Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/XBaZcxObsHJWP0-GBRk7BKQNVZg.roa
File: XBaZcxObsHJWP0-GBRk7BKQNVZg.roa (raw, json)
Hash identifier: lIwPIoVqCCj2JVCDZQiv2o5Lo1ipKbQHWMJH2merARU=
Subject key identifier: 5C:16:99:73:13:9B:B0:72:56:3F:4F:86:05:19:3B:04:A4:0D:55:98
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A164DCB199E3F9E295877F68B24062B701
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/XBaZcxObsHJWP0-GBRk7BKQNVZg.roa
Signing time: Thu 22 Oct 2026 18:25:47 +0000
ROA not before: Thu 22 Oct 2026 18:25:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218308
IP address blocks: 179.253.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:dc:b1:99:e3:f9:e2:95:87:7f:68:b2:40:62:b7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 22 18:25:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c169973139bb072563f4f8605193b04a40d5598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ab:6a:05:92:71:e7:f4:67:a8:aa:05:a5:9b:
67:7a:8b:82:f7:4d:63:fd:bf:ed:7f:da:8e:a4:c5:
10:97:f2:f5:67:a0:1b:45:68:c6:e9:e7:0d:f0:ad:
06:38:cc:ad:c8:f5:80:b4:6a:5a:be:05:1b:01:e1:
7b:7e:19:77:34:89:19:06:0a:45:d2:f0:c4:05:ce:
04:5b:b2:1a:a6:62:25:57:5d:e6:78:4c:34:83:f7:
70:f8:33:b9:0f:5d:01:97:fc:b6:d8:ff:1b:e5:df:
b7:41:ff:ff:ad:d8:a1:11:f9:72:d3:cf:8e:b5:b3:
64:ea:1b:89:3d:e9:b9:c4:5a:19:c4:ad:3d:c8:2c:
5f:fa:46:cb:ce:77:b1:31:ef:ec:96:ad:9d:f6:a0:
c4:f6:8e:48:00:8d:9a:29:27:85:fa:cf:88:b6:da:
29:21:7a:56:25:e1:7f:ee:19:da:f8:e0:b9:b9:0e:
ce:d0:3d:1f:83:73:d5:5b:4f:da:f8:57:de:f8:8e:
5c:72:4b:84:45:b9:33:44:e1:56:16:e6:8b:e4:bd:
36:95:1c:e0:66:ae:97:39:7b:96:3d:35:ee:fa:bd:
0a:4c:31:7d:55:8b:21:f7:1c:81:ea:95:ed:20:c9:
ff:a4:01:24:b0:d4:9c:80:18:28:61:39:20:7f:14:
23:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:16:99:73:13:9B:B0:72:56:3F:4F:86:05:19:3B:04:A4:0D:55:98
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/XBaZcxObsHJWP0-GBRk7BKQNVZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.253.109.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:05:61:ab:a0:89:bb:b5:1f:5d:06:56:00:9a:aa:f9:c3:fc:
cd:88:a9:e5:c7:2c:dc:cc:2a:74:ec:2a:99:4b:51:73:63:d1:
89:89:b3:ef:e7:89:a9:51:6b:49:72:70:57:12:cf:d6:e0:0d:
f1:5f:37:80:e3:16:72:01:b8:df:ae:61:e4:fe:3c:fa:bd:88:
f6:4d:c6:09:5e:79:d9:77:26:fa:48:e8:28:0d:3e:42:64:c0:
74:c7:a0:99:ba:37:4f:7a:0c:c2:73:4b:a7:7e:ee:b1:9e:ab:
59:ea:2c:90:48:fa:57:88:f5:31:9d:69:c9:19:75:d4:09:d4:
2b:27:5c:7f:34:70:ad:98:64:3e:29:a4:9e:77:78:6c:e6:22:
30:77:e5:c7:4f:08:52:0f:db:7d:0b:b2:a8:91:76:af:cf:30:
17:b8:79:63:5b:69:89:17:b6:f7:c4:24:cf:47:cb:f8:9d:a9:
e2:f8:a0:b9:d3:69:d2:3f:6e:2a:d5:32:98:62:13:8b:a1:5f:
3e:94:35:c0:57:69:46:a8:67:97:5d:b6:ea:8e:ec:7d:64:ce:
e8:92:31:9b:e2:80:bf:e4:2e:11:6a:68:b9:eb:fb:85:0c:cb:
56:c3:00:f9:aa:fc:c4:2f:ac:2e:34:57:a6:14:71:ca:ca:b6:
c8:9d:c8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 18:46:32 2026 by rpki-client