Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wFLJ9g5M0YJmXEqUIR_q0jrFtyc.roa
File: wFLJ9g5M0YJmXEqUIR_q0jrFtyc.roa (raw, json)
Hash identifier: D6D3NBa9HPKZmGy5PPlQ+c+lL72qQnWnn/WWw7+TafY=
Subject key identifier: C0:52:C9:F6:0E:4C:D1:82:66:5C:4A:94:21:1F:EA:D2:3A:C5:B7:27
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A02008E43E07EB7F0C6B32790B03A14467
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wFLJ9g5M0YJmXEqUIR_q0jrFtyc.roa
Signing time: Thu 20 Aug 2026 16:37:28 +0000
ROA not before: Thu 20 Aug 2026 16:37:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200173
IP address blocks: 179.254.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:08:e4:3e:07:eb:7f:0c:6b:32:79:0b:03:a1:44:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 20 16:37:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c052c9f60e4cd182665c4a94211fead23ac5b727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0d:77:15:d5:a2:5f:ef:86:0e:99:e4:66:9a:
44:16:8a:39:16:e8:ae:c0:81:e8:e7:46:e0:a7:81:
0d:f8:a2:42:6e:b4:5e:f3:e4:46:ac:f1:2e:54:01:
31:c5:f4:6b:47:89:e9:e0:63:89:e3:7e:1b:0d:9b:
fc:7b:da:49:bd:a4:4c:32:f7:1d:d3:b5:58:72:1e:
21:c1:9a:ce:d0:cb:d2:e3:31:77:49:36:59:ac:d3:
47:9a:70:ef:64:25:80:c7:b6:62:69:c0:5b:c8:64:
f3:de:80:4a:da:b5:97:79:ee:ff:4e:49:34:67:61:
97:c6:8d:b9:32:1d:f0:3e:81:f8:55:ce:5b:47:6f:
6d:75:80:58:ba:d8:f2:96:69:cf:f9:37:a8:f6:a4:
af:d5:bd:bc:bd:8a:ef:ab:5c:e6:e9:11:ec:f6:63:
6a:7d:12:b2:65:b7:1d:1a:66:80:10:fb:6c:f1:76:
5a:e5:b4:df:48:7c:d8:1a:bb:86:70:de:c6:84:a5:
2b:f9:11:16:9d:f8:e0:bf:55:be:a7:4b:13:9e:2a:
07:3f:d6:87:0a:43:ba:ac:77:36:1f:63:d3:fb:6e:
e8:b9:84:6b:67:7e:c4:7b:bf:b6:fa:c9:a6:e2:73:
66:19:f4:33:a9:19:e2:d1:0e:f7:b5:4e:6b:1d:39:
16:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:52:C9:F6:0E:4C:D1:82:66:5C:4A:94:21:1F:EA:D2:3A:C5:B7:27
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wFLJ9g5M0YJmXEqUIR_q0jrFtyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.254.99.0/24
Signature Algorithm: sha256WithRSAEncryption
37:7e:b1:70:b3:4b:5d:ff:d1:55:92:18:9c:69:a1:04:c1:a8:
96:3a:e7:56:44:43:f6:41:29:a6:27:26:88:56:07:52:7a:df:
35:93:1a:ba:c0:29:b0:52:68:45:7b:03:9b:99:ed:f2:61:e9:
e2:96:a5:ab:20:71:63:34:3f:d4:69:3c:49:78:0d:b4:6a:20:
94:dd:29:7e:78:4a:19:89:63:69:3c:8d:ba:2b:e1:60:58:44:
4f:c8:0f:a8:f9:92:35:ff:95:0c:5d:69:fd:b4:80:3a:58:dd:
26:7e:e9:c0:ac:b3:c9:06:59:85:37:a4:e8:40:ca:57:e3:7b:
86:d5:0e:b1:3e:f7:d3:b7:d6:51:ff:21:64:34:fc:16:82:da:
01:66:2c:70:1a:26:7c:fc:ad:c4:6a:15:a6:9f:0f:ad:a4:74:
35:f8:03:dd:ff:ea:95:fa:38:ba:86:34:a6:19:59:72:2c:ab:
ea:a4:0d:74:0d:33:ba:ea:fe:10:81:60:04:a3:24:aa:d3:05:
4f:28:0d:f3:38:a4:74:2e:88:d4:8e:b6:8a:ff:e3:84:14:cf:
3c:0b:33:87:d8:c1:50:68:92:73:61:5a:77:c4:80:2b:ee:08:
df:d0:fd:33:ad:85:a5:a8:2a:24:ab:99:c1:df:76:1c:0c:fe:
da:2d:42:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:27:15 2026 by rpki-client