Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Je2rgZUcMv3rg39HRf3HWg_HJBg.roa
File: Je2rgZUcMv3rg39HRf3HWg_HJBg.roa (raw, json)
Hash identifier: OCmMLqd1jplNxrRfP9ZYFzdjKciKhhlmsU/VKGE2zvY=
Subject key identifier: 25:ED:AB:81:95:1C:32:FD:EB:83:7F:47:45:FD:C7:5A:0F:C7:24:18
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0B58CF1C30EA3E6A6520CFFCD5A068F85
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Je2rgZUcMv3rg39HRf3HWg_HJBg.roa
Signing time: Fri 18 Sep 2026 17:25:08 +0000
ROA not before: Fri 18 Sep 2026 17:25:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219297
IP address blocks: 179.254.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:8c:f1:c3:0e:a3:e6:a6:52:0c:ff:cd:5a:06:8f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 18 17:25:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25edab81951c32fdeb837f4745fdc75a0fc72418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a9:47:43:72:44:6b:00:d3:f5:ca:bb:44:c0:
c6:03:7f:9e:4c:80:6c:30:f6:e3:97:80:99:79:1c:
66:f2:d5:04:53:02:d5:17:da:54:b3:e5:64:0f:22:
ec:ef:a3:cc:4b:76:6d:b9:33:6a:9f:fd:3c:26:12:
96:90:8f:d3:83:20:c0:48:72:47:76:cb:77:29:b4:
cc:d5:d6:fc:57:c5:03:aa:53:04:00:29:2d:7f:4c:
9a:95:d7:05:43:a0:d2:10:d8:f0:38:e8:e1:db:47:
f3:c7:73:be:f8:8d:18:c7:f9:44:f4:58:27:09:e4:
38:bd:a2:c0:1c:3a:67:b4:ca:e5:e0:d1:48:eb:b6:
03:e4:8c:fe:b1:0b:e3:23:3f:3e:db:f7:ef:cc:63:
74:47:f2:04:ae:2d:d6:cf:9e:12:e6:d7:e3:b7:4b:
70:3a:9b:81:1d:66:56:23:c8:16:c3:5e:e1:cc:90:
dd:57:f7:7a:e8:ca:6d:f7:a3:0f:2b:fa:de:49:51:
ec:7d:74:e9:ae:b4:da:7f:34:bc:05:5b:19:37:67:
63:a1:eb:1c:a9:a9:87:0b:2a:ca:2e:17:9a:5c:fe:
0a:0b:e7:72:8a:54:ce:58:8b:ba:99:c2:87:0d:db:
80:d5:1e:fd:50:1c:70:6d:96:ed:66:0f:d1:02:45:
3d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:ED:AB:81:95:1C:32:FD:EB:83:7F:47:45:FD:C7:5A:0F:C7:24:18
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Je2rgZUcMv3rg39HRf3HWg_HJBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.254.81.0/24
Signature Algorithm: sha256WithRSAEncryption
06:56:a0:9b:c6:48:e8:0c:58:56:7f:34:53:cc:32:13:b5:35:
f1:86:36:44:3f:2b:5d:08:9e:6b:bc:f8:ee:6f:86:42:34:48:
0c:80:54:74:8a:86:34:40:cd:f6:ff:28:f6:01:c6:46:be:63:
64:05:72:2c:ff:11:23:61:32:52:bf:b2:94:e3:61:32:c3:3d:
ec:64:92:d3:c7:1a:f8:77:fd:fa:22:ed:0c:48:4b:95:2a:ad:
9d:32:f6:8f:62:b3:46:66:6b:6b:05:6e:07:9b:ab:76:b2:f1:
f1:14:2f:e2:cd:e5:ca:3e:2d:2c:ec:9a:19:bf:20:c5:9d:f8:
37:64:48:24:37:fb:a3:52:03:5b:ae:ea:3c:8e:b0:21:81:c1:
a0:bf:8b:b3:da:33:6a:94:53:60:cb:f4:55:90:15:24:de:5d:
ca:d4:1d:75:42:60:64:dc:64:63:2f:ee:4c:84:b4:f9:41:c1:
34:25:71:1a:cb:42:87:8d:d4:0a:5a:79:b6:56:bc:d1:95:2b:
5b:aa:e4:20:5f:90:3e:1b:6c:e4:50:95:98:3d:ec:49:f2:1c:
c5:3e:62:34:d3:b6:7a:84:71:57:5c:5b:7c:2a:18:4f:a2:b1:
15:69:72:bb:cb:31:a7:b7:ed:f0:d3:17:85:0f:3f:70:84:6d:
7a:5d:9f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:23:21 2026 by rpki-client