Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/J_N9lAGoBrGU4lwdgnh0LiPPT9Y.roa
File: J_N9lAGoBrGU4lwdgnh0LiPPT9Y.roa (raw, json)
Hash identifier: xx04yUUY1wnU7QL5Nl+psybwAtutwg9oxuut16HlTgg=
Subject key identifier: 27:F3:7D:94:01:A8:06:B1:94:E2:5C:1D:82:78:74:2E:23:CF:4F:D6
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F98122B05913AE524CA8E6A18632ABF5F
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/J_N9lAGoBrGU4lwdgnh0LiPPT9Y.roa
Signing time: Sat 25 Jul 2026 06:59:15 +0000
ROA not before: Sat 25 Jul 2026 06:59:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219147
IP address blocks: 201.10.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:98:12:2b:05:91:3a:e5:24:ca:8e:6a:18:63:2a:bf:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 25 06:59:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27f37d9401a806b194e25c1d8278742e23cf4fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:35:3a:2e:00:f0:75:27:a6:70:5c:46:52:e3:
c1:bd:b9:f8:3d:4c:1e:ed:2c:55:d5:28:0b:da:3f:
c8:71:44:30:28:c8:2e:ee:bc:f4:75:41:32:eb:23:
65:58:c1:72:a4:8f:0b:92:cc:70:7b:9a:2d:59:1f:
47:58:bd:86:b9:93:a7:53:eb:86:de:ee:da:f2:31:
af:c6:37:23:3b:c1:ec:8a:98:7c:b4:4c:3c:e0:96:
19:bf:cb:9e:68:81:42:74:68:c0:4c:04:b8:e0:cc:
58:2b:d5:9e:c4:2d:ed:7f:f9:f7:9a:3e:67:e7:ca:
3a:47:a0:c8:f8:5d:2e:b9:67:d7:5a:91:46:ba:69:
c1:bc:6b:95:e7:ba:84:ca:73:a0:2e:ec:64:38:9a:
9b:6b:bb:40:ea:91:1c:00:a6:72:b3:90:7a:47:3a:
ea:1f:fb:49:20:d5:a4:77:47:1e:41:ed:d4:4e:62:
f7:82:32:46:8d:a0:a9:dd:e7:1f:41:2c:e7:25:a1:
30:14:79:3f:cc:8a:bd:1d:50:d5:66:4f:13:31:f6:
a8:4d:0e:25:92:f2:92:1b:87:a4:f9:d2:43:fb:7b:
30:c2:18:a1:5b:56:22:6f:20:20:8c:a6:57:b8:f4:
75:fc:46:7e:23:83:6b:dd:97:b0:c4:a7:a8:7f:0f:
a9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F3:7D:94:01:A8:06:B1:94:E2:5C:1D:82:78:74:2E:23:CF:4F:D6
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/J_N9lAGoBrGU4lwdgnh0LiPPT9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.10.90.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c1:5f:d0:77:7a:93:a4:8b:a1:46:84:34:77:21:f4:f6:4e:
be:e7:a1:d7:f0:ae:50:10:40:2e:3c:83:8d:bc:49:35:74:80:
a1:21:0a:62:fe:5c:84:e8:cb:ba:34:4d:b8:7f:49:96:44:c6:
0e:87:8a:6d:29:34:e6:96:87:8d:83:0d:31:b7:76:db:00:b0:
16:44:aa:36:b0:bf:95:10:f3:97:d9:0d:8a:d8:72:2a:e1:cc:
86:e5:68:a1:12:b4:c2:58:a6:69:ad:e4:d1:60:b0:d5:62:d7:
8d:55:bd:b0:c9:8c:12:60:99:54:28:b3:e2:2e:37:33:64:4d:
da:06:17:df:ed:a5:2c:65:4e:15:53:0b:d2:9a:e5:fa:8c:b8:
33:22:22:6b:84:54:b8:bc:d6:2a:ae:4e:eb:93:26:27:62:6c:
87:70:d7:04:26:2a:48:73:77:a9:ed:17:3c:74:93:fd:79:19:
7c:d7:0d:10:65:be:6b:65:87:c7:5e:f7:f5:16:cd:f5:ad:31:
c9:0d:11:df:41:e0:ea:1c:19:af:a9:e0:b4:c7:d4:13:4c:33:
2b:90:5d:c5:b1:c0:aa:02:98:32:79:08:2c:0f:0f:0b:10:5b:
6a:09:d0:8e:57:7c:ef:2b:96:b4:ee:3f:18:e5:20:0a:00:08:
74:d9:6c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:37:16 2026 by rpki-client