Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/evuW5cP_BRisnQfa6tNr8NsXJAQ.roa
File: evuW5cP_BRisnQfa6tNr8NsXJAQ.roa (raw, json)
Hash identifier: j1k9vs2JAjtVpmUH0eVHdfsv9KciK2v12etL/XeysVg=
Subject key identifier: 7A:FB:96:E5:C3:FF:05:18:AC:9D:07:DA:EA:D3:6B:F0:DB:17:24:04
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A17E62CBF1D415D0D9718B1CE5AB348E25
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/evuW5cP_BRisnQfa6tNr8NsXJAQ.roa
Signing time: Tue 27 Oct 2026 17:22:46 +0000
ROA not before: Tue 27 Oct 2026 17:22:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214915
IP address blocks: 201.8.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:58:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:62:cb:f1:d4:15:d0:d9:71:8b:1c:e5:ab:34:8e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 27 17:22:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7afb96e5c3ff0518ac9d07daead36bf0db172404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b2:c6:95:bc:10:ac:da:81:f9:8a:b8:dc:3b:
0e:5d:25:40:7e:37:f4:9b:a5:32:ea:c3:de:f4:0d:
9a:b2:80:f5:5b:e3:88:d7:8f:b6:cd:08:98:b6:46:
87:2c:99:1f:34:a6:b5:38:86:43:9c:22:ad:2b:ac:
4c:26:28:f4:8c:6f:f8:86:2c:1f:88:47:d8:f7:f5:
4c:32:25:1e:3b:c5:1c:06:e1:2e:a2:f9:fa:cb:c3:
29:47:cb:ba:f7:2d:b3:36:28:84:c2:a9:8d:a4:c8:
ea:17:82:c1:e4:09:2c:67:55:3b:19:99:50:26:1e:
ea:d4:4e:75:0a:8c:6f:66:fb:d1:68:a1:da:b5:0e:
2b:fa:db:a8:a5:b6:88:43:87:c0:55:98:7f:f0:ac:
fa:36:21:4a:4d:db:78:af:ef:3c:a6:6f:94:e3:b9:
99:b0:f8:a6:be:e2:16:0e:03:72:b0:fe:6d:94:46:
61:2e:36:9b:be:28:6c:62:d5:9f:0e:11:6a:52:63:
d9:9a:39:7f:0c:76:33:df:57:5d:31:45:9b:fd:46:
3f:76:11:9b:d8:59:a1:ce:68:6d:e6:1b:fa:26:65:
83:ad:d4:71:c9:9b:e2:dc:f5:a8:27:37:d9:e7:4d:
22:2c:e3:90:cc:50:90:b1:df:77:b4:ea:d9:b4:ce:
79:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FB:96:E5:C3:FF:05:18:AC:9D:07:DA:EA:D3:6B:F0:DB:17:24:04
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/evuW5cP_BRisnQfa6tNr8NsXJAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.8.65.0/24
Signature Algorithm: sha256WithRSAEncryption
64:49:fb:b1:09:93:6f:46:b6:7b:76:78:5a:72:ea:b3:4b:71:
2a:e2:2e:4d:a1:29:f2:f7:d3:d9:9d:24:77:33:ab:36:c9:c1:
b7:5f:91:85:cc:2c:47:0c:b3:53:b5:4f:7c:52:28:07:71:d4:
ef:10:b9:ba:8a:40:93:86:41:fa:32:97:09:b5:1f:f0:b1:83:
3d:9c:df:a9:69:c9:91:1c:2b:d0:d1:28:1d:3e:09:d9:4e:94:
af:6f:16:57:49:b6:8c:41:5b:04:c9:0f:8c:aa:59:a8:f6:3b:
a4:48:71:59:fd:9c:c3:ef:4b:ee:e2:41:23:74:07:96:0d:b2:
4f:79:37:aa:e5:db:6a:71:61:7c:89:c0:e3:8c:57:c2:9e:e3:
1d:fc:4f:18:67:3a:97:2e:8f:30:0f:36:e7:1a:49:92:4a:4d:
e3:ac:a6:b3:da:bd:9c:18:d4:cb:08:9a:29:af:70:2b:8c:0b:
f4:14:ff:27:32:a0:c2:dd:bb:7e:d7:5b:f9:d0:af:d3:0b:f2:
12:c2:7b:33:30:91:5c:9c:c5:67:db:a8:b9:08:38:42:49:8b:
1d:8a:5c:b2:1f:6b:02:ef:a5:84:1c:25:24:96:30:3b:81:1b:
5e:4f:d0:be:6d:7f:ec:e0:63:18:0e:76:66:ec:f1:6a:51:11:
c5:53:04:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:29:58 2026 by rpki-client