Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Z-JNqh4TiCv-zCtVqAlh7d8u8Bs.roa
File: Z-JNqh4TiCv-zCtVqAlh7d8u8Bs.roa (raw, json)
Hash identifier: 4rQGcmFU3hZ2NcRTQEf209qfAJsTpo9KwVHCv1r7xag=
Subject key identifier: 67:E2:4D:AA:1E:13:88:2B:FE:CC:2B:55:A8:09:61:ED:DF:2E:F0:1B
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A11CA794BD602D749D963494DF6A59ED89
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Z-JNqh4TiCv-zCtVqAlh7d8u8Bs.roa
Signing time: Thu 08 Oct 2026 17:55:06 +0000
ROA not before: Thu 08 Oct 2026 17:55:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219268
IP address blocks: 179.253.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:a7:94:bd:60:2d:74:9d:96:34:94:df:6a:59:ed:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 8 17:55:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67e24daa1e13882bfecc2b55a80961eddf2ef01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:26:aa:6a:98:45:cd:9e:4a:0e:6d:3d:d1:9b:
d1:45:0e:c9:2c:7a:b5:e7:57:27:c8:05:a5:c7:62:
a6:e0:1f:cd:e4:ef:af:30:6b:64:d8:f1:55:fe:05:
46:ce:8d:d8:51:dc:2c:52:09:46:8a:2a:da:26:75:
77:06:a5:5b:79:df:c5:a7:42:05:e5:98:74:07:c4:
24:0d:b5:78:c4:9d:34:81:03:f5:f4:9f:e0:42:52:
1e:2e:45:01:19:27:38:57:94:03:02:69:d7:65:80:
10:c7:e7:26:45:69:57:de:34:e9:f7:70:9e:09:cb:
0e:b2:c7:f7:4d:0a:5f:6a:e6:83:a6:cf:7c:c3:c7:
33:21:cf:f4:bc:e5:49:6b:88:de:6c:9c:4f:49:31:
30:be:23:cd:21:cc:c7:e2:e4:75:d1:ce:b4:f0:1c:
22:e7:c7:f0:13:c3:56:77:43:16:77:5c:f2:01:09:
05:36:6d:5b:3c:e1:c4:ae:9d:c9:2b:b8:93:20:bf:
d5:ad:fa:0a:2f:28:8f:c6:42:81:de:82:98:ef:d7:
35:59:72:28:e4:67:be:0c:e3:a8:4b:ae:d7:6a:18:
42:b0:0a:39:97:3f:8c:fb:6e:0b:71:2b:08:6a:f2:
30:2e:f6:2d:ec:95:5f:61:df:31:29:ea:fe:b2:f7:
f7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E2:4D:AA:1E:13:88:2B:FE:CC:2B:55:A8:09:61:ED:DF:2E:F0:1B
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Z-JNqh4TiCv-zCtVqAlh7d8u8Bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.253.182.0/24
Signature Algorithm: sha256WithRSAEncryption
13:4f:5c:02:ec:ad:5c:60:70:98:4f:fb:a7:91:48:bc:a5:c9:
d8:ed:1a:9b:e2:ee:5c:ea:57:71:33:10:61:ea:e0:b2:b7:47:
88:c5:99:63:95:0d:9f:65:fa:b6:79:ff:fd:4e:af:83:80:b7:
4f:1a:aa:9c:4c:a8:27:17:4e:78:17:69:fd:6f:d4:94:9f:d2:
f7:9e:88:d1:d1:c3:dc:7c:bb:f8:71:cd:d6:8e:94:08:4c:68:
5b:01:bf:86:cc:0b:97:ee:fc:e7:c2:25:64:76:1f:44:64:4a:
ec:fc:06:bf:d0:91:26:31:e4:3c:c6:1f:0d:de:0d:29:55:88:
39:f8:05:02:96:88:b8:c4:c6:37:15:4d:e6:f6:c6:5d:e1:c1:
2f:8e:66:64:0e:26:1b:37:d2:5c:a1:e4:31:f0:32:9c:9b:8b:
ff:bb:90:17:c2:94:52:f9:17:05:1a:33:e2:0b:62:50:c2:1c:
54:84:77:bb:dc:4e:81:c6:48:45:9b:be:a8:18:74:c0:93:b4:
6c:ce:ea:89:35:54:37:b7:36:4e:5c:90:8c:7f:47:6b:71:b1:
28:f0:fa:68:1f:c8:96:0b:f8:65:a9:b5:a9:ed:bf:93:f5:fc:
89:b9:15:38:19:94:42:82:7d:49:a0:1c:57:74:52:49:d2:60:
db:aa:46:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:12:58 2026 by rpki-client