Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3qs_NzjP7ejfGWON7ZnQFOV34tQ.roa
File: 3qs_NzjP7ejfGWON7ZnQFOV34tQ.roa (raw, json)
Hash identifier: kIhZ097bijraJTnnqRyR1kin+rLZXGmjKdzPVQ0j/Hc=
Subject key identifier: DE:AB:3F:37:38:CF:ED:E8:DF:19:63:8D:ED:99:D0:14:E5:77:E2:D4
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A132074464404E8CBE347734456E8CFFA1
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3qs_NzjP7ejfGWON7ZnQFOV34tQ.roa
Signing time: Mon 12 Oct 2026 21:31:39 +0000
ROA not before: Mon 12 Oct 2026 21:31:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219357
IP address blocks: 191.217.211.0/24 maxlen: 24
191.217.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:07:44:64:40:4e:8c:be:34:77:34:45:6e:8c:ff:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 12 21:31:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=deab3f3738cfede8df19638ded99d014e577e2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:68:d7:e0:13:52:0c:62:27:6c:1e:62:b0:fd:
1a:3a:3f:af:94:bc:88:81:46:4e:ac:99:cd:dd:97:
48:59:67:81:e7:b0:a8:da:16:a6:c4:a6:ac:cf:2b:
b8:a0:b4:33:26:f0:3c:07:6f:55:9b:de:7e:36:76:
cb:03:16:84:c8:1c:2a:5b:81:2e:0a:eb:fc:f8:86:
21:71:cc:79:46:6b:46:1e:e7:33:6a:8d:19:55:38:
a2:1d:50:1a:5a:4e:18:f0:fd:fd:30:27:41:73:17:
a6:bf:14:31:e6:11:43:56:df:49:2f:6b:e3:e2:42:
22:49:53:6e:a9:18:0c:81:0f:10:76:07:22:f5:7e:
d0:32:79:46:5f:79:ab:56:f3:aa:ae:ad:34:93:79:
ba:3c:bd:7d:a6:01:2c:9d:f0:70:b1:d4:b0:5a:21:
31:ef:9f:46:60:67:76:c9:a9:84:4d:b8:41:49:5b:
6c:93:70:9a:d7:6e:32:c9:58:93:33:fc:83:ce:e1:
dc:94:b4:1a:5a:98:8e:5e:e0:6c:e1:0a:5c:ea:8f:
88:9c:e3:2f:79:bb:d7:48:b7:3c:9f:02:91:28:80:
d6:37:fc:b2:70:dd:e8:00:2c:4c:93:56:9e:6e:b1:
c1:44:db:a7:b5:57:2b:25:5f:07:41:7e:d4:0c:11:
42:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AB:3F:37:38:CF:ED:E8:DF:19:63:8D:ED:99:D0:14:E5:77:E2:D4
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3qs_NzjP7ejfGWON7ZnQFOV34tQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.217.211.0/24
191.217.251.0/24
Signature Algorithm: sha256WithRSAEncryption
87:2d:5b:27:1e:bc:27:88:bb:37:bb:e5:0b:30:2b:b1:b8:30:
cd:95:35:74:14:99:2c:28:e2:92:f8:48:bb:d0:a5:48:95:08:
73:65:3c:5d:62:37:67:57:ae:70:bc:dc:1d:04:cc:ae:0c:8e:
57:46:1b:35:0b:39:ec:a9:09:1b:e3:ac:ba:81:df:c9:70:24:
1c:b5:d6:3b:31:2d:0d:2e:56:f2:0d:30:bb:24:12:54:6a:04:
e7:50:38:cf:50:a0:c2:ab:65:4c:70:4d:a9:88:22:cd:fa:aa:
70:33:f5:ad:86:66:64:77:19:fc:10:c0:f4:87:51:f1:79:f1:
eb:e6:c8:84:b1:0a:e4:e4:f3:d5:12:34:7b:d2:15:2e:3c:df:
45:aa:18:6d:4f:a3:78:00:f9:ba:68:04:d4:62:04:48:fd:93:
e4:22:07:ef:cd:70:bc:38:9e:60:48:c5:78:03:ca:2e:1b:91:
56:b1:6f:c5:b4:42:61:c9:b3:61:be:7c:41:2b:b7:69:be:67:
21:89:79:e3:6c:b5:73:7d:ea:9e:48:08:fc:bb:e2:e0:8b:32:
c3:6c:23:49:47:6f:26:13:03:62:ad:68:50:08:ed:e7:6e:75:
e4:24:53:9f:bd:8f:f4:be:26:95:0f:e3:3f:a4:61:33:b7:be:
ac:97:e9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:54:21 2026 by rpki-client