Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/psoviItI8sKqRenxJQUiEwWU3r8.roa
File: psoviItI8sKqRenxJQUiEwWU3r8.roa (raw, json)
Hash identifier: aQvgZ2wAol9S4fBL0VAZR1h/p0hSJc1eFc43rCLYMbw=
Subject key identifier: A6:CA:2F:88:8B:48:F2:C2:AA:45:E9:F1:25:05:22:13:05:94:DE:BF
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0EE19250F4200CF38BC31E26239EB196F
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/psoviItI8sKqRenxJQUiEwWU3r8.roa
Signing time: Tue 29 Sep 2026 16:57:00 +0000
ROA not before: Tue 29 Sep 2026 16:57:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218656
IP address blocks: 179.253.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:19:25:0f:42:00:cf:38:bc:31:e2:62:39:eb:19:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 29 16:57:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6ca2f888b48f2c2aa45e9f1250522130594debf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:54:d5:5d:1d:f7:07:e7:41:c3:40:7e:93:e8:
78:7b:4b:85:a9:25:ac:d1:4c:f7:0f:8f:2e:26:09:
de:55:66:6e:77:5a:7f:0a:e7:84:ba:a1:49:20:cf:
ef:03:04:06:d9:05:15:16:21:80:f9:ca:38:76:6d:
4f:a1:2a:b0:bc:c9:30:4f:24:de:51:25:cb:af:f4:
d1:aa:ee:aa:24:98:5d:ce:8e:ab:2e:9d:8a:04:0b:
bd:05:7e:36:eb:d4:6a:7d:5f:33:45:b1:7c:3f:4b:
2a:4a:8b:86:a1:8d:61:e2:b5:a9:06:fc:7a:59:24:
41:70:c8:0d:50:b0:9b:b4:68:10:3d:7d:ab:f8:d2:
ec:31:02:94:13:dc:91:bb:74:93:21:66:35:a2:29:
86:e9:36:07:39:db:be:37:10:ad:4d:34:73:2d:a1:
60:21:01:4a:9a:c8:3a:27:47:9d:ef:e3:57:fb:32:
7b:d3:d5:64:6d:7a:33:dc:57:a1:a3:93:10:b1:72:
96:9f:0d:e3:65:3a:c7:f9:20:7b:3a:5a:1a:b4:50:
9a:61:a8:b8:8a:dd:f0:bf:53:10:07:da:89:4f:2d:
c6:cb:e1:5e:cf:b7:4d:37:31:a7:89:b4:10:1b:79:
3b:ea:4f:ff:ff:33:8f:12:85:2c:e1:cc:22:81:4a:
04:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CA:2F:88:8B:48:F2:C2:AA:45:E9:F1:25:05:22:13:05:94:DE:BF
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/psoviItI8sKqRenxJQUiEwWU3r8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.253.160.0/24
Signature Algorithm: sha256WithRSAEncryption
06:aa:db:6e:b1:8e:1b:79:a5:ce:b5:50:24:a3:d7:c0:99:99:
d1:6a:b3:9d:67:0f:6d:85:2a:be:cf:fc:9c:fc:2e:4d:96:2e:
d7:7a:20:ad:97:d1:5c:89:64:6b:3b:79:4b:bd:1c:03:be:5a:
5b:99:a6:c3:f5:15:7b:a4:9b:6b:33:16:22:41:95:08:c6:ec:
3a:b3:73:f4:e1:6b:88:0c:29:25:f4:44:fc:2c:e9:cb:18:78:
c1:61:61:38:ab:cb:af:ae:22:e6:11:55:9b:97:8e:6b:be:67:
89:b9:54:70:56:c7:0e:da:62:a0:25:ed:57:37:3b:90:78:f9:
84:29:39:07:9a:52:58:52:ca:66:b5:c1:ba:68:5d:31:43:39:
f7:36:4a:37:ca:ab:70:7c:22:36:1f:f0:ae:61:43:81:7e:dc:
0c:d7:0c:ee:8b:25:9e:68:9f:d9:93:fb:ef:a6:b9:69:b4:d8:
91:cd:3c:d8:89:9d:62:0e:98:fb:0d:92:ab:ed:4a:1d:eb:de:
c6:3a:5b:26:76:79:a6:83:ad:0b:ef:c4:e6:07:ac:91:d5:7a:
5b:a0:11:bf:01:21:0a:d6:4e:1f:64:30:06:0c:cc:53:11:c7:
97:ee:29:0b:24:33:ce:68:0b:98:54:fa:1f:5d:6e:43:c2:56:
dd:d2:94:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 10:46:54 2026 by rpki-client