Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HLSaR-n8LZ1LhE3qnrgfh9bj2WQ.roa
File: HLSaR-n8LZ1LhE3qnrgfh9bj2WQ.roa (raw, json)
Hash identifier: ygMGjI4wieSGIr3OIT02EtF+1wCTw2JwULPYGfS+Rm4=
Subject key identifier: 1C:B4:9A:47:E9:FC:2D:9D:4B:84:4D:EA:9E:B8:1F:87:D6:E3:D9:64
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D3002B906F947B57239C9104D5605BE45
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HLSaR-n8LZ1LhE3qnrgfh9bj2WQ.roa
Signing time: Fri 27 Mar 2026 15:56:17 +0000
ROA not before: Fri 27 Mar 2026 15:56:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26548
IP address blocks: 2.27.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:30:02:b9:06:f9:47:b5:72:39:c9:10:4d:56:05:be:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 27 15:56:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1cb49a47e9fc2d9d4b844dea9eb81f87d6e3d964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7c:3c:6c:4d:34:0b:42:fc:8e:a7:b5:aa:b7:
51:a8:55:40:78:7c:16:36:bf:12:92:54:23:68:64:
67:de:9b:09:e1:db:8b:29:e4:23:18:8b:90:3e:a4:
56:17:20:f7:8c:5c:73:e4:ba:83:f0:73:a9:8b:a7:
15:d3:b9:09:e4:b5:f0:10:25:36:19:e8:cf:a7:07:
df:0a:75:ab:c2:88:5e:45:56:23:3a:95:bb:47:82:
44:3b:21:9f:4a:2f:51:db:04:1e:56:69:1d:56:9a:
c7:23:8e:c5:29:8f:53:19:c5:d0:d4:2b:5e:d5:96:
20:f8:8e:2d:3f:71:15:bf:f3:ce:43:de:e8:97:86:
fb:29:6d:8e:eb:dc:9c:74:36:a9:86:a4:64:ba:0f:
52:9c:cc:99:6a:d0:43:40:27:70:04:a9:93:7b:14:
c5:a9:67:04:97:9d:67:1f:42:69:eb:11:33:08:45:
36:6a:81:d8:87:e4:ee:0f:93:bf:2b:ee:65:19:be:
11:c1:b8:6c:71:3f:ed:d6:29:ec:70:ba:f4:f2:1c:
1d:96:68:08:9b:9e:69:5b:6c:1d:46:44:dd:f0:c8:
45:fd:3f:39:cb:19:86:f7:ff:aa:61:bd:1d:7b:f5:
d3:f2:02:3d:47:8d:62:56:98:47:a9:1c:1b:88:7d:
23:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B4:9A:47:E9:FC:2D:9D:4B:84:4D:EA:9E:B8:1F:87:D6:E3:D9:64
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HLSaR-n8LZ1LhE3qnrgfh9bj2WQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.84.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:98:43:ef:b2:27:28:58:e4:79:a8:04:ed:18:75:ae:3f:90:
61:9c:f1:3c:01:37:cc:44:0d:c1:7d:47:13:57:c1:84:04:07:
d4:5d:b1:56:8f:69:95:56:6b:8e:f0:ae:e8:ea:e3:60:1a:e1:
4c:a9:a3:8c:04:36:eb:8e:66:f5:91:5e:6c:77:24:ad:e9:02:
f1:70:b2:d8:f4:2d:74:e7:13:f8:84:32:bc:97:0e:48:86:9b:
87:09:8a:bf:4c:d1:1a:c1:14:be:03:04:52:a1:70:2d:4b:15:
67:a5:41:56:e5:e4:3a:2d:9d:95:b9:88:1d:06:b8:bd:b2:28:
87:7a:f3:fc:51:b1:ac:9f:62:cb:38:4d:39:88:4f:40:c2:7a:
81:de:7c:80:c2:ae:48:8c:ba:c7:9e:3e:49:82:45:c7:5f:3b:
30:fc:98:1c:0a:54:65:79:db:57:4c:a3:b2:9c:4b:57:d4:47:
ab:54:a2:8a:e8:09:91:f5:09:8c:75:86:c7:27:a8:73:ad:c7:
1d:59:8f:14:aa:39:12:5b:4a:9d:79:73:6f:71:0f:e2:ad:67:
f0:b1:0f:6b:6d:09:a3:0e:a8:de:4b:10:94:39:59:47:b0:a2:
5b:19:98:d2:88:f9:c2:7c:a9:cf:d8:b1:e9:05:6f:1a:5e:4f:
cc:cc:b0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:02:10 2026 by rpki-client