Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/dhEHcywx3yTTZkTWt69CshC2r1E.roa
File: dhEHcywx3yTTZkTWt69CshC2r1E.roa (raw, json)
Hash identifier: +n3KNIMqcYrUyt0uRKpWZOPLnHmFPEl5DOWoQ3l8R8o=
Subject key identifier: 76:11:07:73:2C:31:DF:24:D3:66:44:D6:B7:AF:42:B2:10:B6:AF:51
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A19DDB1B73F78FC2217032564C24524B00
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/dhEHcywx3yTTZkTWt69CshC2r1E.roa
Signing time: Mon 02 Nov 2026 20:02:24 +0000
ROA not before: Mon 02 Nov 2026 20:02:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218484
IP address blocks: 177.3.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:db:1b:73:f7:8f:c2:21:70:32:56:4c:24:52:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 2 20:02:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=761107732c31df24d36644d6b7af42b210b6af51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:73:ef:ed:56:bd:0c:0a:d2:a8:ad:07:3c:90:
cf:58:bc:e3:96:b8:dc:64:c2:f5:a5:b5:9c:a1:3a:
33:e6:f5:17:4d:a1:d7:2c:20:45:f6:11:df:7d:ba:
c4:3c:72:8d:6b:73:1d:f5:14:f3:8b:96:fb:ec:1f:
44:88:e8:90:bb:6e:3f:59:0d:97:a0:35:fd:df:d3:
50:52:69:ba:65:a4:74:8b:c8:25:1c:43:a1:97:72:
2f:fa:41:51:6b:e1:1e:9a:92:d7:0e:5e:a1:92:11:
b6:dc:91:38:8d:e8:b3:5b:00:19:46:d4:fb:2c:9f:
cd:11:3e:33:d5:22:89:d4:0d:86:8a:4a:5d:d8:c7:
03:78:e2:4f:06:a3:2d:13:99:03:49:66:d6:2a:d0:
07:63:62:63:89:41:4a:22:04:67:7d:94:6e:3c:f4:
33:ef:af:5c:17:58:5f:b4:24:ea:c6:31:65:6b:0b:
a4:d3:06:73:65:47:42:38:aa:9b:38:2a:47:c9:cd:
50:0a:6c:80:7c:2b:77:84:12:9b:e1:a7:5c:67:88:
43:05:63:b6:cd:2d:97:d8:c3:ec:d4:fa:d0:b2:6d:
59:de:f0:0c:74:0a:81:b0:1d:53:95:55:a6:f7:bb:
d0:29:e8:48:9e:34:1d:07:07:68:28:dd:94:f0:7a:
1d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:11:07:73:2C:31:DF:24:D3:66:44:D6:B7:AF:42:B2:10:B6:AF:51
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/dhEHcywx3yTTZkTWt69CshC2r1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.3.253.0/24
Signature Algorithm: sha256WithRSAEncryption
16:91:27:3d:93:5b:c7:b8:a8:2d:62:49:aa:90:05:bb:c2:1e:
e5:21:75:0a:b9:36:e5:7d:02:7c:87:65:94:50:78:9a:c5:5a:
99:5d:ed:87:47:82:01:3a:ef:5b:ae:bb:ea:61:bb:c7:f1:7b:
36:4c:bd:91:8b:83:67:be:c1:e6:d1:10:ea:6c:f4:ab:85:66:
eb:b7:c9:45:60:6f:6e:f5:d7:3a:05:cf:a5:41:f8:f0:e9:cd:
df:ea:07:b6:a1:4b:54:c4:63:92:af:3a:9f:58:6e:a4:a5:10:
b1:c0:a6:7b:53:85:d5:76:b1:f9:3e:57:55:1f:d0:82:5f:da:
02:db:47:c0:2f:46:e2:46:cb:e0:04:dd:ce:4f:84:97:45:e8:
08:c4:f0:96:24:3f:2e:01:fa:74:3f:98:7a:41:af:0d:6c:23:
77:63:9f:34:84:1e:fc:b3:7c:fc:a5:f5:30:0f:43:fd:9b:8e:
67:79:89:17:57:4b:45:54:36:94:8d:f7:ce:7e:0b:ac:48:ca:
04:99:1b:a4:c0:70:df:6d:62:d8:81:9d:b4:e9:a2:49:27:cf:
32:b8:33:f5:6e:71:bc:6e:b0:fc:98:aa:15:74:66:61:a1:e1:
f6:2a:06:70:4a:67:34:33:08:3b:b8:6c:03:6c:9b:b8:c4:2a:
41:8b:74:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:43:59 2026 by rpki-client