Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_eScKqbNcTV8Hj24PbfPyVwRfVU.roa
File: _eScKqbNcTV8Hj24PbfPyVwRfVU.roa (raw, json)
Hash identifier: ITT/ruqf/SEw5qmsuMs59SZoaktN1/PEpxbsWE+H2VE=
Subject key identifier: FD:E4:9C:2A:A6:CD:71:35:7C:1E:3D:B8:3D:B7:CF:C9:5C:11:7D:55
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1888799BF096DF06B11C74B35BFE6720B
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_eScKqbNcTV8Hj24PbfPyVwRfVU.roa
Signing time: Thu 29 Oct 2026 16:39:10 +0000
ROA not before: Thu 29 Oct 2026 16:39:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207003
IP address blocks: 177.3.196.0/24 maxlen: 24
177.202.114.0/24 maxlen: 24
191.223.137.0/24 maxlen: 24
201.8.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 01:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:87:99:bf:09:6d:f0:6b:11:c7:4b:35:bf:e6:72:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 29 16:39:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fde49c2aa6cd71357c1e3db83db7cfc95c117d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a5:a1:33:08:e8:a7:68:0c:d1:9c:54:df:73:
86:9a:e5:1a:3a:2c:4b:88:3f:d0:cc:49:6f:79:df:
f2:53:8e:2a:17:36:01:35:a1:a8:1e:5d:36:21:29:
dc:eb:87:59:6f:07:05:c6:37:f2:01:97:be:96:57:
44:b9:00:b4:9b:2f:c0:34:ae:7d:7e:64:36:2e:9e:
7c:c8:d5:09:fb:ce:f7:2b:42:21:46:92:b6:c3:9c:
50:c3:e5:72:7a:f9:18:32:50:87:5c:3e:e8:45:db:
88:2f:f4:ab:5e:e2:90:d9:c0:25:90:49:6a:23:8b:
e8:cb:0c:37:7a:56:b0:9b:03:ed:80:6b:d0:03:1f:
8b:e3:1a:7a:c0:0d:29:fa:6c:b9:bd:c0:e4:9c:10:
58:ca:93:f2:c2:5b:95:f3:cc:ba:92:ec:40:b8:a3:
8b:f4:00:99:79:99:48:e3:3b:c5:78:4b:f5:1c:b4:
70:30:f5:90:f0:5d:57:b2:2e:a2:f0:1c:78:92:3c:
55:4a:d1:dd:c6:22:82:f4:66:27:f1:59:4b:d5:fb:
f9:5b:e0:54:cb:4c:3d:c0:d3:40:ba:b7:b6:b0:d2:
33:ff:31:4f:af:28:ca:ec:af:f4:3b:16:28:76:1b:
87:2f:0a:b4:85:be:6f:2d:19:65:2a:96:9f:e9:44:
08:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E4:9C:2A:A6:CD:71:35:7C:1E:3D:B8:3D:B7:CF:C9:5C:11:7D:55
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_eScKqbNcTV8Hj24PbfPyVwRfVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.3.196.0/24
177.202.114.0/24
191.223.137.0/24
201.8.70.0/24
Signature Algorithm: sha256WithRSAEncryption
36:c0:d4:c2:e7:65:d1:ad:76:ba:71:29:64:7c:d8:e4:24:17:
11:68:19:c4:39:fd:c1:60:2b:7f:a5:16:3b:86:68:76:7c:d9:
e5:e7:98:d0:bb:ce:78:af:8f:1c:8a:2d:1d:01:81:e9:b9:50:
94:86:f2:a2:17:2e:d8:7a:d9:e3:c6:70:37:20:19:b2:63:bf:
c1:5e:dc:58:14:bf:c2:e0:cd:09:7c:df:e4:e8:f0:e0:e3:e3:
b4:6b:06:2f:a7:60:e2:ca:f1:6f:2d:c4:3e:d7:92:6b:b1:22:
df:dc:b7:bf:50:1e:3c:52:92:b7:2a:50:58:fa:df:28:c6:13:
0f:35:32:2a:1d:0d:89:41:6f:f5:bf:0d:d8:36:7b:06:b7:21:
c5:1a:c6:9c:7a:6d:d4:a5:93:86:e7:c5:86:10:4f:53:f7:59:
1b:46:a7:eb:e0:89:b5:55:6a:b4:97:d8:66:9c:61:ff:56:9a:
84:3d:0e:f7:d8:38:e7:5d:ac:3b:90:03:78:97:06:b7:3c:f3:
d4:65:cc:0e:3f:59:33:ad:6b:a8:c0:76:0c:76:7a:74:d7:93:
9b:a2:e3:e0:25:c5:15:ab:3b:28:eb:fc:60:66:7b:3b:11:72:
9c:d4:2c:c3:32:d2:4e:f3:0f:c4:6b:6a:04:cd:19:38:ef:b9:
40:b8:cf:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 11:18:00 2026 by rpki-client