Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/T2RaeIG2yrHs-eI6AWtD-0fctoM.roa
File: T2RaeIG2yrHs-eI6AWtD-0fctoM.roa (raw, json)
Hash identifier: 1LdnbuqI73jqXbeEi6KxKbmVeplmLckRRiUhWSADpEo=
Subject key identifier: 4F:64:5A:78:81:B6:CA:B1:EC:F9:E2:3A:01:6B:43:FB:47:DC:B6:83
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A19D5BD874F7CE9B4209CA1F645A47E36E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/T2RaeIG2yrHs-eI6AWtD-0fctoM.roa
Signing time: Mon 02 Nov 2026 17:43:24 +0000
ROA not before: Mon 02 Nov 2026 17:43:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218296
IP address blocks: 177.3.254.0/24 maxlen: 24
179.253.98.0/24 maxlen: 24
179.253.100.0/24 maxlen: 24
179.253.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 01:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:5b:d8:74:f7:ce:9b:42:09:ca:1f:64:5a:47:e3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 2 17:43:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f645a7881b6cab1ecf9e23a016b43fb47dcb683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f6:10:de:1a:e7:c1:cb:75:d3:36:68:3f:e3:
46:c6:91:ac:3a:00:51:27:3f:06:a8:c6:55:4c:10:
6e:96:c1:55:bf:88:35:59:12:5b:ea:ba:76:76:35:
9d:87:fa:9e:93:03:4d:37:36:23:9d:37:e2:fe:7d:
bc:ff:14:c4:91:39:54:bf:ff:8d:3b:73:91:db:da:
b0:f3:0d:64:6b:c6:b2:aa:b3:b3:41:5b:68:ff:9f:
4d:f1:a0:e7:4c:42:08:c1:d1:be:bd:69:c9:c6:30:
ba:18:80:5f:69:11:f6:de:81:01:6f:cc:cb:4b:d0:
0f:31:d6:ba:42:04:8c:f7:c9:91:98:d2:7a:63:25:
bf:ed:70:27:76:95:8d:5d:fd:6b:9f:a0:d6:64:f9:
15:35:a2:71:01:06:1b:c0:4f:23:a7:7a:de:12:3c:
12:ed:73:b3:ca:f0:25:70:08:f4:60:0a:bc:4b:e0:
d6:72:a5:a1:3a:f3:99:04:fd:7a:13:26:08:f6:14:
b4:b7:48:99:33:d6:af:59:1e:3a:6a:d0:b0:45:ba:
b9:77:c7:70:16:55:1a:d1:25:ef:ea:00:df:fa:13:
8e:e3:24:71:fa:50:60:e6:65:f4:e2:b0:23:88:da:
0d:7a:4d:98:3a:4f:e7:c3:dc:99:14:96:d2:2d:8f:
5f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:64:5A:78:81:B6:CA:B1:EC:F9:E2:3A:01:6B:43:FB:47:DC:B6:83
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/T2RaeIG2yrHs-eI6AWtD-0fctoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.3.254.0/24
179.253.98.0/24
179.253.100.0/23
Signature Algorithm: sha256WithRSAEncryption
85:5a:3a:d7:15:af:55:b9:99:79:27:8e:7d:28:66:0d:15:16:
da:c4:23:f7:95:aa:23:3f:f8:04:ec:e1:74:8c:c5:88:74:a5:
77:ce:12:8a:e4:45:07:1a:67:e1:f8:43:aa:92:66:97:dd:e3:
29:f9:a3:ac:80:43:4e:ce:cf:fb:9a:df:8a:a4:71:18:5f:d9:
02:bc:e1:5c:55:dd:04:92:cb:08:3e:c0:c8:ef:60:22:03:17:
de:a5:03:74:f2:d7:d4:41:b5:e8:d9:e3:63:eb:88:55:b9:7c:
00:91:58:97:f5:ff:b6:21:ff:3f:e6:95:d5:ce:ba:1a:a6:f2:
c5:f8:1a:da:06:65:4a:c6:42:57:9d:27:33:52:af:3b:92:8f:
6e:a4:28:87:fb:c4:d9:6c:00:38:c9:02:e5:33:6a:8e:1f:79:
f7:2b:55:e7:dc:d3:a6:38:a5:4f:93:19:e1:b7:c2:65:1d:97:
24:77:96:a3:b2:2f:60:bd:2f:2c:b4:0c:20:25:db:da:b9:1c:
41:ce:a1:2a:ed:64:a6:7b:94:fe:bb:a6:60:2d:cc:09:94:45:
63:88:de:be:61:ed:a8:3e:c4:27:f9:14:97:df:8e:ec:ad:8f:
ff:1e:50:05:07:8e:e9:57:87:12:7a:f3:95:bf:1b:cb:cf:4b:
7f:2a:c4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 11:17:56 2026 by rpki-client