Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jyFvDcadVLwt4fQXNYhqEiFBBFs.roa
File: jyFvDcadVLwt4fQXNYhqEiFBBFs.roa (raw, json)
Hash identifier: ZmgFKx0D4l5UCHeHa6hXCIpNsJ4Hl1WFmzj04OOaRkM=
Subject key identifier: 8F:21:6F:0D:C6:9D:54:BC:2D:E1:F4:17:35:88:6A:12:21:41:04:5B
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D8D3DA89371D025CEAF535CFBEF3D3306
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jyFvDcadVLwt4fQXNYhqEiFBBFs.roa
Signing time: Tue 14 Apr 2026 18:25:21 +0000
ROA not before: Tue 14 Apr 2026 18:25:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215287
IP address blocks: 2.27.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8d:3d:a8:93:71:d0:25:ce:af:53:5c:fb:ef:3d:33:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 14 18:25:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f216f0dc69d54bc2de1f41735886a122141045b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e0:eb:14:7d:26:68:bd:63:df:bc:6e:60:7a:
30:e8:4a:53:bd:b4:62:92:67:fc:15:74:6e:36:e4:
58:ef:df:c4:99:73:8f:b1:72:7b:13:cf:21:93:fa:
47:16:97:a5:8d:07:56:c2:9d:9f:ab:3e:fd:dc:a5:
a2:26:83:43:81:79:09:87:6f:3f:3b:a6:9c:84:e9:
61:9c:9e:49:45:e8:6e:bd:c0:1b:f1:f7:36:5b:40:
30:ee:6c:c6:ab:c0:e5:9b:4b:46:8e:f2:4b:4a:2b:
61:3c:2a:b4:43:2b:8f:a6:34:87:e8:49:a9:3c:7c:
17:f9:ad:68:67:5f:2e:e2:67:8c:37:73:a2:37:c4:
ca:16:d3:7f:d8:7a:cc:94:2f:a3:f7:bd:8c:d5:6e:
0f:e7:01:4c:c9:f6:b2:18:91:7b:6f:7e:92:75:9d:
95:ec:8b:a1:0d:3a:fe:25:47:1b:ce:64:f5:6d:7b:
15:40:41:f1:f0:91:56:ec:34:ef:f4:c8:d1:c2:da:
de:29:b6:1b:bc:ea:f2:53:54:c8:93:6f:16:71:8d:
a5:fa:2e:0b:c2:9d:c5:0e:b3:a4:05:5a:fa:69:e8:
0b:af:73:29:7f:ff:8d:bb:de:c4:46:94:52:a6:dc:
5c:a7:c1:a7:b9:00:a7:5e:a8:ca:0c:1a:8f:5f:de:
0b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:21:6F:0D:C6:9D:54:BC:2D:E1:F4:17:35:88:6A:12:21:41:04:5B
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jyFvDcadVLwt4fQXNYhqEiFBBFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.168.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:71:06:85:5b:14:e0:5b:31:0b:96:6a:16:c2:9e:34:b8:cb:
53:17:b3:eb:83:8a:bf:36:f9:f1:64:46:40:1a:05:a2:ec:be:
c2:30:e3:fe:9b:11:14:b6:7c:a2:f9:0a:7f:5f:05:4c:3f:ea:
ab:b4:ed:df:ab:de:02:71:34:64:d0:77:6c:fb:17:f2:42:e3:
d0:3b:3f:aa:43:52:3c:26:a9:8a:fe:0a:09:22:c0:c1:11:f0:
bb:3f:16:38:5a:46:bb:fd:a1:59:2e:31:8c:2f:1a:eb:e2:96:
78:92:a6:ff:7d:95:e8:86:bf:f6:aa:b4:b6:34:b9:1e:73:a7:
b0:00:11:4c:78:98:27:b2:7a:82:cc:1f:f5:17:32:08:29:70:
b9:63:fb:c6:a4:41:c8:06:57:97:2c:71:db:10:a0:b6:06:07:
03:9e:25:e7:94:b1:61:5a:4d:6f:8d:7c:0c:12:a9:e3:00:bd:
52:e7:05:09:54:7f:0a:8e:1f:b9:72:f6:d2:bc:c7:b4:68:8e:
31:6d:f9:43:23:d7:4f:c1:fb:fe:70:af:c6:d1:76:b8:e9:b4:
8f:04:1a:ab:ac:4c:85:ad:31:c9:49:3b:78:38:50:b4:d6:31:
14:69:d4:9b:1a:0b:58:cc:28:d5:94:02:e1:ea:31:e2:3b:c7:
8d:56:92:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:28:09 2026 by rpki-client