Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/i8Wph5r3Fz2rpXMQognDItmmToM.roa
File: i8Wph5r3Fz2rpXMQognDItmmToM.roa (raw, json)
Hash identifier: gTCuycpyjxQ0hXRWkIYTynoQ0CThFm7xqBOk9Hjhmsc=
Subject key identifier: 8B:C5:A9:87:9A:F7:17:3D:AB:A5:73:10:A2:09:C3:22:D9:A6:4E:83
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D7E3B2D50DF58C6CD09F9BF84AEA7B960
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/i8Wph5r3Fz2rpXMQognDItmmToM.roa
Signing time: Sat 11 Apr 2026 20:28:20 +0000
ROA not before: Sat 11 Apr 2026 20:28:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213702
IP address blocks: 150.241.93.0/24 maxlen: 24
150.241.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:7e:3b:2d:50:df:58:c6:cd:09:f9:bf:84:ae:a7:b9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 11 20:28:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8bc5a9879af7173daba57310a209c322d9a64e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f5:05:8b:09:5c:f1:39:a6:12:d1:73:22:73:
a9:97:84:d1:43:f2:e2:44:08:14:58:47:29:27:19:
49:02:eb:c9:d9:d8:e7:51:e3:e3:50:67:35:1b:a2:
75:89:a0:5e:a1:17:17:97:e9:e8:07:b4:2d:81:b6:
62:23:23:24:86:53:44:ef:7a:3d:ab:dd:4f:be:ca:
4e:b9:5e:36:a1:6c:10:27:31:79:28:ad:9d:2f:0f:
d6:00:41:6a:21:b4:49:d1:b7:b9:0c:e4:ee:3a:76:
fc:2a:86:3a:67:da:8e:c0:70:8c:aa:2a:40:8a:d1:
5a:83:0c:de:f6:9b:3a:2c:f8:88:0a:01:e7:bb:8c:
d8:d5:0e:95:b2:a3:7b:3f:f8:b0:8b:c8:22:1e:11:
58:b9:6b:41:58:1a:f9:86:80:af:6b:33:09:2c:60:
a5:e3:c5:c6:4e:5e:7d:5f:5b:93:48:6c:3d:5b:40:
6a:6b:3a:14:2f:f4:23:67:20:a1:70:c8:79:09:7c:
da:a9:48:41:b5:e1:44:5c:61:a0:5d:89:8f:ca:e0:
0b:d3:d3:f6:a8:80:e6:bb:de:86:a8:fa:1a:02:5e:
b0:64:b8:1e:5b:1e:96:0d:f1:aa:a3:97:01:e9:c2:
a1:f3:58:56:77:a3:7b:e4:d0:9f:a8:ab:f7:29:27:
76:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C5:A9:87:9A:F7:17:3D:AB:A5:73:10:A2:09:C3:22:D9:A6:4E:83
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/i8Wph5r3Fz2rpXMQognDItmmToM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.93.0/24
150.241.124.0/24
Signature Algorithm: sha256WithRSAEncryption
88:b7:bf:16:19:a2:c9:05:71:3a:a4:37:1e:47:9b:e7:0c:c9:
4c:1b:d5:ea:a2:6b:71:c1:c2:75:7c:da:d1:5f:56:21:ea:88:
40:30:db:52:46:98:b8:1f:00:1f:91:24:64:59:e6:b0:5d:57:
1c:2b:91:a4:7b:55:93:9b:f1:b7:a3:d6:5f:27:1a:c3:a7:01:
cd:2f:db:5c:21:e7:12:86:6e:d9:5e:7f:cb:17:be:0e:fa:f3:
08:ae:2c:da:6f:bb:bc:3e:de:b6:bf:cc:5d:5d:26:d7:3d:b2:
7b:f5:1c:2a:4e:f5:3e:28:21:1c:56:1f:22:eb:ea:68:cb:0c:
59:61:f9:d6:aa:8a:8f:24:4a:1c:c2:b3:86:b6:08:1e:11:1a:
b3:c5:9a:62:e2:75:a5:5b:af:0e:6b:b5:71:e3:70:46:9f:55:
e3:be:39:93:cf:c8:d3:43:50:ce:ea:13:72:d2:32:a4:2a:60:
70:43:89:09:bb:74:ef:5b:06:25:6c:d8:ba:cf:50:07:37:5e:
b0:6d:4c:99:5e:5d:c9:db:69:3a:2b:00:f2:72:ee:cf:2b:81:
1d:32:68:09:52:1d:13:1c:70:d0:76:1b:72:a2:e9:7d:cc:0d:
0e:51:10:45:19:a2:4a:57:0e:6a:5a:16:14:d8:41:20:68:fa:
1e:5b:cf:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:48 2026 by rpki-client