Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Sz3BCj55xZGzFXLtmb68To66umM.roa
File: Sz3BCj55xZGzFXLtmb68To66umM.roa (raw, json)
Hash identifier: 9+hY4aDF9Dw6VyMAZndycnBgKDpdfN7XPpKQGWynPCE=
Subject key identifier: 4B:3D:C1:0A:3E:79:C5:91:B3:15:72:ED:99:BE:BC:4E:8E:BA:BA:63
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0200452169DA0BC708DE64DFA5A2A5710
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Sz3BCj55xZGzFXLtmb68To66umM.roa
Signing time: Thu 20 Aug 2026 16:32:29 +0000
ROA not before: Thu 20 Aug 2026 16:32:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219010
IP address blocks: 179.254.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:04:52:16:9d:a0:bc:70:8d:e6:4d:fa:5a:2a:57:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 20 16:32:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b3dc10a3e79c591b31572ed99bebc4e8ebaba63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:42:26:ab:bd:7f:c2:92:fe:2e:1e:61:d9:
b4:09:fc:1a:b6:7f:ba:a8:21:bf:e5:89:b3:fc:64:
51:c6:be:e0:59:18:01:a7:14:9b:11:bf:b0:cc:0b:
99:21:c1:81:3d:0e:01:93:d6:bc:ae:6f:48:44:66:
34:a1:ea:b2:25:cf:00:39:bd:44:83:f1:70:c7:89:
9a:01:c2:74:c5:73:d8:34:c3:99:5e:10:24:ce:02:
33:fa:17:54:80:e8:bf:65:0f:15:68:a7:d3:7a:b8:
84:cc:24:30:5a:40:ac:ba:41:59:ff:fc:66:e2:af:
f4:6c:b9:d4:ef:14:f7:9e:73:96:03:16:ce:04:ef:
60:3c:62:93:24:0d:d7:28:c6:bd:07:00:a4:52:ef:
d1:92:22:76:2c:15:19:1f:5f:78:6e:78:cf:e9:7d:
61:90:44:d1:bb:bb:af:d2:24:3a:a0:a5:14:ff:a7:
22:a0:97:2a:0b:a8:74:44:a6:2d:bc:d1:22:59:23:
1a:4a:4b:10:fe:d0:7f:29:0c:83:1a:6d:3b:c6:2d:
24:0a:37:33:f7:67:6f:95:cc:9c:0d:60:d6:1b:1a:
d2:54:99:21:45:3f:1c:9d:27:de:d0:3e:0f:b3:b2:
d8:98:b0:28:b8:fc:c9:ce:62:60:01:cf:5d:28:da:
4c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3D:C1:0A:3E:79:C5:91:B3:15:72:ED:99:BE:BC:4E:8E:BA:BA:63
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Sz3BCj55xZGzFXLtmb68To66umM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.254.105.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ad:90:ba:8b:1d:cd:ca:d5:3e:a6:76:e9:43:c1:62:97:74:
a3:5c:be:a9:f6:b0:f7:e7:2e:b7:43:f2:4b:77:53:97:3a:c5:
13:8c:90:19:b8:48:5a:07:88:92:34:07:37:9e:c4:6d:f3:51:
be:f3:b8:8b:fa:b9:59:2a:0d:67:e0:c5:3d:a4:0b:2c:19:df:
66:f9:bf:8b:b6:8b:27:b4:46:fe:69:75:53:09:c8:e1:a3:21:
49:e7:08:95:89:d3:3e:19:88:4a:cd:93:f8:32:3d:96:89:d1:
3a:48:fb:10:c5:e9:f9:61:e4:a2:27:80:a6:f1:4a:1a:3a:66:
07:54:9c:17:52:d2:81:ca:fa:7b:f9:e8:72:09:4b:19:18:7e:
3f:d8:ba:f6:e1:10:14:e2:a7:a2:a8:be:67:73:a6:6b:0d:f7:
44:3e:57:c5:4c:92:af:1a:98:6c:86:5c:66:45:5e:e1:84:7f:
11:32:0f:af:be:9d:d6:3b:d0:bf:7a:e5:8f:38:e8:95:24:c0:
af:ea:7b:4a:15:fb:c4:06:53:f9:df:87:af:55:28:40:80:ef:
b3:12:0b:e8:09:ec:d8:98:0d:a9:cf:9c:6a:d4:74:17:28:75:
97:4b:a9:a1:7a:40:9a:f1:d7:bc:86:68:de:eb:87:50:8a:d6:
ce:ae:37:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:28:17 2026 by rpki-client