Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Jhg6q_00t5O9ixQ-pq6DcGiV938.roa
File: Jhg6q_00t5O9ixQ-pq6DcGiV938.roa (raw, json)
Hash identifier: b9wv/pAU5s/Ho0dSa+dVfTXTR7BpJrcR70T7vEgvcng=
Subject key identifier: 26:18:3A:AB:FD:34:B7:93:BD:8B:14:3E:A6:AE:83:70:68:95:F7:7F
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D32C757B9885447221CFA059AAA207AD4
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Jhg6q_00t5O9ixQ-pq6DcGiV938.roa
Signing time: Sat 28 Mar 2026 04:50:18 +0000
ROA not before: Sat 28 Mar 2026 04:50:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 268624
IP address blocks: 2.27.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:c7:57:b9:88:54:47:22:1c:fa:05:9a:aa:20:7a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 28 04:50:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26183aabfd34b793bd8b143ea6ae83706895f77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:aa:42:41:c2:49:97:84:a0:5f:68:39:4d:d9:
1a:3b:ff:88:99:6b:da:b8:13:fe:5e:de:e6:38:d4:
5e:67:04:c9:69:6c:16:fd:dc:02:07:86:5f:36:20:
ca:3a:f2:02:bd:8c:1c:a0:0e:40:ce:24:71:34:06:
c6:ac:c2:13:1a:ed:0b:4e:1e:db:88:41:fa:3d:df:
8a:2b:a5:a1:6f:0d:52:3c:16:d0:67:49:4a:cb:0f:
b7:2f:29:09:13:2a:39:97:35:06:10:b0:3e:12:7f:
70:00:88:21:95:d9:96:b2:34:21:1f:1d:ce:80:f8:
13:08:66:db:b6:b2:5b:00:e8:e2:85:39:48:6a:57:
47:e6:d6:ea:22:e5:b8:ac:09:e3:6a:bc:ca:9b:39:
0f:7e:79:24:68:11:de:bc:ff:26:a3:ed:fe:22:60:
8e:98:be:d5:36:5b:4e:c4:2c:10:bd:bf:6b:ba:de:
52:73:b7:78:94:b5:ba:ab:27:19:38:b2:c4:a5:78:
10:72:d4:bc:c9:7c:8e:58:8c:a9:35:bb:16:80:c4:
d2:91:de:a4:36:44:48:d7:2b:1c:51:3e:90:f6:ad:
ab:c0:4c:df:1b:84:35:91:76:ce:cf:39:d5:c9:19:
1c:1c:78:45:0f:5c:a4:84:cc:83:05:e2:2c:46:66:
d1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:18:3A:AB:FD:34:B7:93:BD:8B:14:3E:A6:AE:83:70:68:95:F7:7F
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Jhg6q_00t5O9ixQ-pq6DcGiV938.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.83.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ef:61:50:15:d0:dd:c1:e3:e4:4d:84:22:64:83:d3:e2:d1:
ba:c5:8d:5a:81:92:2f:ee:40:ce:88:9a:e7:04:d1:87:1b:02:
68:5c:43:0b:bc:21:a9:13:d9:30:19:19:09:c5:61:c4:30:af:
c7:b3:f3:6c:94:3c:12:35:a1:27:ed:c3:3a:71:e3:68:4e:16:
8b:81:d0:7a:80:73:01:50:11:79:7e:76:13:c9:84:d5:7a:42:
2e:9a:57:f5:b5:1c:3f:97:56:99:69:cf:9b:10:2d:6e:eb:38:
9e:f0:f5:17:77:41:32:56:d7:3b:bd:05:d2:8d:f4:27:85:71:
10:7b:58:34:40:3c:23:a9:88:d2:84:ac:54:4c:2e:ac:23:23:
c9:93:e4:d1:c1:5a:18:c1:d1:60:d3:4f:6b:1d:bc:d4:f5:d5:
4f:25:97:8d:7e:31:ed:56:88:a7:d3:5b:f8:13:be:9c:2c:6c:
bf:46:da:88:0c:74:dc:cb:b8:e4:ba:4e:14:90:63:f9:79:f3:
12:41:8b:de:7b:18:7a:cb:a4:b3:0c:42:21:c5:da:f6:70:5b:
d3:46:a1:9b:8c:4c:61:d9:b2:f7:87:44:37:96:15:3b:98:b4:
36:da:f1:61:42:26:6a:1c:4c:3f:ed:bf:d1:6e:6f:4e:5b:9c:
63:b0:ec:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:47:58 2026 by rpki-client