Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Xd4KXb6pDC54GCJQ_PVOioFOwnc.roa
File: Xd4KXb6pDC54GCJQ_PVOioFOwnc.roa (raw, json)
Hash identifier: XcXps/SjXcjuuwlQsRvM4xc+jUHXdfelU2lZ7a7Y0vY=
Subject key identifier: 5D:DE:0A:5D:BE:A9:0C:2E:78:18:22:50:FC:F5:4E:8A:81:4E:C2:77
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1C1C5BDF579F104216A7435C4903CA626
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Xd4KXb6pDC54GCJQ_PVOioFOwnc.roa
Signing time: Mon 09 Nov 2026 19:25:24 +0000
ROA not before: Mon 09 Nov 2026 19:25:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218136
IP address blocks: 179.253.99.0/24 maxlen: 24
179.253.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:c5:bd:f5:79:f1:04:21:6a:74:35:c4:90:3c:a6:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 9 19:25:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5dde0a5dbea90c2e78182250fcf54e8a814ec277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a3:ae:3f:14:90:67:34:8c:46:4d:a2:c0:52:
f7:d1:fd:d9:02:17:24:54:06:5d:02:38:a8:4e:5b:
48:2c:aa:b8:4c:a7:f6:96:0f:51:22:30:7c:32:f7:
a0:e7:c9:cb:1f:d0:81:9d:c4:13:d4:e7:70:38:18:
88:9c:1b:86:86:0c:0a:7c:eb:ac:17:b7:1f:c9:69:
f8:c8:cb:c8:82:16:6d:ea:6b:65:97:b6:92:1b:a6:
49:77:3f:c3:51:c7:91:ae:9c:df:9c:31:04:f4:d7:
59:d0:19:54:fd:b5:ca:75:4c:f9:95:19:f8:3d:a0:
86:d0:7e:c0:78:dc:6c:d7:ce:5d:eb:27:a9:f5:91:
c5:79:5e:59:37:a1:12:bd:ef:5b:95:69:75:5c:7d:
7e:d4:fb:d5:13:92:c4:7b:3d:7c:44:b0:c4:9f:36:
14:10:46:6b:c9:90:5d:3b:94:ad:65:2a:a9:e4:33:
df:f5:37:fe:8e:f4:93:db:ca:77:a8:74:81:23:1f:
dd:18:8a:ef:64:b9:9d:0a:c6:b3:a0:a5:f4:c5:10:
64:78:11:95:72:e2:c9:37:74:2c:08:7f:f5:5a:ae:
13:35:b8:32:12:ac:a0:d0:90:ed:38:0d:86:aa:b2:
93:72:cb:be:52:0b:ba:fd:0c:b2:bb:98:5b:46:27:
27:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DE:0A:5D:BE:A9:0C:2E:78:18:22:50:FC:F5:4E:8A:81:4E:C2:77
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Xd4KXb6pDC54GCJQ_PVOioFOwnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.253.99.0/24
179.253.111.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:02:a6:94:0f:d5:43:ac:2e:8a:00:25:35:4d:08:b6:84:fc:
d6:e9:70:3a:fd:e4:4a:88:b0:a9:0a:e5:32:11:9d:7f:58:46:
25:c6:44:34:ee:f1:72:06:21:43:cd:8f:86:a8:75:07:29:d2:
7e:91:e6:27:a4:8a:f8:ae:2f:45:38:37:a2:87:0a:c4:d8:f1:
42:4b:24:fc:68:b0:55:35:92:c8:81:14:c9:68:2a:1c:c2:50:
6b:80:de:73:7c:c7:3f:f5:52:01:f8:70:37:7e:67:56:d2:ff:
a0:d7:64:5c:a1:36:a3:7f:c3:3d:0e:74:b6:2f:b4:cf:ab:93:
4a:a5:58:b6:7e:86:6b:58:c9:cc:dd:54:4b:44:0a:22:1d:af:
e5:19:a2:a3:47:c4:2e:ca:e2:57:de:d1:e4:80:16:ef:5c:66:
49:e6:86:cb:4b:af:22:96:42:f4:ff:58:5d:44:0b:9d:8a:3e:
6c:10:dd:c6:f2:45:3a:72:53:6f:38:ef:78:72:d3:78:7f:84:
a4:ee:55:d3:02:6e:67:42:5a:8c:9d:e3:52:c1:a5:8d:3e:a5:
73:2d:c9:87:19:f5:b7:1e:e0:1f:40:39:be:55:a7:09:53:ab:
21:68:0f:2c:09:e9:7b:98:f5:65:27:4d:cb:83:6a:3f:f6:b0:
d9:48:0f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:34:50 2026 by rpki-client