Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/IXg01Lir2gDx2V1xpcfrcW_frbI.roa
File: IXg01Lir2gDx2V1xpcfrcW_frbI.roa (raw, json)
Hash identifier: iZwRbgU5HRqdQJaOu0vZ/XgR8oT6WFlJ8SKUWKl+cPk=
Subject key identifier: 21:78:34:D4:B8:AB:DA:00:F1:D9:5D:71:A5:C7:EB:71:6F:DF:AD:B2
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1313944FC7984A42C8161EBF350451136
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/IXg01Lir2gDx2V1xpcfrcW_frbI.roa
Signing time: Mon 12 Oct 2026 17:46:39 +0000
ROA not before: Mon 12 Oct 2026 17:46:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198138
IP address blocks: 191.217.226.0/23 maxlen: 24
191.217.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:39:44:fc:79:84:a4:2c:81:61:eb:f3:50:45:11:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 12 17:46:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=217834d4b8abda00f1d95d71a5c7eb716fdfadb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:87:2f:c9:a5:88:0f:fe:a9:17:c5:72:cb:18:
24:51:95:59:74:2c:da:0f:85:ce:ee:4a:c7:e5:e5:
19:16:c3:86:ac:fd:6c:e2:e3:75:6b:aa:04:14:e4:
12:50:e8:df:83:70:a7:7e:7a:a1:71:7b:1a:f1:4c:
53:fc:97:fc:26:71:f4:27:e5:00:36:7b:a5:6b:0d:
3a:1b:eb:2d:1a:1d:b7:e6:dc:f8:a5:08:d0:89:83:
db:11:cc:fe:71:e2:33:8d:7a:b3:a4:22:91:a3:1a:
d7:0a:8e:3d:50:ef:9a:69:53:5f:3d:27:b0:64:64:
b6:43:a9:ca:c6:7a:f2:47:37:fb:2a:bd:d4:e6:dc:
2a:54:b1:ca:7e:38:3b:d5:76:03:ca:cf:1b:6c:d7:
ee:a9:8e:18:2a:fa:37:11:23:6e:55:18:a9:85:0e:
c8:c5:d6:7a:23:23:a6:25:0a:c0:87:08:c3:b2:a8:
0c:7a:b6:3c:bd:12:e0:c7:66:dc:be:c8:07:ab:36:
d9:5b:d1:79:87:58:0a:5e:1a:48:7a:af:da:01:c3:
41:70:79:e4:a3:04:d6:8d:77:33:8b:46:eb:23:ed:
ef:de:8d:7e:9b:45:77:8c:75:65:0e:77:94:45:a7:
8d:b5:58:7d:1f:97:5e:c3:e5:d0:63:1e:eb:35:7b:
dc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:78:34:D4:B8:AB:DA:00:F1:D9:5D:71:A5:C7:EB:71:6F:DF:AD:B2
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/IXg01Lir2gDx2V1xpcfrcW_frbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.217.226.0/23
191.217.230.0/23
Signature Algorithm: sha256WithRSAEncryption
80:0e:67:a7:eb:a3:fb:cd:69:1b:09:e6:69:37:7a:cf:d0:13:
2a:e3:fe:e0:eb:fc:0d:a9:94:f8:91:c3:1b:fe:4e:9c:ed:0f:
30:f3:9d:03:37:ad:39:b6:25:ea:31:ea:91:11:dd:1e:2e:a5:
a0:d2:e9:e6:0d:b7:fd:4c:dc:ca:22:f3:a0:cb:2a:46:fa:10:
4e:0a:9d:7f:3f:5b:db:11:46:ee:87:b7:b9:be:6d:ee:ba:18:
05:56:00:53:2a:60:0f:1e:24:3d:c1:67:d1:33:eb:84:ec:a5:
0f:60:6e:67:d2:b7:fb:eb:c5:7e:a7:46:a9:fd:08:9c:76:1e:
63:be:e8:ae:02:d0:38:b9:08:1a:e3:f5:a3:b2:b9:2f:9e:7d:
f0:92:c9:05:41:b2:8f:1a:74:5e:e7:32:fe:93:84:34:b9:1d:
92:df:c3:48:ec:17:1b:c7:c3:72:36:63:dd:43:de:39:42:8e:
d5:a9:55:f1:77:b9:b3:95:f6:9e:ad:7d:62:03:d2:01:89:51:
26:55:13:eb:b1:19:fd:c6:14:8b:9f:2f:4c:2b:41:72:6f:8e:
2b:6f:49:51:a2:64:88:84:ef:00:1a:77:69:3b:b9:c2:d4:e8:
60:5f:e9:f3:35:6e:be:a2:7c:5c:64:4f:c6:2a:20:d6:67:5f:
dc:a8:ac:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:41:56 2026 by rpki-client