Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/iHBKDwH7CQZ2MYDbH-U02_duqPU.roa
File: iHBKDwH7CQZ2MYDbH-U02_duqPU.roa (raw, json)
Hash identifier: pFdxyETGKGgbfSjjWQ0igmuCGAX/XPJb1dopKPBbNbg=
Subject key identifier: 88:70:4A:0F:01:FB:09:06:76:31:80:DB:1F:E5:34:DB:F7:6E:A8:F5
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A13FF3B904F7CDF6D6714EC623B297550D
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/iHBKDwH7CQZ2MYDbH-U02_duqPU.roa
Signing time: Thu 15 Oct 2026 14:24:59 +0000
ROA not before: Thu 15 Oct 2026 14:24:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14315
IP address blocks: 179.254.92.0/24 maxlen: 24
201.58.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:f3:b9:04:f7:cd:f6:d6:71:4e:c6:23:b2:97:55:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 15 14:24:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88704a0f01fb0906763180db1fe534dbf76ea8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a1:80:17:e5:84:c4:cc:2e:4f:a7:bf:3f:ef:
4c:7d:a0:fb:84:0c:1f:87:3f:06:54:99:4e:fd:c7:
2a:a7:9d:3d:6e:9e:b1:74:89:4d:7b:9f:e1:cb:cd:
93:fe:3e:5b:df:48:0a:dc:42:36:5a:9a:cf:2b:12:
88:7c:79:89:6e:d0:d3:c2:55:32:89:d6:97:d6:4c:
61:ff:85:5d:05:af:9c:c0:de:11:64:01:f8:f4:fa:
dd:11:ce:01:b2:7d:09:f2:81:41:2b:a5:ca:f1:fe:
91:95:6b:97:5a:f7:9f:ce:98:c9:b2:d8:89:4f:ec:
66:39:20:a1:d6:85:4e:d5:0a:e9:2b:89:58:cb:48:
2c:da:f3:e9:a7:fd:35:29:bb:0a:f9:6d:86:3f:05:
ef:66:13:1a:78:9f:84:6a:ef:62:3a:1c:b3:78:0f:
36:94:df:cb:cf:a3:d2:08:38:b2:90:eb:92:91:0d:
e3:2c:ec:40:dc:fd:2a:42:61:e0:bd:32:ea:2c:93:
bf:bc:b7:ad:34:80:db:f1:0c:b9:28:3a:5b:83:ef:
75:77:66:6c:58:36:8a:14:57:c7:56:89:d4:2f:5b:
9a:fa:db:6c:4e:27:12:fc:23:dc:c6:5e:b8:c5:2e:
45:ea:64:5a:87:46:ea:6b:f2:af:70:c5:e7:f0:5a:
cf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:70:4A:0F:01:FB:09:06:76:31:80:DB:1F:E5:34:DB:F7:6E:A8:F5
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/iHBKDwH7CQZ2MYDbH-U02_duqPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.254.92.0/24
201.58.151.0/24
Signature Algorithm: sha256WithRSAEncryption
40:53:81:17:60:6c:3e:b2:ee:03:4b:89:bd:99:41:a1:05:0b:
76:c2:4f:7c:79:14:d8:41:ad:51:1c:1c:b7:81:53:03:e4:e2:
c9:ba:a9:6b:db:82:3e:45:45:3d:36:97:24:18:33:db:a5:6d:
79:10:02:5f:e7:b3:b7:63:e3:86:f2:5b:ba:e0:a4:ff:6e:01:
e0:bc:0b:c6:b9:d8:60:d2:73:9c:27:bf:ad:f3:42:10:a9:ec:
36:f8:6e:43:1f:d1:4b:ce:4c:ad:df:17:e2:13:0b:d1:d9:b7:
7e:92:96:3e:da:49:74:78:1f:9a:5a:ac:1f:5b:6c:26:4e:d2:
d1:8f:b1:ef:5d:d6:a3:2f:06:63:7a:9e:56:e3:0c:3d:25:33:
7f:e0:f9:75:52:49:fa:23:ef:c7:0c:6b:d8:31:10:8c:cd:c5:
69:1c:1d:52:ef:e2:56:41:8d:61:34:68:1d:e3:69:8c:83:36:
82:51:21:79:ff:c4:b2:ff:13:cf:14:31:07:3d:34:9c:50:13:
20:76:d4:ec:36:78:dd:cd:1a:b5:54:23:2a:c4:0a:90:eb:5a:
e8:cd:bf:0a:f0:71:8e:31:86:b8:e5:3e:a7:d5:f2:91:ef:14:
8a:5c:4f:c3:e9:73:98:c0:62:2e:26:dd:9a:4b:56:65:f0:3e:
6b:f0:80:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:43:56 2026 by rpki-client