Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/cLLlgq0vFY_KpSUNdKmDpS6RQgE.roa
File: cLLlgq0vFY_KpSUNdKmDpS6RQgE.roa (raw, json)
Hash identifier: Jw/3yAWLz9Aeke+gO+WymwbvjKP2gmpW6rK2Wy84EGg=
Subject key identifier: 70:B2:E5:82:AD:2F:15:8F:CA:A5:25:0D:74:A9:83:A5:2E:91:42:01
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F980E817CBEB1587F362A3ABF175D1E3C
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/cLLlgq0vFY_KpSUNdKmDpS6RQgE.roa
Signing time: Sat 25 Jul 2026 06:55:15 +0000
ROA not before: Sat 25 Jul 2026 06:55:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2.27.218.0/23 maxlen: 24
2.27.220.0/23 maxlen: 24
2.27.222.0/23 maxlen: 24
13.143.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:98:0e:81:7c:be:b1:58:7f:36:2a:3a:bf:17:5d:1e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 25 06:55:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70b2e582ad2f158fcaa5250d74a983a52e914201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:ad:39:76:2c:88:9e:13:78:e8:58:fb:f9:
bd:f8:bc:eb:d5:4c:69:d8:98:9b:ca:0e:8e:45:49:
ae:d2:45:f1:a2:12:8d:8d:4a:36:0e:e6:c2:d4:d4:
f6:2d:9d:61:b4:8f:bd:9d:1d:08:54:67:3d:84:e6:
df:cf:f1:a9:7c:a6:7d:2c:ba:2e:8a:82:c2:43:9c:
30:ba:a8:7b:11:a6:02:da:91:89:ba:35:05:4e:28:
11:66:2c:93:e2:b5:75:f9:d8:a1:be:0a:4a:83:f0:
b2:c6:4c:4a:bf:24:50:35:c0:71:01:d3:71:64:5c:
62:ad:a1:56:9b:86:cb:c8:05:95:06:19:d8:84:d1:
69:42:ab:dc:7c:2e:f3:d3:b9:df:c7:98:f9:6f:8d:
23:88:b2:6a:03:5d:c4:2a:d6:c1:e3:8f:c7:6d:9a:
47:2a:08:a0:49:78:f4:85:19:ae:02:77:6e:20:d3:
7e:7b:7f:4e:2e:a7:17:22:9f:d7:d5:ef:b1:32:36:
eb:41:36:bb:03:d9:f6:04:ca:2e:0e:6d:95:c5:43:
1d:11:51:ec:b6:68:2e:16:ca:3b:ce:a7:d0:61:f6:
6b:40:eb:01:41:89:e9:07:12:dd:d3:d4:8f:98:79:
41:6a:18:aa:69:fd:bd:6f:6f:a7:77:f3:db:e1:ee:
24:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B2:E5:82:AD:2F:15:8F:CA:A5:25:0D:74:A9:83:A5:2E:91:42:01
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/cLLlgq0vFY_KpSUNdKmDpS6RQgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.218.0-2.27.223.255
13.143.208.0/24
Signature Algorithm: sha256WithRSAEncryption
58:c6:46:80:fa:47:2e:45:72:05:3e:06:3c:a8:22:19:f9:0c:
d9:05:88:ca:5c:32:52:0a:d2:b2:b2:d4:85:15:94:c4:e6:16:
d3:8c:09:31:17:cf:93:bb:4a:c5:b9:91:55:2d:52:a9:8a:90:
cd:26:68:94:05:16:56:1e:c6:19:9d:72:27:60:ff:c7:32:c4:
25:82:e2:30:86:a9:32:83:18:b4:03:46:02:dc:7d:3a:11:27:
b5:eb:b5:12:d9:c2:60:7a:eb:98:3a:07:53:4e:ce:4e:c7:12:
f7:7f:dc:42:9d:a1:ba:ea:af:3d:9f:af:2a:58:67:43:73:f8:
76:55:4c:d6:d0:9a:a0:76:83:ef:d0:74:92:86:19:1d:17:a4:
bf:15:4e:91:10:86:92:3f:eb:ad:b9:7f:37:7d:2a:e3:cc:b7:
fb:c1:25:db:d5:29:84:21:a9:e9:09:61:b8:e0:5d:ee:36:ac:
1a:18:e3:87:0b:a9:66:c5:43:8c:8a:d1:39:a3:c1:59:2b:31:
36:d4:a5:f6:de:a2:4c:1d:96:ee:72:37:e2:bb:c1:f2:db:c4:
d3:84:26:4a:5a:cb:b6:44:16:6b:ad:24:3b:e7:b9:3c:21:9a:
9c:a3:42:1d:8a:0f:f2:80:f0:3e:2e:21:5d:9a:fc:4d:6c:3c:
34:97:e9:af
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:36:56 2026 by rpki-client