Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/cgsBlBMpwnpNga1h_jTU-Re50II.roa
File: cgsBlBMpwnpNga1h_jTU-Re50II.roa (raw, json)
Hash identifier: WdBfkns/nMrb7VWtqcqo4qCt/1YQ+PcWDLnbLFgKtTY=
Subject key identifier: 72:0B:01:94:13:29:C2:7A:4D:81:AD:61:FE:34:D4:F9:17:B9:D0:82
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A19E12F3FCACE81AE6044B1D65FC296E01
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/cgsBlBMpwnpNga1h_jTU-Re50II.roa
Signing time: Mon 02 Nov 2026 21:03:24 +0000
ROA not before: Mon 02 Nov 2026 21:03:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201269
IP address blocks: 177.3.195.0/24 maxlen: 24
179.236.133.0/24 maxlen: 24
201.58.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9e:12:f3:fc:ac:e8:1a:e6:04:4b:1d:65:fc:29:6e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 2 21:03:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=720b01941329c27a4d81ad61fe34d4f917b9d082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7a:02:7a:32:13:9c:27:42:a9:23:f1:eb:2a:
97:74:ab:d5:58:9a:55:a2:51:3f:4c:32:80:ce:3e:
f3:e4:f6:aa:ea:a8:3f:dc:75:de:79:09:e3:1e:8b:
20:30:29:eb:c4:42:52:67:5b:84:10:d9:40:97:5d:
a5:3c:04:60:fe:fa:a5:58:79:8b:38:4f:ac:ee:02:
5f:0c:fe:1f:0e:a6:c5:12:97:c5:fd:7e:d3:88:23:
ab:a9:80:4c:92:42:46:17:fe:66:05:a1:37:0f:72:
a9:e8:55:50:c0:bb:2b:f2:4a:73:de:15:ad:d2:8c:
7d:1c:3d:e8:36:38:21:aa:32:40:47:51:c1:4d:9e:
71:00:66:bc:97:e3:e6:cd:c9:b1:7c:b1:07:7c:99:
18:9c:58:1d:aa:58:2f:bd:60:8f:dd:71:0a:04:b7:
7a:63:ab:6e:29:68:01:ce:d1:5a:fa:94:b9:68:b6:
b2:6c:0a:de:f6:02:a4:83:da:b5:fa:8f:40:e9:fc:
f1:b5:a5:04:69:c1:2e:7c:93:d8:ab:5c:c6:db:78:
59:29:c6:33:7e:da:d2:48:09:ac:1d:3d:8f:36:cf:
f7:18:de:4f:32:93:e7:70:aa:91:e6:9d:8e:a4:8f:
4a:ed:c3:d5:bd:20:d1:f0:04:d8:d7:ff:f8:04:39:
af:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0B:01:94:13:29:C2:7A:4D:81:AD:61:FE:34:D4:F9:17:B9:D0:82
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/cgsBlBMpwnpNga1h_jTU-Re50II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.3.195.0/24
179.236.133.0/24
201.58.137.0/24
Signature Algorithm: sha256WithRSAEncryption
52:0c:bb:9b:5c:4c:61:20:de:21:eb:82:2d:f7:47:0e:f0:73:
a8:ce:13:06:72:af:4f:d0:d8:4e:4a:5f:92:c2:b6:ef:27:5a:
d6:e6:55:73:7c:d2:7c:2a:87:1a:73:8f:d5:7a:09:9c:2b:bf:
1c:e8:0e:31:1b:5e:18:7c:6c:68:11:27:5d:ab:b3:a2:b1:6d:
85:1d:67:e8:3a:69:a7:46:d3:07:b5:65:4e:08:36:da:d1:2d:
14:dc:b1:79:a7:bf:4e:70:20:95:a7:5c:b0:f8:55:fa:e0:39:
9f:c5:e6:69:47:f6:f7:e7:02:70:9e:98:ca:42:35:88:46:ca:
7d:a6:68:3f:55:a7:a6:1a:b2:d1:b7:6b:04:0e:40:2c:02:a8:
5d:9c:ef:b3:82:36:4e:fa:58:7b:1d:a7:d9:99:e5:0e:76:2f:
09:42:b0:0a:35:97:01:83:c3:32:e0:99:bd:1f:2c:7c:b4:e6:
14:9f:ff:f2:70:5f:87:09:52:f4:e0:b9:b5:00:5c:ad:37:74:
81:5b:b8:6f:26:d9:f1:1c:71:a4:d4:4e:b5:e8:e0:c6:c2:b1:
b0:00:95:0a:cd:cf:94:9d:e1:c9:25:a8:6f:15:13:68:37:bb:
c4:c8:bd:b9:97:5d:f6:d2:9c:54:f3:5c:f7:97:0e:6f:9e:5c:
44:b2:02:9d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaGeEvP8rOga5gRLHWX8KW4BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYxMTAyMjEwMzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjBiMDE5NDEzMjljMjdhNGQ4MWFkNjFmZTM0ZDRmOTE3YjlkMDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknoCejITnCdCqSPx6yqXdKvVWJpV
olE/TDKAzj7z5Paq6qg/3HXeeQnjHosgMCnrxEJSZ1uEENlAl12lPARg/vqlWHmL
OE+s7gJfDP4fDqbFEpfF/X7TiCOrqYBMkkJGF/5mBaE3D3Kp6FVQwLsr8kpz3hWt
0ox9HD3oNjghqjJAR1HBTZ5xAGa8l+PmzcmxfLEHfJkYnFgdqlgvvWCP3XEKBLd6
Y6tuKWgBztFa+pS5aLaybAre9gKkg9q1+o9A6fzxtaUEacEufJPYq1zG23hZKcYz
ftrSSAmsHT2PNs/3GN5PMpPncKqR5p2OpI9K7cPVvSDR8ATY1//4BDmv6wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHILAZQTKcJ6TYGtYf401PkXudCCMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvY2dzQmxCTXB3bnBOZ2ExaF9qVFUtUmU1MElJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAsQPDAwQA
s+yFAwQAyTqJMA0GCSqGSIb3DQEBCwUAA4IBAQBSDLubXExhIN4h64It90cO8HOo
zhMGcq9P0NhOSl+SwrbvJ1rW5lVzfNJ8Kocac4/VegmcK78c6A4xG14YfGxoESdd
q7OisW2FHWfoOmmnRtMHtWVOCDba0S0U3LF5p79OcCCVp1yw+FX64DmfxeZpR/b3
5wJwnpjKQjWIRsp9pmg/VaemGrLRt2sEDkAsAqhdnO+zgjZO+lh7HafZmeUOdi8J
QrAKNZcBg8My4Jm9Hyx8tOYUn//ycF+HCVL04Lm1AFytN3SBW7hvJtnxHHGk1E61
6ODGwrGwAJUKzc+UneHJJahvFRNoN7vEyL25l1320pxU81z3lw5vnlxEsgKd
-----END CERTIFICATE-----
Generated at Thu Nov 5 05:20:13 2026 by rpki-client