Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/j3Qp957ZjWaXRjNhcrgsd2uM-7U.roa
File: j3Qp957ZjWaXRjNhcrgsd2uM-7U.roa (raw, json)
Hash identifier: KndwTX2yFAg61201kKOjBWnKL+9Edh0o99ongQDBE0M=
Subject key identifier: 8F:74:29:F7:9E:D9:8D:66:97:46:33:61:72:B8:2C:77:6B:8C:FB:B5
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A145B0C563B0B88B8F69DB9EB9364C5A0C
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/j3Qp957ZjWaXRjNhcrgsd2uM-7U.roa
Signing time: Fri 16 Oct 2026 17:09:35 +0000
ROA not before: Fri 16 Oct 2026 17:09:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218527
IP address blocks: 201.58.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:b0:c5:63:b0:b8:8b:8f:69:db:9e:b9:36:4c:5a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 16 17:09:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f7429f79ed98d669746336172b82c776b8cfbb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:05:31:89:7c:f6:ac:28:cb:92:86:cc:1c:38:
dc:ab:6d:e0:66:91:11:bf:65:3d:0a:3f:e1:5e:4f:
13:30:42:ef:9a:8b:cd:fd:db:e1:50:e1:7a:b9:92:
f6:3d:26:5d:b5:b9:6f:78:52:b6:41:0d:98:6a:32:
2f:81:02:c9:d8:72:69:e4:f2:fe:b1:c6:73:9d:74:
b0:ab:31:de:e3:3c:a2:17:c4:d0:e5:ad:24:e0:2d:
1c:ce:69:a2:f5:7a:e0:21:9c:03:8d:4b:39:47:c8:
4b:d2:cf:a3:0c:47:8d:04:7f:c5:6e:6c:03:c6:e6:
4c:cb:64:d0:27:03:43:14:9f:f1:a4:d4:06:c2:3f:
16:4f:c7:05:43:53:c6:60:83:bf:fd:b5:c9:66:2f:
69:0b:d0:16:11:3e:d0:cd:9c:46:d1:92:2b:f0:85:
7f:8b:d9:db:bd:c2:1d:12:19:ee:d1:33:d4:65:96:
ff:ef:87:c4:77:3a:63:f8:9c:43:e0:0e:9f:41:a7:
f5:24:25:c2:71:9f:27:8f:d1:75:49:a0:97:13:68:
71:ee:68:05:4f:76:43:1c:31:ce:7d:e4:dc:02:4f:
b4:9a:45:01:bc:ef:8e:83:34:5c:d2:50:cd:93:9c:
b2:d0:89:ce:f3:9a:1d:51:4a:13:3c:7f:ab:01:d1:
10:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:74:29:F7:9E:D9:8D:66:97:46:33:61:72:B8:2C:77:6B:8C:FB:B5
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/j3Qp957ZjWaXRjNhcrgsd2uM-7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.58.153.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:13:c0:d1:54:6b:5d:62:61:8a:ae:bc:43:ed:24:c8:b5:77:
5f:b6:95:24:d5:ac:34:97:b3:e5:77:61:9e:12:5f:f7:f2:ea:
bc:fd:83:93:a8:fa:ae:6d:89:fc:23:55:60:66:8a:c2:32:33:
b0:26:32:58:d9:86:2f:13:27:bf:3a:26:aa:2d:16:f2:81:15:
95:6b:4b:6c:11:51:03:4c:bd:6f:fd:26:8b:69:de:ae:4a:1a:
55:23:99:f9:fb:d7:b1:10:0d:0b:b1:35:26:72:61:b3:23:03:
78:de:20:9d:87:43:61:d7:89:c4:46:d2:9b:89:2f:86:cf:7c:
2e:1b:75:22:23:51:26:50:4f:d4:b8:c6:c5:7b:5b:e2:f6:bf:
ab:44:ad:c9:61:9b:b9:ac:86:bd:0e:c6:85:2f:6c:2b:ae:a8:
af:80:74:f9:96:1c:55:cb:3e:cf:1d:fc:1d:72:46:26:d6:78:
29:e7:cb:25:d3:7e:05:74:06:52:05:f7:f7:06:6b:07:09:df:
fb:a1:67:b7:ac:b7:4c:53:fe:dc:10:9f:cd:1f:34:0e:95:19:
65:a7:8c:04:67:4e:14:46:4f:6a:dd:51:9c:cc:a2:84:71:82:
88:c7:58:31:e4:38:2d:83:8d:71:0c:50:58:84:20:af:64:49:
ae:28:c8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:38:27 2026 by rpki-client