Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JFfQsB_hYpbZ0GSELYzid1dnXGI.roa
File: JFfQsB_hYpbZ0GSELYzid1dnXGI.roa (raw, json)
Hash identifier: 9AlkYgwcNANskr9BsSR3xqMJAbh0wdUb07lpSXnJ/4c=
Subject key identifier: 24:57:D0:B0:1F:E1:62:96:D9:D0:64:84:2D:8C:E2:77:57:67:5C:62
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A18A4CC9861B2205623C30D897D57BE359
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JFfQsB_hYpbZ0GSELYzid1dnXGI.roa
Signing time: Fri 30 Oct 2026 00:54:10 +0000
ROA not before: Fri 30 Oct 2026 00:54:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218496
IP address blocks: 177.202.113.0/24 maxlen: 24
201.8.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8a:4c:c9:86:1b:22:05:62:3c:30:d8:97:d5:7b:e3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 30 00:54:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2457d0b01fe16296d9d064842d8ce27757675c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0b:4f:e8:e4:fc:ab:ee:44:2a:cb:ef:b4:4a:
1f:cd:8b:0c:ad:db:87:08:73:8e:21:be:90:67:52:
22:e2:8d:fd:7c:3f:e4:1a:a4:b4:dc:9a:8f:27:9d:
25:57:1d:96:b1:d5:f1:67:5e:ba:51:50:5b:d5:27:
8f:3d:26:0b:8b:82:a9:a8:01:95:0d:87:2d:06:50:
2c:ad:f9:ca:45:91:7d:c1:f8:78:94:78:fe:30:6d:
d1:57:51:98:79:bd:ca:a0:4f:a7:16:71:62:68:b0:
80:8b:37:58:0a:b1:7d:03:12:01:34:d7:0e:c2:aa:
ee:ef:1a:fd:1a:0d:41:ee:b2:86:1c:d6:d9:81:3c:
97:0d:a9:09:2b:0c:a6:3e:5a:92:bd:86:e4:99:6f:
ee:30:21:a7:cb:7b:95:c9:4a:13:b3:b6:1d:36:0a:
0d:17:b5:e2:ce:76:ad:e7:28:47:a3:68:d9:ca:24:
7f:86:d2:2e:e0:ab:98:0b:64:21:2f:d5:41:46:6e:
46:db:dc:c4:d8:6b:b8:cf:49:03:21:1c:86:0a:9b:
3f:8e:c7:24:c3:17:a3:ea:95:a6:e5:4f:9c:d7:04:
52:24:87:60:b6:af:ec:26:2f:cd:41:e1:cf:bb:27:
33:71:fa:d9:5a:ba:94:c3:dd:35:97:35:d5:c6:4e:
72:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:57:D0:B0:1F:E1:62:96:D9:D0:64:84:2D:8C:E2:77:57:67:5C:62
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JFfQsB_hYpbZ0GSELYzid1dnXGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.202.113.0/24
201.8.93.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:1d:5e:86:73:f9:2b:ad:3e:1a:77:8d:f5:d0:40:be:c2:bf:
22:b4:20:3a:dd:a2:2a:95:9b:00:97:a7:81:39:87:66:6b:f5:
5e:ed:65:1e:b1:b8:bb:54:8c:4a:6c:12:a8:74:50:0d:cd:b6:
79:8f:29:05:13:95:b0:3f:9a:72:25:65:21:02:2b:e2:86:00:
f1:54:31:24:24:9f:e7:ae:dd:35:b2:88:8e:29:12:9a:01:25:
8a:b9:a4:85:20:59:71:e5:a7:38:ea:e5:02:e4:40:c4:57:cf:
65:4e:c9:df:9a:98:03:b1:b7:5b:e2:36:17:b2:96:a7:87:ce:
79:62:bf:9f:94:5a:f2:b9:0e:41:e4:d9:16:2f:7b:6e:98:e6:
bb:9a:fe:63:ee:d9:5f:91:35:d3:a3:33:cd:8f:f4:28:9b:ed:
66:02:42:b4:38:8a:ed:6c:5b:da:f9:3e:38:02:4e:c1:77:3f:
32:53:75:39:ce:17:f5:0a:0f:48:53:19:1f:7b:f6:c9:8e:ba:
81:b5:ce:3e:87:bd:71:f9:cb:ff:81:a8:12:b9:f6:9c:c8:c9:
d1:be:8e:75:a0:c8:62:2d:89:e8:e1:da:9d:20:9b:bf:e2:80:
7a:f7:d9:29:9f:3e:54:f5:d8:14:3d:35:c6:4c:49:2f:57:fd:
03:a7:9f:f5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaGKTMmGGyIFYjww2JfVe+NZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYxMDMwMDA1NDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDU3ZDBiMDFmZTE2Mjk2ZDlkMDY0ODQyZDhjZTI3NzU3Njc1YzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAtP6OT8q+5EKsvvtEofzYsMrduH
CHOOIb6QZ1Ii4o39fD/kGqS03JqPJ50lVx2WsdXxZ166UVBb1SePPSYLi4KpqAGV
DYctBlAsrfnKRZF9wfh4lHj+MG3RV1GYeb3KoE+nFnFiaLCAizdYCrF9AxIBNNcO
wqru7xr9Gg1B7rKGHNbZgTyXDakJKwymPlqSvYbkmW/uMCGny3uVyUoTs7YdNgoN
F7Xiznat5yhHo2jZyiR/htIu4KuYC2QhL9VBRm5G29zE2Gu4z0kDIRyGCps/jsck
wxej6pWm5U+c1wRSJIdgtq/sJi/NQeHPuyczcfrZWrqUw901lzXVxk5y6QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCRX0LAf4WKW2dBkhC2M4ndXZ1xiMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvSkZmUXNCX2hZcGJaMEdTRUxZemlkMWRuWEdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAscpxAwQA
yQhdMA0GCSqGSIb3DQEBCwUAA4IBAQAqHV6Gc/krrT4ad4310EC+wr8itCA63aIq
lZsAl6eBOYdma/Ve7WUesbi7VIxKbBKodFANzbZ5jykFE5WwP5pyJWUhAivihgDx
VDEkJJ/nrt01soiOKRKaASWKuaSFIFlx5ac46uUC5EDEV89lTsnfmpgDsbdb4jYX
spanh855Yr+flFryuQ5B5NkWL3tumOa7mv5j7tlfkTXTozPNj/Qom+1mAkK0OIrt
bFva+T44Ak7Bdz8yU3U5zhf1Cg9IUxkfe/bJjrqBtc4+h71x+cv/gagSufacyMnR
vo51oMhiLYno4dqdIJu/4oB699kpnz5U9dgUPTXGTEkvV/0Dp5/1
-----END CERTIFICATE-----
Generated at Wed Nov 4 16:42:40 2026 by rpki-client