Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xPO81fWzS30IFXeY7QLeSkWGY0c.roa
File: xPO81fWzS30IFXeY7QLeSkWGY0c.roa (raw, json)
Hash identifier: rqyHEoD1d9IENcrFzLnl/1yXNBnxPB7lBi1R+xw8j98=
Subject key identifier: C4:F3:BC:D5:F5:B3:4B:7D:08:15:77:98:ED:02:DE:4A:45:86:63:47
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A18E0C7F10EF3C3F94C806B031AE10356C
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xPO81fWzS30IFXeY7QLeSkWGY0c.roa
Signing time: Fri 30 Oct 2026 18:22:26 +0000
ROA not before: Fri 30 Oct 2026 18:22:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132541
IP address blocks: 201.8.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:0c:7f:10:ef:3c:3f:94:c8:06:b0:31:ae:10:35:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 30 18:22:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4f3bcd5f5b34b7d08157798ed02de4a45866347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:86:5d:34:70:2e:d9:db:de:b0:df:1c:db:
58:4e:53:48:fe:7d:02:5e:80:e6:cf:5c:e6:d8:87:
fc:a2:fe:26:8b:88:53:c4:ab:3e:b6:6c:4a:08:3a:
c4:52:6b:9d:71:90:d8:70:e0:81:98:a5:7d:f6:62:
44:27:94:a7:3f:83:57:69:fe:98:b8:e3:dd:43:61:
bf:42:5e:4e:c0:14:3c:40:f9:6d:82:f5:7a:ea:39:
7f:67:05:6c:96:09:52:b5:b4:bb:9e:dc:b1:a3:2e:
81:a0:18:28:5b:5f:93:dc:f1:7e:05:65:47:fb:92:
44:47:fa:fb:0d:b9:7d:f5:7a:15:43:f5:a1:38:9c:
78:16:6e:09:a6:d7:3e:50:17:4e:fe:4b:b3:2d:ee:
86:4b:f1:42:29:d9:e7:c7:31:92:d3:14:c5:4e:6b:
51:72:bb:3d:7c:73:fb:10:49:cc:d2:a9:78:d7:01:
99:4e:58:00:68:4e:ba:1a:a5:83:21:da:20:48:48:
03:9a:d0:94:34:a8:6d:38:e3:8d:4c:ef:95:62:81:
e2:1a:c4:bf:e1:c1:80:bb:a5:76:1e:98:59:5a:ee:
92:62:4a:e9:94:eb:d8:1c:f4:5f:3c:e7:2c:5c:09:
e1:45:e5:79:70:29:27:6f:cb:7d:4f:ff:11:b0:79:
33:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F3:BC:D5:F5:B3:4B:7D:08:15:77:98:ED:02:DE:4A:45:86:63:47
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xPO81fWzS30IFXeY7QLeSkWGY0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.8.95.0/24
Signature Algorithm: sha256WithRSAEncryption
40:fd:d5:ca:bc:30:82:cc:30:a2:11:27:45:7a:81:57:6d:4e:
2c:23:bf:97:95:51:5a:d1:a3:59:73:44:f5:ac:44:bf:b6:e2:
7d:2b:6e:3a:31:19:49:11:bc:1d:73:cd:70:80:3d:05:7a:7e:
c1:40:94:3c:95:e2:1b:1b:20:3d:49:c8:f8:45:f8:65:98:c0:
02:6c:d7:3a:fa:26:82:43:d0:61:b0:67:08:4e:fb:2a:10:4f:
1f:82:ae:d0:95:b3:7b:cb:48:94:1f:e1:89:2c:d8:53:04:ac:
43:ad:a6:e4:d0:86:2f:81:07:11:dc:ec:b8:04:1b:37:4a:79:
fa:29:8d:30:41:42:72:52:85:8a:9a:13:11:c6:ff:3b:41:91:
67:18:eb:87:42:45:30:99:13:0e:69:26:d5:ce:68:45:7a:08:
cd:70:38:d4:d7:73:38:54:33:53:52:fa:95:0f:35:04:52:31:
f8:6a:2d:2c:31:39:5a:9c:5c:09:84:c9:3f:91:60:c0:f6:3f:
55:56:27:c3:45:ce:84:3a:9d:bf:6d:81:28:ff:f6:8b:93:72:
ff:a8:fa:1b:ce:e4:31:cb:15:63:94:9d:09:a0:82:03:a9:c2:
01:fc:ae:de:7b:2e:e2:43:de:9e:85:13:a8:6c:f8:5f:bd:a6:
8b:62:87:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:43:27 2026 by rpki-client