Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/IeECumroUhOfarSqs-IQvTFh3jo.roa
File: IeECumroUhOfarSqs-IQvTFh3jo.roa (raw, json)
Hash identifier: CJ/OzJ4X6AIrQgeZjq+BnLECtt80UjqMTq25L+Au0eE=
Subject key identifier: 21:E1:02:BA:6A:E8:52:13:9F:6A:B4:AA:B3:E2:10:BD:31:61:DE:3A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1A296BEB3C09B18F2B7F719880F500879
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/IeECumroUhOfarSqs-IQvTFh3jo.roa
Signing time: Tue 03 Nov 2026 18:05:50 +0000
ROA not before: Tue 03 Nov 2026 18:05:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201106
IP address blocks: 77.239.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a2:96:be:b3:c0:9b:18:f2:b7:f7:19:88:0f:50:08:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 3 18:05:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21e102ba6ae852139f6ab4aab3e210bd3161de3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:6b:4e:ed:78:89:84:92:d1:b4:cb:48:f7:
63:15:bb:88:72:c0:0e:ea:52:a7:18:fb:18:0f:98:
ac:0d:fb:89:87:98:23:c3:87:0a:5e:5f:fd:73:9d:
91:6e:d7:a3:71:32:9f:0e:bd:11:c7:fc:94:4e:a4:
7b:31:9a:a5:7f:2b:ae:01:f3:53:3b:6c:f4:ef:4a:
69:12:82:5e:59:d8:c8:ea:e4:09:d8:5c:e2:a8:79:
a6:63:7b:b6:05:e4:93:10:de:31:20:d6:f3:11:b0:
1f:cd:fc:97:f6:6d:16:86:30:eb:fe:58:51:b9:49:
d8:e7:c5:07:8d:ea:90:bc:24:0f:25:34:73:f5:71:
0d:9a:98:27:4b:3b:ca:1c:b3:7f:5a:f5:da:86:56:
ad:e4:8c:c5:46:50:b7:f6:85:87:2b:6d:36:ad:1e:
80:ea:fa:c8:44:01:da:97:b6:c8:04:75:9c:dd:c9:
af:00:fe:86:e5:21:61:1a:46:38:c1:72:7e:d9:a4:
31:d8:c2:3e:f7:f7:90:18:b8:46:46:51:87:51:48:
cb:cb:9d:3a:b0:e7:02:b2:20:1c:5c:ad:35:13:4b:
35:4a:c0:52:d3:a6:c8:48:eb:38:4c:ab:6d:87:50:
dc:26:96:7c:b4:37:cb:42:e6:7f:64:a5:f2:fb:f7:
11:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E1:02:BA:6A:E8:52:13:9F:6A:B4:AA:B3:E2:10:BD:31:61:DE:3A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/IeECumroUhOfarSqs-IQvTFh3jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.239.116.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:f0:29:71:83:dc:a3:ed:26:45:22:24:91:7a:96:82:ac:37:
31:96:b6:f1:96:84:69:89:68:7b:62:d0:f7:de:28:d6:35:c1:
03:fc:70:c1:1d:3f:1b:2a:f2:3d:52:62:7a:8b:74:e0:cd:78:
4e:77:08:ff:74:44:e3:3c:50:a3:bc:95:eb:63:7b:b3:05:7f:
c3:c5:79:cc:ca:7e:3d:e9:dd:94:97:f9:2d:73:08:d1:97:30:
d5:31:d5:0a:e7:4f:42:39:df:dc:96:10:28:6a:1c:b6:91:78:
ec:37:70:81:d3:23:a9:50:8a:dc:77:09:b7:4b:72:07:fe:69:
64:aa:3e:f9:43:03:6a:69:6c:ee:a1:00:e4:6d:87:e1:d3:83:
aa:02:10:ae:e6:82:dd:8c:17:20:40:51:e5:0b:a0:8c:55:e4:
1c:c5:01:03:03:6d:9b:0e:79:ff:1c:bc:1d:f6:09:5f:1b:2f:
c6:29:cb:e3:77:fb:3e:2d:a1:5c:5a:64:c2:33:42:61:f2:cf:
33:12:6c:ef:9d:9a:c5:fc:f9:bc:60:fc:a6:b9:2e:e4:5b:f3:
6e:04:6d:40:47:fe:18:a9:14:6d:7d:2a:17:f9:c7:69:fb:b3:
17:8b:5f:68:90:4f:17:66:02:0d:af:b5:bd:0a:1f:ff:30:02:
f9:d8:b3:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGilr6zwJsY8rf3GYgPUAh5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYxMTAzMTgwNTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWUxMDJiYTZhZTg1MjEzOWY2YWI0YWFiM2UyMTBiZDMxNjFkZTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZBrTu14iYSS0bTLSPdjFbuIcsAO
6lKnGPsYD5isDfuJh5gjw4cKXl/9c52RbtejcTKfDr0Rx/yUTqR7MZqlfyuuAfNT
O2z070ppEoJeWdjI6uQJ2FziqHmmY3u2BeSTEN4xINbzEbAfzfyX9m0WhjDr/lhR
uUnY58UHjeqQvCQPJTRz9XENmpgnSzvKHLN/WvXahlat5IzFRlC39oWHK202rR6A
6vrIRAHal7bIBHWc3cmvAP6G5SFhGkY4wXJ+2aQx2MI+9/eQGLhGRlGHUUjLy506
sOcCsiAcXK01E0s1SsBS06bISOs4TKtth1DcJpZ8tDfLQuZ/ZKXy+/cREwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCHhArpq6FITn2q0qrPiEL0xYd46MB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvSWVFQ3Vtcm9VaE9mYXJTcXMtSVF2VEZoM2pvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTe90MA0G
CSqGSIb3DQEBCwUAA4IBAQB98Clxg9yj7SZFIiSRepaCrDcxlrbxloRpiWh7YtD3
3ijWNcED/HDBHT8bKvI9UmJ6i3TgzXhOdwj/dETjPFCjvJXrY3uzBX/DxXnMyn49
6d2Ul/ktcwjRlzDVMdUK509COd/clhAoahy2kXjsN3CB0yOpUIrcdwm3S3IH/mlk
qj75QwNqaWzuoQDkbYfh04OqAhCu5oLdjBcgQFHlC6CMVeQcxQEDA22bDnn/HLwd
9glfGy/GKcvjd/s+LaFcWmTCM0Jh8s8zEmzvnZrF/Pm8YPymuS7kW/NuBG1AR/4Y
qRRtfSoX+cdp+7MXi19okE8XZgINr7W9Ch//MAL52LNw
-----END CERTIFICATE-----
Generated at Wed Nov 4 16:42:44 2026 by rpki-client