Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/vrS0sSA_6Hs8dU2lSXjYJ0pk8PM.roa
File: vrS0sSA_6Hs8dU2lSXjYJ0pk8PM.roa (raw, json)
Hash identifier: igwCbAOJu3J7heK+Q8XGwZcsaI2qf2UV0XKmh6C0EB8=
Subject key identifier: BE:B4:B4:B1:20:3F:E8:7B:3C:75:4D:A5:49:78:D8:27:4A:64:F0:F3
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1D692E7B0393B30502B816F70A2A42023
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/vrS0sSA_6Hs8dU2lSXjYJ0pk8PM.roa
Signing time: Fri 13 Nov 2026 20:21:54 +0000
ROA not before: Fri 13 Nov 2026 20:21:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219357
IP address blocks: 48.102.254.0/24 maxlen: 24
152.234.249.0/24 maxlen: 24
177.3.252.0/24 maxlen: 24
191.217.211.0/24 maxlen: 24
191.217.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d6:92:e7:b0:39:3b:30:50:2b:81:6f:70:a2:a4:20:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 13 20:21:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=beb4b4b1203fe87b3c754da54978d8274a64f0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:65:9e:3e:1f:5f:bb:c1:77:c6:d0:e9:db:7c:
28:69:f5:85:48:3d:b7:b1:8a:84:34:f9:40:0d:c6:
29:27:0a:73:c0:2a:45:ee:52:ed:34:10:64:5e:df:
c9:ed:88:b2:a8:a8:65:64:cd:81:40:87:8d:90:0c:
47:8d:0d:29:d9:65:f4:b7:50:92:93:51:e9:dd:95:
10:8f:52:2b:55:5b:91:b5:b5:2b:f5:6e:1e:4d:e5:
7c:b2:ad:56:2f:47:cf:1d:7f:69:33:72:6d:55:21:
7b:20:56:ac:b2:fc:21:de:67:8d:30:c2:c5:bf:a5:
23:02:a2:db:b2:98:26:a1:1f:d5:e7:70:f4:aa:6c:
52:2b:b5:d4:a2:a6:5f:34:33:72:4a:a7:61:92:24:
2c:27:96:c3:2f:98:bd:6d:57:68:cd:c1:1d:d4:44:
1a:e1:f7:cc:35:b2:84:e9:4f:7f:dc:c1:5e:0c:8f:
f2:e0:9e:89:1e:37:61:f5:e4:16:7c:58:8e:9e:1a:
39:85:e3:7b:70:ab:99:ba:49:24:71:61:22:03:31:
37:70:e1:3a:70:94:0d:bd:8f:5d:aa:7c:e1:50:1c:
ec:c8:5a:dd:bd:81:65:9e:6e:a4:7e:3d:7c:c2:e7:
f3:71:1b:f6:4f:46:ae:09:31:18:22:ce:c5:70:e1:
39:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B4:B4:B1:20:3F:E8:7B:3C:75:4D:A5:49:78:D8:27:4A:64:F0:F3
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/vrS0sSA_6Hs8dU2lSXjYJ0pk8PM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
48.102.254.0/24
152.234.249.0/24
177.3.252.0/24
191.217.211.0/24
191.217.251.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ec:80:31:e6:fc:f2:1e:20:3a:65:ed:01:06:56:1c:37:4c:
9e:8a:7a:2c:29:7c:b4:6e:30:3b:bc:8a:dd:73:a3:4b:09:ef:
ad:0a:5b:1a:46:fd:2f:df:68:e2:27:9a:c1:de:a1:63:fd:35:
17:93:f7:ff:a5:d6:40:9d:17:85:99:c7:db:35:aa:37:aa:99:
f7:2d:e6:86:d9:33:c5:8d:3c:4e:97:33:77:f3:dc:b5:eb:21:
86:35:f9:73:05:82:45:73:96:68:69:4d:ea:5c:86:41:b4:ea:
08:ad:7f:8b:c9:b7:cf:e8:a3:10:d5:a2:4c:14:39:97:87:b8:
3a:2a:f7:73:dc:87:8a:4d:a1:72:37:9d:ea:fb:64:30:98:4c:
a0:97:34:e7:85:d7:0a:fc:c2:90:30:0c:12:5f:01:e8:dc:6f:
cb:05:d1:a0:3d:fd:fb:83:89:57:6b:bf:c4:30:2d:d7:76:86:
26:f3:aa:27:50:fd:79:4f:7e:02:29:f8:32:84:95:52:04:fb:
7f:92:2d:14:8b:a6:0e:06:6a:4a:f6:14:be:ca:b8:24:1d:60:
4b:93:3a:b5:fb:bb:aa:a0:92:2c:59:a8:da:1f:9d:da:f0:81:
60:a6:47:eb:22:3f:70:5f:e4:ec:3d:7e:76:71:ef:84:4f:ce:
37:1d:30:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:06:32 2026 by rpki-client