Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HTEbuojUDYqjpzkRGUsR0Euj7h0.roa
File: HTEbuojUDYqjpzkRGUsR0Euj7h0.roa (raw, json)
Hash identifier: gigkXKevm1lGV5Rw6QLCU6oWNn/tDfQ7fLhQWXjGofY=
Subject key identifier: 1D:31:1B:BA:88:D4:0D:8A:A3:A7:39:11:19:4B:11:D0:4B:A3:EE:1D
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A19D06B8161A51036BAB65E189658BAB74
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HTEbuojUDYqjpzkRGUsR0Euj7h0.roa
Signing time: Mon 02 Nov 2026 16:10:25 +0000
ROA not before: Mon 02 Nov 2026 16:10:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218583
IP address blocks: 201.58.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:06:b8:16:1a:51:03:6b:ab:65:e1:89:65:8b:ab:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 2 16:10:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d311bba88d40d8aa3a73911194b11d04ba3ee1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ae:50:c8:28:2f:80:fd:c7:b5:3b:30:5f:02:
96:3a:60:2a:8a:6b:bb:be:b5:8c:58:2c:0c:7e:ee:
71:1a:39:e3:6d:23:94:b2:8d:e1:9f:0f:69:91:2b:
64:1a:2a:18:c5:f0:8c:47:70:1a:12:96:e3:13:95:
c1:01:ba:8d:f8:6c:05:a0:31:45:b5:cc:07:cb:cb:
c2:30:88:38:bc:56:50:2a:83:51:d1:55:f2:30:71:
1a:e8:c4:20:86:43:71:be:3e:48:61:f0:68:47:1b:
e4:9e:be:c9:5a:ae:f7:78:ba:b6:d6:b7:44:d0:4b:
1e:8d:ee:01:c3:0b:99:13:37:e4:7d:16:7b:b8:5c:
e7:6d:c0:48:a4:35:68:a3:cf:77:5e:5c:40:08:92:
f3:6a:f4:09:7f:3c:d2:aa:a6:25:5a:8f:9f:21:3e:
01:36:02:75:d1:08:57:4d:d4:74:63:a8:bf:2d:47:
be:7a:1b:67:6e:da:df:4c:11:4f:34:b9:18:78:7f:
b5:21:82:0f:31:a5:53:4a:cc:2d:64:13:a9:cc:42:
b6:37:74:14:1c:67:18:76:d5:17:93:33:96:6f:4d:
44:90:2f:38:d0:a0:c4:fe:62:1a:55:31:96:50:44:
80:eb:51:4c:e9:dd:90:8b:40:9d:d0:6c:39:ab:5b:
fe:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:31:1B:BA:88:D4:0D:8A:A3:A7:39:11:19:4B:11:D0:4B:A3:EE:1D
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HTEbuojUDYqjpzkRGUsR0Euj7h0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.58.138.0/24
Signature Algorithm: sha256WithRSAEncryption
15:43:e8:b0:c9:b3:f8:1c:b0:cc:18:22:e2:4e:8a:38:8c:a5:
2a:90:a5:44:3e:54:c8:75:25:2d:b3:a7:d6:33:70:eb:2e:f0:
51:d7:26:12:87:d8:bf:60:cf:9f:40:b9:9f:fe:d9:74:1a:c7:
14:52:cf:9c:12:33:dc:2e:87:e7:56:2f:13:02:81:43:41:ef:
3e:cf:68:5f:95:8c:5d:c1:d6:0c:96:e6:12:69:74:d2:9a:f7:
fb:d2:fb:4f:5a:51:67:d5:a9:5a:6f:25:55:94:70:c5:d0:e7:
3a:b4:25:81:41:e7:cb:11:36:fd:05:d3:ed:3a:27:58:88:6d:
3d:5d:08:9c:e1:aa:d5:c2:6c:55:48:8d:d6:67:e1:06:56:59:
e0:31:0e:fb:85:77:24:05:86:71:8f:6c:78:05:9b:40:52:0f:
fc:da:da:e1:aa:74:ea:77:f3:d4:6f:58:fc:27:0f:86:f3:a1:
c1:3e:cb:16:4e:d4:d5:ee:4b:ac:fb:52:4a:de:65:c1:59:bf:
ff:53:55:fd:2a:d2:2f:06:c8:9e:e1:2b:73:5d:1e:b7:a9:1e:
5a:e0:8e:f1:34:cd:26:e0:38:53:b3:01:af:7f:4d:ca:14:f1:
e2:fa:0c:2b:f2:ed:fe:22:ec:23:25:b5:15:de:76:e4:5d:ed:
71:08:b8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:27:32 2026 by rpki-client