Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/H8T5lpOs8pxb5XGzlRCtiqwrjsM.roa
File: H8T5lpOs8pxb5XGzlRCtiqwrjsM.roa (raw, json)
Hash identifier: pF8CbygQKU2BTGSPoJ9SRtqAJCRG0ablCr0kJog3Y3Y=
Subject key identifier: 1F:C4:F9:96:93:AC:F2:9C:5B:E5:71:B3:95:10:AD:8A:AC:2B:8E:C3
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A17E62CB392F78A90F2E2CC13E24C3DB75
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/H8T5lpOs8pxb5XGzlRCtiqwrjsM.roa
Signing time: Tue 27 Oct 2026 17:22:46 +0000
ROA not before: Tue 27 Oct 2026 17:22:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210654
IP address blocks: 179.236.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:62:cb:39:2f:78:a9:0f:2e:2c:c1:3e:24:c3:db:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 27 17:22:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1fc4f99693acf29c5be571b39510ad8aac2b8ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2c:33:a0:90:c2:4d:6b:3a:12:45:57:f3:3d:
84:9f:15:03:ec:25:6a:ff:cb:d5:93:45:a8:80:8a:
75:3e:df:58:af:70:62:b4:e3:a1:73:dd:75:af:1e:
45:66:36:04:65:bb:a0:d5:1a:7c:8a:69:4b:ed:18:
d8:c9:8b:ac:de:6e:e5:61:76:a6:bc:68:0e:18:9c:
d7:d2:73:14:2d:f1:67:83:61:15:ec:72:75:49:a0:
94:07:85:1a:a7:fd:9e:fa:d2:ec:f1:31:d5:6b:d2:
50:8a:94:08:09:d9:72:43:49:b3:c3:e0:cd:5e:5c:
a7:ce:09:01:fe:7e:c2:8d:73:f4:2b:50:28:15:49:
67:8b:9a:41:00:fd:0d:dd:75:61:33:b7:cc:80:78:
77:cb:31:f4:65:ab:14:d2:43:b3:29:59:54:e6:4e:
4a:76:68:9e:24:d2:79:6b:f1:11:49:22:39:ec:cd:
89:3f:32:fe:dd:fb:83:c6:77:a7:5e:dc:0e:e2:52:
3f:1f:07:03:82:a9:5e:85:e4:cb:e2:59:ae:da:de:
36:1a:f3:57:28:92:1d:24:67:64:0d:4a:1e:be:4f:
f6:57:2e:a5:09:21:94:97:4b:0f:ae:0a:2f:3b:01:
be:3b:19:27:88:ca:26:0b:fc:96:40:9f:33:39:f8:
25:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C4:F9:96:93:AC:F2:9C:5B:E5:71:B3:95:10:AD:8A:AC:2B:8E:C3
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/H8T5lpOs8pxb5XGzlRCtiqwrjsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.236.135.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:e3:74:b8:12:9c:cd:4e:b8:12:36:8b:90:e3:f0:eb:1a:2f:
57:07:ce:68:77:dd:0a:b4:30:fa:c9:62:6a:6d:d9:d6:8e:4c:
e3:e0:4d:b7:1a:71:dc:5f:8e:eb:f4:6c:7c:78:65:1e:de:ab:
5c:07:ef:5c:ae:3f:50:47:85:5a:58:c0:87:e3:8f:7e:cf:ea:
7b:54:c0:8c:5b:8f:3d:81:f1:8d:e7:4a:b6:8e:12:f0:a9:3f:
86:a2:eb:b7:83:8a:b1:cd:0c:bb:eb:44:0f:a4:21:f6:02:77:
c0:d2:be:27:51:13:6d:08:36:1a:e4:f7:c3:5c:22:18:20:25:
e5:68:39:f1:bd:61:b9:f4:5f:38:f4:d2:8e:5f:bc:cd:3a:9c:
bf:e0:70:04:4a:97:15:df:66:ff:b2:ea:02:32:74:5b:7b:33:
21:4e:64:c6:e7:cd:52:86:55:b3:50:0d:4a:3e:f0:38:af:4e:
52:36:c1:b8:66:82:a7:4d:c3:5e:56:82:52:46:c3:3e:d2:b4:
58:4a:10:5f:99:72:e7:24:56:9f:e8:77:89:63:d6:0f:07:4f:
fd:0c:f1:8d:7e:6b:8c:72:8c:bb:a1:a2:06:ac:35:06:c0:17:
99:a3:c5:4b:ef:f4:d4:84:e4:40:6b:34:7e:84:2d:57:59:90:
08:d6:3e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:26:49 2026 by rpki-client