Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/FBpSZ4zlFb3Tkkmy2X4t_rI0zJo.roa
File: FBpSZ4zlFb3Tkkmy2X4t_rI0zJo.roa (raw, json)
Hash identifier: Snw6vaYy8RC8LpjXp2RaMvBxRdgYcpDnbRwBgeJyWkk=
Subject key identifier: 14:1A:52:67:8C:E5:15:BD:D3:92:49:B2:D9:7E:2D:FE:B2:34:CC:9A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A15A3B8EF40AAAE345730005CC59BE8B89
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/FBpSZ4zlFb3Tkkmy2X4t_rI0zJo.roa
Signing time: Tue 20 Oct 2026 16:53:35 +0000
ROA not before: Tue 20 Oct 2026 16:53:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400212
IP address blocks: 177.3.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:3b:8e:f4:0a:aa:e3:45:73:00:05:cc:59:be:8b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 20 16:53:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=141a52678ce515bdd39249b2d97e2dfeb234cc9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7a:58:4f:04:98:37:8e:31:89:dd:75:54:85:
58:1c:23:88:37:e5:d6:92:cc:cd:c5:1f:97:f8:cb:
4e:e7:87:af:67:36:2c:8a:84:a7:c0:7b:b3:87:3c:
7f:d0:52:61:a9:01:41:90:c8:bf:fc:26:5a:a3:01:
ed:76:89:06:50:fd:9c:53:81:b0:38:fc:dc:25:bb:
1f:94:7a:26:9f:e2:f8:d2:55:46:3a:55:4a:48:50:
e9:69:fd:4c:36:f6:35:f5:90:f6:93:9a:e7:1e:e7:
34:fa:07:00:f9:62:e5:98:36:53:1f:f0:88:a5:88:
5a:49:c5:3d:3f:a8:36:d7:4d:b0:93:7a:7d:63:6b:
3e:d2:02:04:5f:4b:b9:df:b7:12:60:fc:d3:c3:f9:
13:9e:61:e3:3f:c9:6f:cf:8a:65:b6:0f:7b:4f:96:
d3:f6:74:bb:bd:68:08:25:84:7c:2f:81:83:00:08:
b4:b9:e6:0f:b4:d3:4c:5e:73:28:37:b2:e9:dd:64:
83:50:6b:cb:db:7f:e8:70:84:54:86:e2:67:f2:fc:
7e:5a:8c:0c:e5:89:dc:72:ea:f3:db:99:d7:5a:9a:
aa:4a:59:90:c6:16:34:06:f7:a7:1b:3e:11:ee:e1:
4e:7c:c9:45:a7:8a:3a:58:5e:a2:f7:cc:cf:f4:f4:
25:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1A:52:67:8C:E5:15:BD:D3:92:49:B2:D9:7E:2D:FE:B2:34:CC:9A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/FBpSZ4zlFb3Tkkmy2X4t_rI0zJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.3.192.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:52:1c:48:ed:ef:d9:b8:9b:6c:0b:2c:2d:66:a1:8f:f3:60:
0a:34:3c:3c:ee:b6:83:77:63:0b:6c:b4:34:3a:64:b7:f0:bc:
7f:86:17:ea:06:e4:a1:1a:54:eb:8a:c3:8a:15:fe:90:51:47:
f1:45:8f:04:f6:01:a1:d6:31:ed:ad:35:88:fa:b6:0f:b2:21:
6c:71:15:48:88:2a:1e:ca:a7:00:7c:aa:8e:b6:f9:1d:8e:e7:
b7:ee:92:90:ef:73:68:7e:6f:3e:fd:0c:6f:5c:56:28:d7:d7:
30:86:e0:67:85:00:66:ad:80:6b:81:ef:62:53:31:09:e7:bd:
9f:20:08:54:73:55:c8:53:aa:09:e5:ac:5e:3a:58:fc:46:07:
68:d5:9d:1c:14:cd:54:35:de:2c:98:6d:f4:31:d8:c3:24:8e:
98:4f:c4:9e:76:c7:0a:7b:2f:2e:be:b6:7f:33:fc:04:99:f5:
8c:ae:46:ec:1f:8a:36:43:48:8f:78:d9:61:df:72:14:03:70:
83:1d:00:09:57:9b:dd:b5:6d:e0:b6:d9:f5:cb:93:45:2a:01:
31:22:8a:d9:22:5a:83:ab:5d:e4:9c:00:71:51:e3:e7:e7:d3:
b5:f6:47:a4:62:3a:29:c8:0e:da:be:47:fb:71:65:01:d5:f6:
c3:7d:38:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:44:10 2026 by rpki-client