Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1Q0YRXIGjnloPkFttA6tmzPrvrU.roa
File: 1Q0YRXIGjnloPkFttA6tmzPrvrU.roa (raw, json)
Hash identifier: Pfb3nVHMTbHHyoOLcS98Ol7jCLsxjsdk6NjCUEG5rKk=
Subject key identifier: D5:0D:18:45:72:06:8E:79:68:3E:41:6D:B4:0E:AD:9B:33:EB:BE:B5
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1A7C9229C0F0711D13750331D39DB4C4D
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1Q0YRXIGjnloPkFttA6tmzPrvrU.roa
Signing time: Wed 04 Nov 2026 18:18:58 +0000
ROA not before: Wed 04 Nov 2026 18:18:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218188
IP address blocks: 201.58.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:c9:22:9c:0f:07:11:d1:37:50:33:1d:39:db:4c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 4 18:18:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d50d184572068e79683e416db40ead9b33ebbeb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:77:19:9c:09:ae:89:d8:87:ce:1f:8a:17:77:
a3:93:a0:a9:a3:2c:85:da:05:57:e2:61:bc:08:ee:
33:21:10:c9:9d:bb:82:c9:b0:b7:fb:12:23:e8:ac:
65:75:47:48:9f:b1:55:80:cb:0e:c5:29:1d:c4:bb:
46:6d:16:be:c8:70:3e:0c:ff:ac:d5:fa:e9:72:ad:
82:89:5d:30:32:a9:b4:0e:c0:ec:20:fb:56:7b:35:
31:52:b5:54:21:2e:e3:4b:61:41:b3:de:0e:09:0d:
8c:5a:05:85:84:22:d6:a6:ee:0f:00:bb:78:32:52:
04:4e:df:32:d1:dc:f0:ef:46:55:1d:ce:fe:35:f7:
bf:77:08:fb:cb:60:cf:61:ec:36:d3:c8:06:3f:e4:
35:26:df:5b:a3:97:ad:d2:b8:6a:5e:85:cc:d1:39:
d1:89:1c:8a:8d:c3:a6:f9:6b:2f:45:d6:86:fa:23:
c2:99:94:24:66:ca:b3:fd:7c:af:ad:88:d1:f4:f5:
db:9f:ca:5c:22:8c:ad:8b:df:ab:02:bc:56:bf:ac:
c2:d8:fb:0d:4f:ac:e7:8c:a8:ab:64:9a:d3:c9:34:
c0:97:5e:e1:c5:ab:35:5f:dc:a9:41:6b:c0:9d:5d:
27:87:08:8b:20:2e:83:fc:85:31:a0:56:85:c5:aa:
56:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0D:18:45:72:06:8E:79:68:3E:41:6D:B4:0E:AD:9B:33:EB:BE:B5
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1Q0YRXIGjnloPkFttA6tmzPrvrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.58.132.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:0f:f0:24:b2:0a:b8:14:97:aa:c2:24:86:7a:16:80:ed:1a:
88:b0:72:4f:4a:e0:45:4c:96:42:fe:eb:cb:95:50:e2:39:eb:
d1:29:cb:ce:67:66:de:85:1f:da:8b:9a:63:17:fe:8e:a4:c9:
0d:c6:1c:f8:54:9c:71:6a:b5:2b:ce:49:72:83:7a:00:f4:46:
b3:11:3e:14:e1:9e:7a:54:ac:0a:c2:e1:3a:4e:38:d8:28:54:
4b:b9:31:3c:79:b5:ea:95:31:98:05:bd:d7:5f:7c:8f:d3:25:
ef:84:6d:d7:d9:47:5e:de:22:19:19:59:04:dd:aa:2c:1d:ed:
92:75:58:36:c0:1f:0a:55:52:60:57:2f:0f:00:4b:09:a6:05:
ad:2c:98:fa:a5:56:1d:8f:3a:ff:d5:1f:30:e7:30:32:e0:02:
7f:45:56:23:1b:8a:c5:de:d4:ba:86:9a:53:4c:7c:75:be:5a:
bf:d8:f6:51:43:6b:1c:37:91:0c:86:15:0c:cb:8b:b4:a7:bc:
f6:3c:f8:c2:30:69:d2:8c:19:44:c0:86:49:89:bc:ac:ab:44:
8a:58:f7:2e:01:13:cb:e2:de:cc:4f:4b:d3:c9:e7:73:7c:94:
52:0a:53:c0:e9:df:0a:07:1a:32:67:e9:15:a4:65:aa:dc:ed:
10:fe:bc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:04:42 2026 by rpki-client