Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/v1YTYG2myeQJXryVL89nyNsN5qM.roa
File: v1YTYG2myeQJXryVL89nyNsN5qM.roa (raw, json)
Hash identifier: h/6UOK9pMO1Lw4V4902NXwdICxf+ecE+yAXQZYEPRig=
Subject key identifier: BF:56:13:60:6D:A6:C9:E4:09:5E:BC:95:2F:CF:67:C8:DB:0D:E6:A3
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FF7D051F0702FF936F62B0C5CC121DEA3
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/v1YTYG2myeQJXryVL89nyNsN5qM.roa
Signing time: Wed 12 Aug 2026 21:10:52 +0000
ROA not before: Wed 12 Aug 2026 21:10:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218976
IP address blocks: 177.1.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:d0:51:f0:70:2f:f9:36:f6:2b:0c:5c:c1:21:de:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 12 21:10:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf5613606da6c9e4095ebc952fcf67c8db0de6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a4:06:a7:9c:62:a4:71:4f:8e:61:2f:7d:b2:
71:4d:e2:e3:73:57:4e:5f:eb:59:13:12:0d:fb:cc:
02:05:d5:61:68:34:5c:40:75:05:d7:9a:e2:d4:64:
39:9c:f9:74:2f:ea:ce:bb:9f:67:fc:1f:ac:5d:cb:
46:4d:76:0c:52:94:01:1b:29:16:25:f4:1b:d8:96:
d0:75:38:5f:08:06:de:66:ca:58:d0:09:ec:5a:63:
a6:ac:ed:c3:27:95:06:69:18:53:47:1d:81:2e:08:
f8:69:82:8f:a4:a6:00:0c:4c:96:07:29:d1:f6:93:
54:b1:12:03:a2:8e:e6:b5:57:be:51:c6:fb:ae:45:
c0:79:bd:df:ab:df:19:75:7f:a7:f0:e8:2a:99:25:
29:d3:4e:54:28:c3:02:7f:05:70:cf:95:7a:b6:32:
c7:ea:48:7c:2b:92:14:1e:15:a0:a1:f5:d2:a8:e3:
06:7e:6c:37:3c:ef:8c:e3:cb:1a:a8:56:a1:aa:d4:
f3:65:ec:c4:bd:63:63:6e:53:f9:9e:fe:21:7d:61:
b2:91:c4:5a:01:4b:b3:e2:05:96:3e:f4:86:ec:34:
43:76:2d:8f:27:eb:3c:f4:40:80:e9:d7:c5:b5:b1:
32:3c:ce:be:37:1d:70:12:bf:a2:10:79:a8:21:f7:
11:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:56:13:60:6D:A6:C9:E4:09:5E:BC:95:2F:CF:67:C8:DB:0D:E6:A3
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/v1YTYG2myeQJXryVL89nyNsN5qM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.1.193.0/24
Signature Algorithm: sha256WithRSAEncryption
52:2e:a2:0b:de:b3:c1:5e:ce:7a:cf:51:ca:7d:96:8c:b9:d3:
ff:f9:9f:2a:e6:80:11:4c:be:07:0d:f9:80:4d:0b:bc:71:63:
03:f8:42:f6:31:13:82:ce:8f:d5:7f:98:80:12:8a:f5:cd:94:
7a:ee:99:0d:73:ff:1e:02:a6:e6:a0:13:86:7a:6d:05:72:47:
53:04:7b:6c:84:7b:59:f2:59:03:39:ad:d9:a5:69:c5:d8:2b:
51:d1:74:8c:f0:ad:76:6e:2b:60:a2:6c:1d:34:48:d6:af:f1:
0b:ce:5b:f9:8a:20:fc:ec:00:11:e5:51:65:3f:0b:11:79:98:
fc:7b:e1:22:a1:97:10:c9:0d:e8:69:d1:f5:ea:24:ad:fa:12:
6a:10:d6:f3:91:6d:7a:f0:1d:8e:42:52:4d:e8:75:98:58:54:
4d:22:d4:3f:9d:32:29:96:05:5b:ee:76:62:78:a4:d8:ee:25:
c9:b7:ba:e1:e5:9b:72:72:f9:13:11:d1:e7:a4:8b:d0:fe:00:
03:f0:8d:6f:b9:0e:a4:4f:9d:a6:53:e2:7a:19:a2:71:de:42:
96:40:db:09:01:04:5c:14:32:f1:c6:86:48:ee:6e:b7:f6:0b:
8e:88:49:ae:56:1d:7c:6d:97:ba:fb:ec:d8:c1:6b:85:59:96:
5a:75:33:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:53:00 2026 by rpki-client