Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7GMTkqIiccbm2SxxStEM86yi3F0.roa
File: 7GMTkqIiccbm2SxxStEM86yi3F0.roa (raw, json)
Hash identifier: sE3+TrkfWKdZopANZLCcY85AySwW60+zutuGT/HalaU=
Subject key identifier: EC:63:13:92:A2:22:71:C6:E6:D9:2C:71:4A:D1:0C:F3:AC:A2:DC:5D
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E7B197B020EE9BF5679F03852817FD74A
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7GMTkqIiccbm2SxxStEM86yi3F0.roa
Signing time: Sat 30 May 2026 22:55:27 +0000
ROA not before: Sat 30 May 2026 22:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215468
IP address blocks: 2.27.88.0/24 maxlen: 24
31.77.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7b:19:7b:02:0e:e9:bf:56:79:f0:38:52:81:7f:d7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 30 22:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec631392a22271c6e6d92c714ad10cf3aca2dc5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6a:3c:3f:9d:cd:86:2a:bb:b9:41:23:49:a8:
71:cc:17:1a:15:c4:85:67:37:63:48:57:46:47:ed:
4f:db:45:1d:17:f1:ac:4d:25:21:68:ad:ea:24:f5:
16:f4:93:92:36:54:ac:b5:98:dc:a6:b0:0f:e7:0f:
ef:b9:52:db:7a:9b:0f:b7:23:53:d1:59:48:d4:22:
ca:cb:7a:d1:89:ef:f8:b5:7b:74:f3:ea:79:7d:44:
01:76:f9:82:4c:59:af:39:ec:11:0c:56:bc:88:64:
a4:9a:c3:bc:2e:84:30:c4:51:38:7b:79:0f:12:95:
35:d5:4e:61:06:5b:7e:d3:2a:0a:08:3b:c6:78:be:
13:99:a9:ea:39:d7:ff:ec:1b:2e:d4:91:75:07:2c:
3d:97:94:05:0d:8f:6f:8f:5e:31:b3:9e:72:72:b0:
c4:97:35:8c:b4:96:d6:a5:02:2c:9c:4b:b7:46:e5:
f8:8e:8e:92:90:46:49:ba:ab:0d:d7:0f:dd:54:90:
83:d8:58:79:a6:62:a2:53:8e:fe:ff:f6:4e:8e:cb:
02:75:0f:f2:d3:f0:5e:5b:56:93:68:51:d8:aa:68:
ba:7f:42:af:56:aa:86:13:8d:60:31:60:18:8c:0c:
0b:5b:2f:13:e0:ce:91:3f:a0:02:4c:88:f1:55:1b:
3a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:63:13:92:A2:22:71:C6:E6:D9:2C:71:4A:D1:0C:F3:AC:A2:DC:5D
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7GMTkqIiccbm2SxxStEM86yi3F0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.88.0/24
31.77.137.0/24
Signature Algorithm: sha256WithRSAEncryption
29:b9:20:b7:5d:0a:48:b6:5b:43:14:93:47:55:eb:16:7f:d8:
1f:0a:7a:aa:1e:b8:ea:33:54:69:5f:c0:0d:9c:5b:fc:17:4c:
87:6f:ee:ca:d6:8a:bf:2a:4e:21:20:97:67:63:9d:59:8d:f6:
e3:47:3f:a2:39:9c:94:41:78:b4:c6:4a:46:4c:2f:53:fc:88:
6d:c5:f6:7f:94:44:1f:c2:8f:6f:de:ad:d9:ac:d6:18:7b:39:
5b:1f:26:a1:bc:ed:21:1a:b9:fb:27:61:78:5f:d6:bb:70:1f:
92:3f:d8:06:5d:31:97:a9:ad:26:1d:46:57:3d:d8:5c:21:6c:
22:95:eb:97:f5:19:ad:48:b6:c7:ee:3e:d7:6d:c0:9a:2a:f0:
f1:a2:1d:11:ce:5b:8a:46:76:37:fc:83:4c:8d:73:ca:32:53:
97:02:8e:37:3c:2f:15:8b:fa:2f:03:42:bd:fd:00:73:76:e5:
c7:e8:56:34:65:3b:ec:25:29:4f:8c:b7:c4:68:b6:21:c3:37:
d7:e1:28:8e:51:53:09:80:b2:2f:0b:4d:81:34:10:01:72:3c:
a6:22:34:8e:dd:e0:b8:d2:41:8f:4c:ba:95:55:2a:b8:a2:a4:
92:1c:8d:ae:3b:0c:ee:21:28:e6:2a:f6:01:b4:e8:7c:9e:f9:
f1:99:5e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:04:56 2026 by rpki-client