Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/KAXYGY3zBBbrqDfLADkkDMstBgI.roa
File: KAXYGY3zBBbrqDfLADkkDMstBgI.roa (raw, json)
Hash identifier: Tzve3VOaTm4XA11rBZWIq3qqt85eh6B5jMnHtaYBFnc=
Subject key identifier: 28:05:D8:19:8D:F3:04:16:EB:A8:37:CB:00:39:24:0C:CB:2D:06:02
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1280938E8B34CEDC93BD97775E7000580
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/KAXYGY3zBBbrqDfLADkkDMstBgI.roa
Signing time: Sat 10 Oct 2026 22:57:35 +0000
ROA not before: Sat 10 Oct 2026 22:57:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203676
IP address blocks: 179.253.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:09:38:e8:b3:4c:ed:c9:3b:d9:77:75:e7:00:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 10 22:57:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2805d8198df30416eba837cb0039240ccb2d0602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:a5:4d:4d:72:81:b0:37:d7:21:ba:b6:f0:
6f:4b:09:e1:31:53:de:e0:e0:7f:c9:8e:c5:c3:9a:
ba:4a:e2:f2:e8:47:06:c7:da:6f:92:2e:fe:b7:86:
fb:1b:de:4b:28:cc:b6:2b:0d:e6:fa:16:aa:a9:0b:
7d:77:b8:9f:e5:65:f5:0e:42:35:cf:53:a5:bb:9c:
1b:d5:6b:ec:a8:50:be:c7:d2:0a:3f:66:57:c1:51:
b0:51:79:16:7f:f6:17:71:a9:1b:26:13:0d:ff:a5:
d5:f5:d2:39:91:cf:ae:f3:0c:ce:bf:28:d7:91:d9:
af:14:16:4c:71:fc:bb:8f:4d:ab:8b:e5:32:09:2d:
8d:7c:a6:be:64:c4:dc:91:50:ca:1f:d4:0d:26:71:
7c:a5:aa:6c:7c:92:75:0d:a8:16:59:8b:2a:3f:02:
24:de:58:fc:b6:01:bb:37:7f:04:01:8d:43:84:76:
e1:3b:89:65:c4:e0:f1:65:21:1e:70:bf:99:f2:3d:
b5:35:c7:76:90:5f:44:5c:e1:cf:f0:db:74:f0:c4:
43:a5:7d:51:95:87:a4:97:73:b3:c8:35:b2:c7:92:
d4:c3:b9:e5:50:c6:4e:78:42:60:16:6b:7e:73:8f:
a9:22:14:91:31:60:35:a4:95:09:b5:c1:c8:af:d6:
39:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:05:D8:19:8D:F3:04:16:EB:A8:37:CB:00:39:24:0C:CB:2D:06:02
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/KAXYGY3zBBbrqDfLADkkDMstBgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.253.186.0/24
Signature Algorithm: sha256WithRSAEncryption
13:e3:32:47:f9:fb:13:2b:90:6b:9c:d7:5c:8f:3d:df:7e:80:
27:b1:6c:b8:2c:88:d1:57:c1:af:e8:d4:1f:16:28:16:e7:1c:
d4:8c:9f:81:d0:62:da:62:21:98:f7:d9:ec:fa:62:fb:0b:8f:
b5:a1:bd:d8:72:8b:49:0a:60:38:27:be:b2:26:c2:e4:1c:6b:
5d:87:59:2e:d5:74:0c:6e:ff:34:9c:9f:f0:35:8e:8f:d3:56:
7a:f9:3c:7a:4d:d7:e0:65:3a:4c:f6:2a:de:41:0f:9c:98:c0:
e5:49:b1:b6:cb:14:18:80:7d:9e:3b:a9:66:03:7d:a0:9f:8a:
32:e8:10:5f:d2:f7:33:5c:cc:77:ce:6c:69:79:35:a6:56:9f:
a3:9f:e2:23:9c:cf:8e:6a:40:af:d6:f0:fd:8e:5c:64:fc:89:
f6:e6:d0:23:12:46:c1:8e:ac:ef:a5:1a:41:92:c9:78:36:51:
bc:f5:fd:5f:1b:79:4a:25:7c:25:0f:14:04:0b:c2:39:4b:85:
6f:36:74:95:f1:bb:fa:ba:b0:fc:78:a9:4d:b2:2b:10:6e:0f:
08:46:ec:51:5a:95:f3:37:f3:cd:d1:83:dc:19:d9:1d:b7:e2:
75:03:00:4a:f1:b3:0b:b4:cf:1d:86:03:32:62:36:0b:3d:a9:
af:2e:3c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:27:38 2026 by rpki-client