Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/F8Y5qHmY17biwSNMFru72RdGTUc.roa
File: F8Y5qHmY17biwSNMFru72RdGTUc.roa (raw, json)
Hash identifier: C4EkPejBtFbD3gkKUvznNXhdyjkWisPlZC/0wX9poXE=
Subject key identifier: 17:C6:39:A8:79:98:D7:B6:E2:C1:23:4C:16:BB:BB:D9:17:46:4D:47
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0E9207D50CD0773A11BB11AA40BADA422
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/F8Y5qHmY17biwSNMFru72RdGTUc.roa
Signing time: Mon 28 Sep 2026 17:46:55 +0000
ROA not before: Mon 28 Sep 2026 17:46:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219501
IP address blocks: 179.253.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:20:7d:50:cd:07:73:a1:1b:b1:1a:a4:0b:ad:a4:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 28 17:46:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17c639a87998d7b6e2c1234c16bbbbd917464d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0d:d7:d8:94:b6:69:b3:d3:29:5d:94:be:0d:
d3:a4:89:14:9e:1c:58:ee:fe:d6:1e:23:30:22:ce:
ad:ce:1f:5a:fc:2d:76:cf:25:e2:01:01:d8:ee:ca:
66:de:68:e6:70:c3:36:40:c7:35:99:3e:e9:16:f8:
f6:72:c6:42:7a:d5:b5:1c:7e:2b:8c:74:37:e8:ae:
ba:42:7c:77:6a:b8:76:ca:f6:5f:78:59:e4:d1:7b:
c4:a9:a2:8f:59:29:bb:94:74:15:0f:c9:ad:e4:c7:
c5:f8:f4:8f:e3:b0:38:35:5c:8c:b1:09:06:12:ba:
96:7e:59:e5:33:df:26:37:d4:6e:05:ad:31:9a:92:
08:47:c7:27:f5:e6:25:d2:dc:07:e4:05:42:7e:8f:
07:7a:d6:6c:c8:35:96:8d:97:17:88:f6:18:a7:8c:
48:0e:cb:c8:d3:f2:1c:66:56:b9:a6:10:74:a9:da:
26:6b:69:50:e8:e9:84:32:03:24:cf:e4:cb:5a:74:
3d:90:ee:bc:ac:8d:f2:4a:17:ac:a6:92:aa:88:4f:
b0:4f:74:37:ae:97:b7:ad:fb:05:92:83:6d:c2:b8:
d6:fc:16:82:b2:e9:10:1b:78:3b:45:9e:7d:63:65:
2c:6f:27:2b:c4:ed:31:10:e1:03:e7:07:ad:a0:f6:
ab:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C6:39:A8:79:98:D7:B6:E2:C1:23:4C:16:BB:BB:D9:17:46:4D:47
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/F8Y5qHmY17biwSNMFru72RdGTUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.253.179.0/24
Signature Algorithm: sha256WithRSAEncryption
14:49:a9:78:51:cc:20:d5:ad:e8:6c:60:ae:4b:39:0f:18:e4:
91:80:ee:0f:4d:7d:73:d8:8e:3c:f9:a9:cf:cb:d5:79:27:ac:
32:3c:cd:83:60:1b:1a:0d:d3:c1:4e:0f:35:9c:d8:31:15:b2:
8e:11:07:b2:42:c6:61:3e:ca:07:c8:b0:29:1c:95:7b:30:14:
d8:c8:02:9a:26:cf:b0:23:5c:ec:85:45:1c:2c:4c:47:e7:2a:
d6:e9:f1:66:21:89:c0:ce:64:8f:6b:3c:23:06:89:84:a9:69:
82:f0:1b:e9:53:e6:1c:c4:4c:99:32:f7:45:34:91:0c:5c:0a:
1a:97:a0:d6:8a:c2:39:1d:34:fb:e5:cd:29:01:7c:30:f4:c9:
12:5e:c8:bf:fe:4d:cc:52:7f:5a:59:5c:d2:1b:40:66:8e:71:
09:31:e5:68:18:af:c8:e7:de:ee:26:f4:57:d7:71:72:8a:ee:
6c:d1:ad:db:1d:fa:c3:3e:9c:92:83:32:71:b0:c5:4d:4d:8b:
12:1a:5e:f9:0d:28:67:f3:3e:9e:de:b1:7b:d0:a7:28:8b:9e:
fa:b8:13:9c:a1:3d:76:18:7d:36:6e:98:a8:17:9d:3c:05:36:
01:a2:bc:c0:e8:55:11:9f:87:63:c1:ac:02:f8:f7:b5:a3:e6:
2e:16:e5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:29:57 2026 by rpki-client