Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/dHhAdm98WwP3Yp8fxbzqqcAm9N8.roa
File: dHhAdm98WwP3Yp8fxbzqqcAm9N8.roa (raw, json)
Hash identifier: NnHhVNb+yZwsA2/H+PivKfhIMNqcYWc9U+/KXYCvSRM=
Subject key identifier: 74:78:40:76:6F:7C:5B:03:F7:62:9F:1F:C5:BC:EA:A9:C0:26:F4:DF
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D6DF9321FF04C0E2E6D99E5146D49FEAE
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/dHhAdm98WwP3Yp8fxbzqqcAm9N8.roa
Signing time: Wed 08 Apr 2026 16:42:21 +0000
ROA not before: Wed 08 Apr 2026 16:42:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207083
IP address blocks: 2.27.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6d:f9:32:1f:f0:4c:0e:2e:6d:99:e5:14:6d:49:fe:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 8 16:42:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=747840766f7c5b03f7629f1fc5bceaa9c026f4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1f:46:aa:d1:b9:d2:6b:db:cb:b6:ef:58:c3:
d6:ee:31:52:aa:c6:61:63:be:16:82:64:7b:d4:37:
92:a9:23:27:5e:e1:f5:3a:df:21:78:4f:96:b4:9d:
28:91:5d:cd:93:d8:04:5e:7c:e5:ce:f8:24:53:5e:
8a:15:0c:10:1e:92:8b:8e:79:ed:53:01:98:c8:14:
42:a5:f2:70:32:ba:53:a8:87:9c:49:43:e5:1c:1c:
8e:b1:78:3f:da:06:54:ec:23:75:88:16:b8:84:74:
71:a6:70:57:6e:1d:9e:b4:9a:e2:21:6b:0c:b2:41:
50:1f:b0:8e:04:f0:76:19:60:29:18:3d:5e:10:ec:
0a:bb:3d:02:ae:20:9d:eb:27:b9:e8:9c:46:ab:1b:
8c:82:5a:5a:d6:af:57:64:c1:1a:5a:24:66:a6:14:
d2:8f:99:71:7e:01:ff:1c:8d:7f:eb:ee:84:c8:74:
6e:a8:45:b7:af:b6:d0:78:a2:27:3e:66:ab:45:89:
e6:7e:25:11:52:bc:cb:fe:e6:9e:1f:8a:c1:cd:46:
48:73:a4:69:83:d4:0f:4f:c7:87:df:c7:7e:f1:61:
4e:de:86:11:b9:01:b4:35:c7:c1:9c:29:5a:48:80:
d0:c9:42:f3:a0:20:63:58:26:f6:ba:43:d0:18:ab:
be:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:78:40:76:6F:7C:5B:03:F7:62:9F:1F:C5:BC:EA:A9:C0:26:F4:DF
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/dHhAdm98WwP3Yp8fxbzqqcAm9N8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.170.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:52:30:a2:c2:d7:d5:a6:8f:8f:f4:4a:cc:6e:63:8f:98:47:
dd:35:f3:35:73:0e:f3:cb:60:3e:3e:cc:bc:74:77:00:7e:b2:
86:ac:c0:be:d2:07:27:27:c8:87:3e:7d:eb:e8:89:6b:91:d5:
67:7f:02:17:d8:23:7e:76:33:2c:0a:bb:0f:ca:77:89:1b:58:
90:8b:6c:fd:fe:c4:96:f0:e4:2e:72:b0:3f:dd:f5:44:8f:c0:
54:a3:b5:24:50:07:88:b0:1d:30:86:07:37:2c:b2:5a:e9:4f:
f9:69:41:c1:d4:f1:8d:6d:12:dc:ea:9b:f5:79:a1:01:15:35:
20:1e:af:66:40:29:2c:5c:95:ee:50:cb:bf:13:fe:56:7a:d6:
0f:b4:5a:9f:5e:af:1c:20:2b:65:9c:3e:41:c0:e9:67:c0:67:
f6:13:22:bc:b1:ae:ac:ee:34:4d:40:34:e8:be:e3:ac:63:f7:
d6:b6:cb:71:14:0e:53:f2:55:6d:db:1d:3c:ae:f3:2d:90:58:
39:91:58:e5:eb:9e:3b:36:4e:09:c4:55:34:d9:b9:e2:69:7d:
b1:cb:80:39:51:3e:5e:c9:99:92:62:bc:52:cf:6f:b1:fd:91:
e1:64:51:9b:ec:cd:69:da:bb:fb:e1:1c:da:10:71:85:ac:8d:
91:24:a9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:21 2026 by rpki-client