37:
0e:e8:77:9d:4e:28:cd:ee:74:96:3b:55:f4:3b:e2:
de:fa:5e:44:60:7f:45:09:6d:0b:fc:01:8d:61:b5:
3e:4c:ab:cd:bf:ce:00:d6:98:3c:50:4e:41:b0:27:
de:b0:6c:2b:9d:ed:cc:40:5b:62:59:7f:43:e0:c8:
3d:46:04:48:5f:a8:ae:eb:09:cf:0a:03:da:93:57:
cc:5a:14:1e:63:df:b6:7c:e3:18:4f:2c:01:46:98:
b4:d0:d7:86:b7:58:a7:ed:58:be:54:69:5c:ca:ca:
58:36:0e:6b:ba:de:4e:c0:dc:46:28:12:14:8d:5a:
5b:f2:eb:4c:b4:d3:af:aa:d3:36:8f:4d:90:68:31:
84:c3:b6:dc:ee:ad:19:42:ec:51:69:ba:31:ec:db:
74:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C7:F9:D4:20:74:96:38:1A:50:B3:17:18:83:4A:3B:C8:BB:AA:67
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Ecf51CB0ljgaULMXGINKO8i7qmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.234.192.0/18
177.1.180.0/22
177.3.192.0/20
177.3.216.0-177.3.255.255
177.202.64.0-177.202.119.255
179.67.128.0/18
179.236.128.0-179.236.147.255
179.253.64.0-179.253.191.255
179.254.128.0/18
191.217.192.0/18
191.223.136.0/21
201.8.64.0/19
201.58.128.0/18
Signature Algorithm: sha256WithRSAEncryption
17:24:ec:07:66:38:ae:a2:e7:05:eb:db:41:65:48:32:2a:82:
a8:55:3d:55:7f:1a:72:e1:13:76:3e:25:17:4f:03:9a:a5:87:
11:f6:ef:7d:b1:b5:d7:23:91:6d:e5:44:cf:94:8b:80:89:38:
33:07:b5:25:e4:15:db:8d:26:84:e5:7a:91:d1:2e:b5:22:03:
71:24:d3:15:22:e4:79:b6:56:86:89:69:10:f0:8d:40:2f:f1:
e2:fb:ee:b1:0b:8f:cc:14:e6:e1:72:76:71:83:5d:57:19:3e:
7a:89:a3:4a:e2:5a:0c:8f:43:fa:36:28:58:cb:b0:31:07:b3:
55:fa:89:b2:dd:be:25:1c:ef:3a:79:2f:fd:2c:7f:2a:ab:c1:
e7:1e:58:b0:fe:09:7f:da:4c:88:8f:21:43:27:f7:10:25:70:
ee:ab:75:36:49:42:55:40:6a:a7:92:a4:9f:2d:01:dd:42:0d:
9d:be:5a:8d:9f:52:37:6d:24:25:22:dc:39:ec:a8:41:17:6d:
db:bc:7a:78:31:71:3a:5d:a6:77:15:11:20:43:c4:ea:60:4e:
bf:1d:38:b7:71:39:d4:c7:fb:fe:c3:54:2f:65:7d:ee:20:9e:
e8:36:9f:5d:a9:c9:bc:f4:5d:fa:84:43:9c:32:18:55:32:7e:
81:84:62:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:52:06 2026 by rpki-client