Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Sz6QDxMJgNnrk3XRMvW4O9BW_AQ.roa
File: Sz6QDxMJgNnrk3XRMvW4O9BW_AQ.roa (raw, json)
Hash identifier: dqiVKx3nWCEjdqApiJfaHW59FKxUw2F9Kk+AwCb6c/k=
Subject key identifier: 4B:3E:90:0F:13:09:80:D9:EB:93:75:D1:32:F5:B8:3B:D0:56:FC:04
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019C2F386B993A43AA117C9E542ADC187055
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Sz6QDxMJgNnrk3XRMvW4O9BW_AQ.roa
Signing time: Thu 05 Feb 2026 19:12:32 +0000
ROA not before: Thu 05 Feb 2026 19:12:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205089
IP address blocks: 77.239.124.0/24 maxlen: 24
144.31.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2f:38:6b:99:3a:43:aa:11:7c:9e:54:2a:dc:18:70:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Feb 5 19:12:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b3e900f130980d9eb9375d132f5b83bd056fc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:42:b5:12:02:2f:6c:2c:77:40:b8:c5:f0:
ea:90:0e:ac:cf:45:65:3a:4c:78:c7:58:53:a0:b6:
96:1e:ca:64:27:b2:e8:7b:fa:3b:90:8a:33:80:4f:
cf:1d:28:62:1d:c1:bb:32:32:ae:11:d3:52:50:93:
52:2e:89:ff:e4:86:9a:f0:98:2b:c4:7d:7e:34:8a:
57:5d:d9:9d:8d:64:bd:99:e5:89:d1:8b:b3:65:55:
11:f6:2c:06:71:86:94:1b:f1:e7:fc:04:e1:56:69:
ef:e2:23:11:dd:60:2c:81:34:dc:45:f0:b6:2e:85:
c8:08:ca:3d:e0:49:23:ba:25:8b:b7:ba:12:33:e6:
b2:9a:75:45:2d:9d:fd:d0:27:a6:47:f1:e0:c5:4b:
f3:05:45:1b:70:c5:0a:92:39:de:54:cb:e8:98:25:
ec:9c:0a:2c:0b:fd:a1:34:1b:3f:8e:a2:54:cc:b4:
ed:0e:22:3e:3b:a8:7c:d9:ac:15:bf:cc:2e:91:d8:
e3:e8:14:4b:70:50:b8:72:92:6c:d3:57:e5:e6:27:
2b:5e:13:97:0b:56:3c:d5:e7:3e:2c:46:5c:47:47:
49:45:d4:30:8b:6c:00:83:8a:39:17:6f:78:85:f9:
36:d6:da:4c:ed:62:e9:f3:b5:82:a2:a9:f8:35:bc:
77:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3E:90:0F:13:09:80:D9:EB:93:75:D1:32:F5:B8:3B:D0:56:FC:04
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Sz6QDxMJgNnrk3XRMvW4O9BW_AQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.239.124.0/24
144.31.24.0/24
Signature Algorithm: sha256WithRSAEncryption
34:2e:ea:72:75:21:7a:b7:41:0a:b5:8b:43:7e:86:93:85:48:
dd:ed:5f:e4:0e:5e:78:fd:11:8a:af:f6:22:97:04:87:79:0b:
48:17:b9:4d:ad:30:5a:a2:ad:55:9e:a7:50:e5:cc:dc:af:04:
f7:fb:5d:79:17:41:06:6a:6a:77:bb:7f:11:46:fb:73:35:df:
5a:50:7c:29:b5:96:f2:94:84:74:37:ce:91:b6:e8:7b:ab:2a:
a2:b7:a6:19:71:a7:3b:cf:37:ca:e7:ad:9f:5d:22:df:8e:6a:
81:6e:a9:bf:02:74:39:a6:98:d7:fa:ab:ac:9e:3c:31:a4:b1:
6a:df:82:af:92:3d:ad:9b:0e:6c:dc:1a:dc:ce:c0:1b:fa:d9:
67:3a:2b:e6:7f:73:3d:30:9e:e7:5c:2a:d0:4f:92:43:70:b7:
0f:76:81:48:d8:99:e6:39:46:b7:96:fa:25:5c:57:19:7e:ac:
50:86:d8:f8:b1:5f:cf:52:d7:43:90:1e:5b:29:89:73:be:dc:
4a:6a:3c:b2:84:e8:2c:1a:09:cb:6c:64:16:ac:67:b0:1d:26:
ec:8c:ce:e7:a3:a7:43:6f:c4:d5:19:ec:22:cf:f1:80:ba:09:
ca:1c:20:48:2e:8f:a5:67:82:be:6c:24:69:64:cd:9a:d3:c3:
31:52:88:1e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZwvOGuZOkOqEXyeVCrcGHBVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwMjA1MTkxMjMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjNlOTAwZjEzMDk4MGQ5ZWI5Mzc1ZDEzMmY1YjgzYmQwNTZmYzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQVCtRICL2wsd0C4xfDqkA6sz0Vl
Okx4x1hToLaWHspkJ7Loe/o7kIozgE/PHShiHcG7MjKuEdNSUJNSLon/5Iaa8Jgr
xH1+NIpXXdmdjWS9meWJ0YuzZVUR9iwGcYaUG/Hn/AThVmnv4iMR3WAsgTTcRfC2
LoXICMo94EkjuiWLt7oSM+aymnVFLZ390CemR/HgxUvzBUUbcMUKkjneVMvomCXs
nAosC/2hNBs/jqJUzLTtDiI+O6h82awVv8wukdjj6BRLcFC4cpJs01fl5icrXhOX
C1Y81ec+LEZcR0dJRdQwi2wAg4o5F294hfk21tpM7WLp87WCoqn4Nbx3nQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEs+kA8TCYDZ65N10TL1uDvQVvwEMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvU3o2UUR4TUpnTm5yazNYUk12VzRPOUJXX0FRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATe98AwQA
kB8YMA0GCSqGSIb3DQEBCwUAA4IBAQA0LupydSF6t0EKtYtDfoaThUjd7V/kDl54
/RGKr/YilwSHeQtIF7lNrTBaoq1VnqdQ5czcrwT3+115F0EGamp3u38RRvtzNd9a
UHwptZbylIR0N86Rtuh7qyqit6YZcac7zzfK562fXSLfjmqBbqm/AnQ5ppjX+qus
njwxpLFq34Kvkj2tmw5s3BrczsAb+tlnOivmf3M9MJ7nXCrQT5JDcLcPdoFI2Jnm
OUa3lvolXFcZfqxQhtj4sV/PUtdDkB5bKYlzvtxKajyyhOgsGgnLbGQWrGewHSbs
jM7no6dDb8TVGewiz/GAugnKHCBILo+lZ4K+bCRpZM2a08MxUoge
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:05:19 2026 by rpki-client