Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/SnIVJBjO43Oz75eClcOC7op8qXE.roa
File: SnIVJBjO43Oz75eClcOC7op8qXE.roa (raw, json)
Hash identifier: /Hqw1jRkcgy2d23yMCJFMvupqd7np+ZBtGrURoA1As0=
Subject key identifier: 4A:72:15:24:18:CE:E3:73:B3:EF:97:82:95:C3:82:EE:8A:7C:A9:71
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A145BF6A5736EBA5F9D635C2FE93793196
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/SnIVJBjO43Oz75eClcOC7op8qXE.roa
Signing time: Fri 16 Oct 2026 17:25:34 +0000
ROA not before: Fri 16 Oct 2026 17:25:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218490
IP address blocks: 177.202.96.0/24 maxlen: 24
201.58.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:bf:6a:57:36:eb:a5:f9:d6:35:c2:fe:93:79:31:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 16 17:25:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a72152418cee373b3ef978295c382ee8a7ca971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:03:4a:cf:17:ac:46:22:f8:31:b6:51:8b:f3:
ab:db:c8:9f:92:96:72:b3:13:45:c7:6f:56:eb:90:
3a:97:1a:fb:42:ed:dc:ab:80:6a:d6:1f:99:50:08:
d8:34:d5:66:44:eb:9a:53:7d:ef:88:26:b6:d6:fc:
a4:68:10:45:3e:99:62:da:67:c3:3a:83:85:48:8c:
dd:89:54:6f:67:bc:2c:65:84:66:a7:cf:bb:21:41:
cc:9e:fd:e6:c1:56:5d:6f:fb:f0:f0:5b:d8:7f:e2:
b2:f8:1d:3a:9c:f4:8f:05:16:a3:11:22:d1:40:84:
ba:27:4f:c0:57:bc:6a:2a:c9:64:ac:9d:bd:b6:61:
ff:de:55:96:e3:a3:b8:93:d1:f1:b0:c1:d1:5a:f8:
1d:3f:22:54:c4:fa:9e:a7:2c:24:5a:72:8a:1e:87:
cb:68:2f:8c:97:23:84:ee:1b:85:0d:63:6b:c7:87:
41:b7:72:82:e4:15:01:f5:41:27:8a:6e:f4:72:af:
8d:fd:a0:a3:eb:a0:f7:fd:c3:7e:26:08:5a:35:c6:
aa:92:dc:9e:f3:ec:e5:61:df:eb:8c:db:7d:70:22:
eb:d2:98:f2:bd:43:8f:ce:83:b7:0f:62:6f:93:22:
be:be:6b:33:20:77:b1:c0:ca:26:bb:c3:6a:4d:90:
79:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:72:15:24:18:CE:E3:73:B3:EF:97:82:95:C3:82:EE:8A:7C:A9:71
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/SnIVJBjO43Oz75eClcOC7op8qXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.202.96.0/24
201.58.150.0/24
Signature Algorithm: sha256WithRSAEncryption
87:fd:ab:b8:a9:5d:50:00:c9:da:78:e6:00:1d:68:19:29:0a:
66:d7:ba:a8:b2:69:52:3b:81:17:1e:10:3f:0e:d0:13:2e:8f:
91:3a:bc:eb:60:fc:0a:59:cd:85:2f:6e:41:05:34:11:96:d2:
be:6e:df:3f:2b:ec:06:8a:a3:7f:39:c2:9f:9a:38:b5:a8:19:
a6:92:bf:c5:9d:4a:7a:bf:c7:32:4b:da:58:9f:b9:c0:02:29:
d4:f7:b3:a4:ae:25:5c:97:4d:0d:4d:86:71:98:8b:9f:00:eb:
8d:7f:43:1e:51:29:78:0a:0d:4d:46:e2:9c:6a:a6:72:b2:dd:
ea:81:73:62:1b:be:f0:10:4a:75:00:2c:f1:94:81:eb:f4:7e:
93:53:4a:1e:e9:69:89:28:d8:31:55:c7:52:58:8b:d0:20:a0:
91:b7:8f:41:eb:7d:a1:c1:90:7c:e0:f4:19:25:4f:ba:f4:f4:
29:88:9d:8c:7d:aa:1a:73:3f:d8:9b:9b:46:4a:da:df:10:f2:
8f:4e:20:e2:f6:23:0d:5d:70:a2:27:ca:bc:bb:df:fd:90:52:
3c:c4:43:9b:24:45:76:31:7b:6e:d7:4c:3c:73:a4:61:e8:9a:
f8:b1:ee:1a:a4:6a:74:2b:8c:92:b4:03:17:44:74:a8:61:c9:
2c:c2:eb:1c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaFFv2pXNuul+dY1wv6TeTGWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYxMDE2MTcyNTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTcyMTUyNDE4Y2VlMzczYjNlZjk3ODI5NWMzODJlZThhN2NhOTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wNKzxesRiL4MbZRi/Or28ifkpZy
sxNFx29W65A6lxr7Qu3cq4Bq1h+ZUAjYNNVmROuaU33viCa21vykaBBFPpli2mfD
OoOFSIzdiVRvZ7wsZYRmp8+7IUHMnv3mwVZdb/vw8FvYf+Ky+B06nPSPBRajESLR
QIS6J0/AV7xqKslkrJ29tmH/3lWW46O4k9HxsMHRWvgdPyJUxPqepywkWnKKHofL
aC+MlyOE7huFDWNrx4dBt3KC5BUB9UEnim70cq+N/aCj66D3/cN+JghaNcaqktye
8+zlYd/rjNt9cCLr0pjyvUOPzoO3D2JvkyK+vmszIHexwMomu8NqTZB5dwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEpyFSQYzuNzs++XgpXDgu6KfKlxMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvU25JVkpCak80M096NzVlQ2xjT0M3b3A4cVhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAscpgAwQA
yTqWMA0GCSqGSIb3DQEBCwUAA4IBAQCH/au4qV1QAMnaeOYAHWgZKQpm17qosmlS
O4EXHhA/DtATLo+ROrzrYPwKWc2FL25BBTQRltK+bt8/K+wGiqN/OcKfmji1qBmm
kr/FnUp6v8cyS9pYn7nAAinU97OkriVcl00NTYZxmIufAOuNf0MeUSl4Cg1NRuKc
aqZyst3qgXNiG77wEEp1ACzxlIHr9H6TU0oe6WmJKNgxVcdSWIvQIKCRt49B632h
wZB84PQZJU+69PQpiJ2Mfaoacz/Ym5tGStrfEPKPTiDi9iMNXXCiJ8q8u9/9kFI8
xEObJEV2MXtu10w8c6Rh6Jr4se4apGp0K4yStAMXRHSoYckswusc
-----END CERTIFICATE-----
Generated at Wed Nov 4 16:42:45 2026 by rpki-client