Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/UPDbO8zmk6_k9WuMG98QdS0Vcd4.roa
File: UPDbO8zmk6_k9WuMG98QdS0Vcd4.roa (raw, json)
Hash identifier: 9yKMVKCsHWUUKIUq85KAjGrDf7S/y+90f+yiz5m1TqE=
Subject key identifier: 50:F0:DB:3B:CC:E6:93:AF:E4:F5:6B:8C:1B:DF:10:75:2D:15:71:DE
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F9815D4A624C386A3A9A97F2485D0DFE6
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/UPDbO8zmk6_k9WuMG98QdS0Vcd4.roa
Signing time: Sat 25 Jul 2026 07:03:15 +0000
ROA not before: Sat 25 Jul 2026 07:03:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207359
IP address blocks: 179.254.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:98:15:d4:a6:24:c3:86:a3:a9:a9:7f:24:85:d0:df:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 25 07:03:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50f0db3bcce693afe4f56b8c1bdf10752d1571de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:97:f1:90:e3:a9:be:e3:b9:71:cf:b5:0e:19:
13:58:16:9a:8f:5a:92:0c:29:9e:b5:70:26:40:09:
63:e6:3b:fa:18:aa:74:fe:c7:12:a0:ba:52:63:c0:
46:25:80:74:dc:f0:16:10:ac:73:07:09:fa:53:96:
92:81:6c:95:14:27:94:6a:19:3a:57:32:cc:dd:c5:
6c:04:34:b9:a3:04:b9:05:1a:2b:60:4f:f7:3c:39:
f3:7f:1e:fb:24:43:b6:8e:98:80:ed:86:6f:61:8a:
ea:ca:02:d0:31:44:fa:5d:9b:76:04:0a:06:d8:a1:
6e:68:95:20:16:46:4f:ba:09:66:44:72:11:3c:24:
e7:1d:e2:02:57:c3:64:1c:05:ae:cf:a8:18:22:fd:
a3:44:73:7f:19:29:54:61:fd:74:59:d0:5f:c4:8a:
c1:42:16:d8:49:4f:f9:46:7a:5a:a9:69:45:dc:f0:
1b:b7:f8:46:73:52:2a:ca:b8:cd:75:64:6b:61:0a:
48:bd:c9:b3:42:4e:ca:bf:7b:cf:38:9a:50:db:fa:
a1:41:79:41:3f:fb:9c:df:8c:51:b9:4b:5c:b5:47:
b3:04:1a:6b:3f:1d:fe:9e:d7:d1:ae:aa:71:75:2c:
60:ae:06:05:89:ee:d1:b3:08:fe:c3:b7:54:9f:24:
85:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F0:DB:3B:CC:E6:93:AF:E4:F5:6B:8C:1B:DF:10:75:2D:15:71:DE
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/UPDbO8zmk6_k9WuMG98QdS0Vcd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.254.114.0/24
Signature Algorithm: sha256WithRSAEncryption
94:53:23:a4:1c:89:c8:00:dc:93:66:9c:a0:26:62:11:77:e6:
bf:62:79:57:7c:2a:e8:e9:6e:84:58:6e:e1:96:2c:9f:13:d9:
6b:42:89:55:eb:7d:bf:31:69:e3:ef:95:33:1a:ea:bb:e2:bc:
3c:6b:09:82:b9:b2:bf:10:7b:b8:61:f2:a9:d9:f5:e0:38:3d:
d4:92:eb:32:e1:98:dd:0d:e3:38:ae:da:58:4d:98:35:d0:39:
43:76:3a:5c:c9:84:33:bd:e8:3a:84:c9:9f:4c:33:84:ba:27:
38:72:5d:7e:7a:77:0f:c0:b4:77:a4:e1:23:81:0a:42:b0:94:
6e:b4:34:98:6a:20:19:7f:2a:b0:c2:95:40:cc:82:f4:5d:42:
08:77:5c:40:7e:30:20:59:23:7d:f1:be:58:fb:6f:17:11:35:
e0:82:6a:55:9c:3a:4f:db:04:ff:13:ef:b3:6c:27:41:3a:ac:
53:ae:32:0c:77:ec:df:4c:b1:f7:35:4d:a9:7a:65:ed:5e:bb:
7d:20:30:09:65:fc:cd:ec:0c:d1:77:22:77:6b:e9:39:7f:d4:
39:c0:b4:d9:4f:16:20:98:bc:73:08:80:11:6c:b8:0d:cb:32:
54:43:3e:57:9d:52:f5:f2:8c:10:82:c7:e2:f0:85:79:d3:a4:
8f:6f:a8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:53:51 2026 by rpki-client