Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/R5q95_rqlo-J6sxSXupi1Szea5I.roa
File: R5q95_rqlo-J6sxSXupi1Szea5I.roa (raw, json)
Hash identifier: nlKruT/xK3fiIovpOE92529Xj79w6W4mQSUzR5lSxsQ=
Subject key identifier: 47:9A:BD:E7:FA:EA:96:8F:89:EA:CC:52:5E:EA:62:D5:2C:DE:6B:92
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FBA2D4485330B63E536972C987D7535EE
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/R5q95_rqlo-J6sxSXupi1Szea5I.roa
Signing time: Fri 31 Jul 2026 21:55:56 +0000
ROA not before: Fri 31 Jul 2026 21:55:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219337
IP address blocks: 177.3.208.0/24 maxlen: 24
177.3.209.0/24 maxlen: 24
177.3.211.0/24 maxlen: 24
177.3.212.0/24 maxlen: 24
177.3.213.0/24 maxlen: 24
177.3.214.0/24 maxlen: 24
177.3.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ba:2d:44:85:33:0b:63:e5:36:97:2c:98:7d:75:35:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 31 21:55:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=479abde7faea968f89eacc525eea62d52cde6b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cf:19:ef:57:12:9e:4d:2e:93:af:16:89:fa:
14:a8:7b:5a:8f:2c:eb:44:8b:0b:b3:fe:de:ea:86:
78:2c:ee:4b:49:a7:39:3e:50:ce:35:95:b4:68:96:
d5:5d:60:b8:62:e7:39:2b:a1:d6:3f:1e:92:01:e9:
d1:d7:cd:13:1b:60:29:bb:ff:b1:78:33:8f:99:7b:
3f:e3:0b:2a:17:e2:9a:f5:23:01:13:20:7c:f5:e5:
22:b6:96:68:8b:89:f8:39:ee:8b:14:2c:76:5f:25:
7a:a9:e8:cc:b0:35:a6:93:a3:8f:d0:13:ee:6c:5b:
cd:03:cc:8d:93:26:2e:21:65:fa:23:69:2c:71:35:
fb:9a:a1:07:1b:2e:1d:8f:19:bd:a7:ce:a4:b5:d7:
8f:e4:51:b1:ba:77:1f:8e:95:85:84:38:a6:f5:7b:
43:8b:b1:95:0e:3a:92:67:64:ff:04:32:d1:ac:6a:
d1:e8:ed:dc:3d:17:89:38:b4:b1:5e:e1:ae:79:dd:
98:f7:75:e4:42:c8:d4:fc:6d:06:29:dd:d8:49:4a:
b2:91:71:13:4c:3b:86:40:c9:a7:e1:51:57:e0:68:
d9:84:04:5b:94:e9:04:99:05:6d:49:db:be:f3:0c:
b8:ab:9b:8a:14:4d:86:26:0d:0a:a5:85:92:4f:90:
70:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9A:BD:E7:FA:EA:96:8F:89:EA:CC:52:5E:EA:62:D5:2C:DE:6B:92
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/R5q95_rqlo-J6sxSXupi1Szea5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.3.208.0/23
177.3.211.0-177.3.215.255
Signature Algorithm: sha256WithRSAEncryption
ad:42:95:c6:a9:2e:29:37:24:78:43:e5:a2:2c:42:41:39:16:
a4:0f:24:3f:da:73:6f:4c:eb:16:31:76:a0:2a:7b:18:1f:02:
6d:c1:09:39:23:68:f2:97:0b:62:f6:49:0c:9a:35:44:cb:2f:
68:02:e2:e4:01:f7:4a:05:51:16:d9:30:8c:e2:36:70:35:c4:
48:db:ba:26:cf:3b:04:4b:14:86:a8:3e:12:f1:13:3d:b1:2c:
4e:b5:f0:2a:22:a6:d4:ea:b3:c0:50:ff:15:be:bf:50:e7:ca:
26:21:dd:14:68:1d:ea:e9:f2:98:f4:3b:88:f5:44:ea:23:76:
77:04:ed:17:d1:d7:27:31:4a:64:d0:e0:4c:8b:be:11:79:c2:
28:81:9b:83:29:a8:c0:c0:cc:7d:67:42:ca:9b:05:33:48:f9:
ef:f8:c6:3f:e4:5c:8c:51:3d:a4:a5:8f:2b:7f:82:7b:ac:69:
ba:59:2e:e3:c7:0d:33:65:d2:27:d1:5e:e7:6e:a4:f6:ed:e5:
2b:f9:fc:2e:12:00:35:35:69:43:b2:ea:5f:fb:27:55:b3:f6:
9e:8c:87:37:28:78:19:81:45:a0:20:ce:a9:67:c6:c9:dd:f1:
d5:00:d6:a2:38:10:f4:92:f2:42:77:e6:04:f9:75:e6:35:96:
2a:3e:87:75
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Aug 4 09:52:39 2026 by rpki-client