Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1K1mKhhZ3GsHHDlg9Sl_2mGZDDY.roa
File: 1K1mKhhZ3GsHHDlg9Sl_2mGZDDY.roa (raw, json)
Hash identifier: djJlqfyx9uYVlrgeBSJqF6xSat9TyW7hzorT5rhke0c=
Subject key identifier: D4:AD:66:2A:18:59:DC:6B:07:1C:39:60:F5:29:7F:DA:61:99:0C:36
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D2AEA1A3534F93FAF6BF2E01198B13B17
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1K1mKhhZ3GsHHDlg9Sl_2mGZDDY.roa
Signing time: Thu 26 Mar 2026 16:11:18 +0000
ROA not before: Thu 26 Mar 2026 16:11:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202792
IP address blocks: 2.27.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:ea:1a:35:34:f9:3f:af:6b:f2:e0:11:98:b1:3b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 26 16:11:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4ad662a1859dc6b071c3960f5297fda61990c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6c:bc:ec:37:aa:36:51:a7:65:9b:7a:92:aa:
5e:77:8b:34:ad:db:fb:d7:81:f4:f0:ad:fb:b8:6e:
9f:e0:ae:7f:7f:2e:d7:d3:83:8c:8a:40:0d:75:dc:
b5:7a:64:23:6a:66:c7:db:85:54:ec:e2:fe:9d:d6:
02:47:b4:c5:e0:87:18:ec:86:70:3a:77:62:c7:41:
9f:cd:02:1b:9d:b2:6f:c9:f0:38:15:a5:67:91:46:
fd:8f:34:17:1c:3d:3a:2b:6f:33:c0:cd:93:bb:b7:
ef:3e:d4:73:da:8b:e0:03:6b:ea:a9:31:37:e0:ca:
76:ea:4c:34:30:6d:dd:67:56:ae:ad:c1:50:c1:50:
0f:0a:d5:94:de:0f:aa:1c:6c:02:84:a1:aa:f8:dc:
6c:35:09:df:2d:5a:d0:ae:ff:4e:c7:af:ad:12:6f:
9e:99:73:e4:8c:ab:ba:ba:8e:cf:07:38:fa:a3:e3:
71:f6:6e:e4:5a:a0:03:9e:28:73:d4:42:73:8f:e3:
f5:8b:d9:05:d7:8e:4a:fc:d8:3b:6c:41:44:70:db:
14:0c:d1:21:9c:9c:5d:28:69:a3:b2:51:da:b7:2f:
cc:fe:f6:9f:c3:18:fd:80:ca:a0:48:73:4c:9f:9d:
3b:7a:a6:a2:74:51:8f:e7:c8:b8:e2:f4:1d:81:d2:
4d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AD:66:2A:18:59:DC:6B:07:1C:39:60:F5:29:7F:DA:61:99:0C:36
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1K1mKhhZ3GsHHDlg9Sl_2mGZDDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.234.0/24
Signature Algorithm: sha256WithRSAEncryption
37:a0:fc:2e:ab:67:c9:f5:cc:9c:d1:30:84:e8:89:43:53:ba:
d1:24:e9:6c:6d:1d:e8:e1:79:72:ad:6b:25:bc:fb:b5:e1:44:
81:35:98:7d:a8:7d:c6:54:4c:c6:1f:36:24:5d:2e:3c:a0:2e:
dc:17:7c:7c:0d:21:e4:05:ca:e8:8d:54:76:68:e8:97:79:37:
68:f7:ca:cc:50:05:5d:84:75:1a:bd:fa:96:02:6e:90:5c:49:
e7:04:a8:b6:38:d8:39:a6:cd:c6:eb:ab:03:86:ec:7c:6b:a0:
fa:21:ab:c8:e7:2f:56:4e:57:f8:d1:f0:78:60:4d:1b:2b:27:
c6:71:b2:38:57:fa:f5:41:36:1d:5a:de:89:54:94:79:64:da:
6e:6d:11:4b:38:65:41:d9:99:56:b4:01:af:65:38:89:58:30:
cd:d5:10:32:df:64:6b:82:91:9b:3c:83:e3:3c:11:8f:0a:e2:
7a:e7:4a:8c:c2:f1:c1:bd:f2:5b:89:70:41:30:17:ef:d4:1d:
c1:be:3f:0e:ae:86:67:8c:d6:71:da:3e:d7:0b:18:fa:59:39:
03:58:10:2b:03:cf:46:fd:ee:c8:a7:95:bb:07:3c:62:c3:15:
58:10:63:fd:01:64:40:3c:1c:ba:59:86:df:c4:ad:ba:0b:b0:
d2:1f:c9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:58:17 2026 by rpki-client