Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ViPU5wmVFivCkFTddCNvaDsObP8.roa
File: ViPU5wmVFivCkFTddCNvaDsObP8.roa (raw, json)
Hash identifier: s2njkFY1j690XghTdI8O3luwrgd0KLrNgaqtyFlRog4=
Subject key identifier: 56:23:D4:E7:09:95:16:2B:C2:90:54:DD:74:23:6F:68:3B:0E:6C:FF
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1081D78FA010A65BB1E2DCF84FB61FDAB
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ViPU5wmVFivCkFTddCNvaDsObP8.roa
Signing time: Sun 04 Oct 2026 18:11:51 +0000
ROA not before: Sun 04 Oct 2026 18:11:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42161
IP address blocks: 179.253.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 09:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:1d:78:fa:01:0a:65:bb:1e:2d:cf:84:fb:61:fd:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 4 18:11:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5623d4e70995162bc29054dd74236f683b0e6cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:25:97:66:a8:fa:77:76:40:d1:75:71:5a:
8b:de:b4:ac:33:dc:cd:a0:ab:cb:78:79:54:20:70:
69:44:04:e0:f9:7d:fa:5a:50:87:30:c0:25:da:59:
28:99:fd:af:a0:0b:3e:e1:08:42:0d:b1:bb:39:86:
0c:a8:53:11:90:94:2f:55:3c:93:0e:39:43:59:f6:
cd:8b:39:47:8e:e7:fd:00:18:4f:73:60:c9:bb:45:
34:57:cf:7b:78:0b:57:2b:f3:b9:b1:bc:46:54:16:
f2:e3:fd:79:6e:5e:65:29:79:1b:34:74:5b:fd:3a:
d3:33:af:26:76:84:f2:9a:fa:8e:52:66:7e:89:e0:
e1:5b:3f:47:4d:07:21:eb:8c:7c:d3:0b:55:63:47:
af:9c:18:ec:03:c8:25:6b:97:2a:b3:2f:48:93:f0:
46:84:e5:b7:cf:49:03:7b:ac:3b:76:49:c7:3f:b9:
5d:ad:fc:af:c9:43:cf:5e:ee:30:38:b2:ab:c2:49:
0d:3b:94:50:28:15:85:fc:67:e6:be:da:c5:ca:a1:
ed:e9:68:3e:f6:b1:51:83:91:23:9f:fc:46:d6:48:
80:55:8a:6c:f3:ef:46:01:11:b7:db:ba:fc:78:d9:
bd:12:c3:8d:f3:4b:da:77:8e:9c:0e:6b:ed:ef:0c:
53:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:23:D4:E7:09:95:16:2B:C2:90:54:DD:74:23:6F:68:3B:0E:6C:FF
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ViPU5wmVFivCkFTddCNvaDsObP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.253.169.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c9:a2:79:45:ba:bd:d3:a9:f4:2b:35:4f:00:e6:e9:dd:af:
ad:95:7a:e8:11:90:f5:04:7d:a1:07:3f:6a:bd:a4:7d:21:78:
a8:4f:7b:fd:31:06:d9:6f:12:05:cd:eb:c8:4f:fa:f4:af:98:
6c:b9:ef:86:aa:c6:77:ef:0c:3a:4c:5a:a7:04:76:91:dd:78:
3e:7d:39:4e:fa:5e:f3:93:36:f1:86:fc:ed:ef:3d:f3:0c:1a:
16:c5:ca:2c:46:9c:3c:b2:93:b9:1c:9c:fb:65:67:b3:f8:10:
b8:80:d4:ac:b7:d7:3c:b5:d1:cb:58:91:ca:7f:1e:39:ff:44:
a4:fe:1f:99:43:b7:1d:4d:f1:de:4f:bf:e0:31:4e:2c:12:8a:
e5:1f:4e:02:2d:22:94:4f:ee:25:dd:80:a0:fe:f3:77:72:82:
c6:36:91:e7:54:e0:2d:52:3e:03:ba:9c:e8:4b:a4:5b:6c:8b:
da:8a:20:86:c1:9e:94:a3:25:7c:a9:d0:56:7d:82:d6:5a:63:
12:9e:b5:53:2d:52:af:48:d0:78:d5:61:ea:34:96:b9:ad:4f:
97:67:a7:52:c6:69:e2:7c:46:47:4d:43:57:62:3b:32:4d:d6:
eb:e9:2d:ed:a4:13:f8:87:3f:88:52:9e:42:c6:90:bc:ab:91:
cf:02:93:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:07:36 2026 by rpki-client