Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/VdZ3_l2Ib6uKzuDw7A6ykRqegkk.roa
File: VdZ3_l2Ib6uKzuDw7A6ykRqegkk.roa (raw, json)
Hash identifier: axha9AnAD4QktC97eq8g1EWyWgujJ9KhHDQ0hPYCbFQ=
Subject key identifier: 55:D6:77:FE:5D:88:6F:AB:8A:CE:E0:F0:EC:0E:B2:91:1A:9E:82:49
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FA46F268707A43AE0141CFA12E992505E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/VdZ3_l2Ib6uKzuDw7A6ykRqegkk.roa
Signing time: Mon 27 Jul 2026 16:36:15 +0000
ROA not before: Mon 27 Jul 2026 16:36:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219337
IP address blocks: 177.3.208.0/24 maxlen: 24
177.3.209.0/24 maxlen: 24
177.3.210.0/24 maxlen: 24
177.3.211.0/24 maxlen: 24
177.3.212.0/24 maxlen: 24
177.3.213.0/24 maxlen: 24
177.3.214.0/24 maxlen: 24
177.3.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:6f:26:87:07:a4:3a:e0:14:1c:fa:12:e9:92:50:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 27 16:36:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55d677fe5d886fab8acee0f0ec0eb2911a9e8249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:20:90:0d:97:9e:18:8e:95:f4:54:b0:97:cb:
de:c5:1e:5e:4d:86:ec:ec:7e:96:26:be:e7:ce:13:
62:79:fb:75:f0:f2:c2:d3:2e:47:28:0f:55:55:36:
c8:a7:72:26:c6:f0:ef:2a:11:df:50:ae:9b:50:f8:
77:5e:94:1d:8c:cb:ae:f5:aa:30:44:a8:15:2d:72:
d7:ab:cc:a9:43:59:31:3c:5a:00:64:de:76:e1:d3:
77:a4:3c:3e:cd:31:c9:4d:f8:46:3e:62:7d:a5:25:
3f:52:b7:5e:e5:39:36:78:98:4e:a2:2d:12:f8:07:
cf:5a:81:7e:80:77:8f:81:71:c5:b3:81:50:e3:5f:
36:da:9a:7a:17:3c:d1:12:7a:1b:95:52:e6:a9:dd:
c8:3f:bf:bf:1d:4e:a7:21:fd:25:53:28:a8:da:86:
fd:b6:13:d5:29:cf:56:fb:7a:fc:69:ed:8e:28:00:
7d:21:3a:1c:ac:42:0c:59:4a:7d:b5:d6:ad:2f:44:
3c:fe:be:1f:35:93:70:04:5e:fa:c3:43:7c:b7:d5:
db:c8:25:40:64:19:e2:77:1f:6e:01:ff:0f:20:85:
4b:73:ff:02:f2:6a:77:3c:cb:f8:9e:04:78:17:9e:
bd:b7:9a:94:4b:56:e6:43:26:d6:67:63:96:ac:0f:
b3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D6:77:FE:5D:88:6F:AB:8A:CE:E0:F0:EC:0E:B2:91:1A:9E:82:49
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/VdZ3_l2Ib6uKzuDw7A6ykRqegkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.3.208.0/21
Signature Algorithm: sha256WithRSAEncryption
b7:98:c5:ad:e9:ef:b5:f7:2c:6c:3d:c9:25:84:83:3e:9e:c9:
24:01:ae:48:40:96:64:11:0e:14:81:15:5c:8f:4f:45:d9:ef:
4a:a9:43:87:cb:53:e9:91:ed:ef:d1:b7:98:a8:c6:0e:70:d9:
2d:b1:ba:8b:59:f1:f2:9f:92:64:ea:d7:f6:0a:2f:fa:47:c3:
db:81:7d:28:d2:9e:db:08:ec:1e:15:1d:56:f3:67:0f:89:8e:
b0:14:fe:5d:46:54:50:a4:00:de:85:eb:70:b8:72:8d:20:4d:
47:9d:06:83:e8:bf:67:d1:f8:ec:ec:b0:fc:4a:98:43:58:22:
9b:40:46:18:08:dd:b5:64:ea:2c:23:13:c6:0a:cc:34:24:f4:
8e:c3:7f:3f:70:34:e0:e5:a3:d1:8e:d5:ce:5a:f0:3a:b8:e2:
84:e9:8b:ad:64:01:eb:5b:6b:b6:91:4f:52:e9:48:08:e5:00:
70:8b:b2:d7:46:a8:73:93:2d:ea:b3:4d:87:a0:4c:c3:f3:37:
07:4d:58:3d:25:40:b8:d5:2b:b5:9f:76:ab:8c:ea:22:fb:c2:
a0:8a:82:bf:37:8e:df:df:63:9a:87:2b:49:fd:be:8c:4b:f1:
b2:e8:4b:57:68:5b:cd:fa:8f:5b:c8:17:62:ee:64:bd:84:52:
03:f4:de:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:45:12 2026 by rpki-client