Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Io-Ayq7R2dSA6IDjmDZ7at28X_I.roa
File: Io-Ayq7R2dSA6IDjmDZ7at28X_I.roa (raw, json)
Hash identifier: vaErlaeuzMwajcrGbY9ctDdXu2Jq3+q3HcWRCorexWw=
Subject key identifier: 22:8F:80:CA:AE:D1:D9:D4:80:E8:80:E3:98:36:7B:6A:DD:BC:5F:F2
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A010F3336886836F3808AB3BAB601DDAD7
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Io-Ayq7R2dSA6IDjmDZ7at28X_I.roa
Signing time: Mon 17 Aug 2026 18:19:28 +0000
ROA not before: Mon 17 Aug 2026 18:19:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219141
IP address blocks: 201.10.76.0/24 maxlen: 24
201.10.77.0/24 maxlen: 24
201.10.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:f3:33:68:86:83:6f:38:08:ab:3b:ab:60:1d:da:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 17 18:19:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=228f80caaed1d9d480e880e398367b6addbc5ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e5:c1:90:c4:de:6b:21:29:c6:a4:78:17:fc:
c5:ac:25:f6:53:e3:06:d9:2d:d3:c5:d9:43:1d:f1:
3d:4c:d6:ae:0e:a6:2d:61:c5:13:ec:b2:c5:b2:92:
fc:48:14:05:f4:82:ab:ba:01:b3:ad:68:75:28:75:
db:6d:38:d6:ce:67:b0:60:12:65:13:e8:64:b6:06:
bd:ba:fa:b9:30:b7:4b:b9:ec:86:70:e5:cc:29:df:
9a:09:77:c7:9d:d1:8b:43:12:c3:36:e6:31:2d:78:
b6:c4:93:2e:50:a0:ae:f8:ad:26:fd:48:fe:d7:8b:
fc:e3:1c:04:34:d1:7b:7f:84:53:fc:3f:26:b7:cd:
44:1c:d4:dc:eb:8f:db:4e:0c:67:75:cf:33:5a:98:
a3:38:0b:1a:89:0d:8e:0c:b3:c2:44:f4:df:d1:3f:
fc:56:35:87:77:04:9f:ea:24:38:61:f8:61:b3:83:
a2:a6:3c:45:ac:56:f0:e2:fc:78:d4:f2:e0:42:63:
60:aa:06:64:08:60:01:52:aa:87:69:41:5e:e8:16:
63:52:78:2b:f4:9a:da:9c:55:57:7c:8f:d9:4c:80:
d1:85:66:70:0f:c6:83:d6:d8:b8:6c:d0:c9:83:4c:
26:b8:f9:73:f2:0c:bf:ad:6e:1e:07:fc:2a:92:e4:
f4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8F:80:CA:AE:D1:D9:D4:80:E8:80:E3:98:36:7B:6A:DD:BC:5F:F2
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Io-Ayq7R2dSA6IDjmDZ7at28X_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.10.76.0-201.10.78.255
Signature Algorithm: sha256WithRSAEncryption
6e:23:c2:af:3c:76:31:30:26:62:9e:a3:26:d7:76:40:24:15:
a9:91:f1:43:25:26:38:c4:3d:0b:81:db:7d:6d:08:26:9a:1c:
42:20:92:6c:d0:31:bf:98:91:58:20:b3:17:62:b5:eb:5a:b6:
f1:09:23:01:a3:82:46:d3:59:4d:53:00:74:97:64:89:f0:af:
1e:5d:e7:b5:16:f2:98:ec:b3:8a:2d:55:a5:65:88:81:29:97:
09:55:73:ba:23:c6:19:ae:be:bb:aa:55:a4:1f:35:4a:bc:38:
95:16:45:d6:ad:f0:4b:1c:16:b9:65:0c:7e:00:3d:e8:77:59:
e2:a6:57:2c:2f:e5:db:c9:f2:34:1d:69:19:a5:d6:b1:8b:12:
c2:43:6c:9f:5a:d0:2b:ba:aa:80:59:ec:2d:16:68:8c:55:2a:
92:f7:52:13:44:39:30:6f:fc:38:1e:56:7a:28:b2:47:70:7c:
20:c5:ef:37:69:48:d8:d9:42:eb:82:17:0d:14:b5:f8:e9:52:
3a:15:71:fd:44:d1:70:c0:6f:51:d4:6f:f0:cd:06:93:ae:9b:
f5:0f:1c:5e:42:dc:90:4e:a1:6a:fa:84:81:7c:06:07:62:1c:
77:c3:d1:57:3d:bf:bb:c4:bc:4e:51:2e:b1:49:fb:26:ed:33:
45:ac:1c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:14 2026 by rpki-client