Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/k7Q5UJpZippEcMj6QRiXGX-2xeo.roa
File: k7Q5UJpZippEcMj6QRiXGX-2xeo.roa (raw, json)
Hash identifier: Hu8YyWYG3tpJ+KLS/jKTt2A7n0vGWAkQABVIrfH7wJY=
Subject key identifier: 93:B4:39:50:9A:59:8A:9A:44:70:C8:FA:41:18:97:19:7F:B6:C5:EA
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D787BED4D4A1C7408063968D57DA4C9F3
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/k7Q5UJpZippEcMj6QRiXGX-2xeo.roa
Signing time: Fri 10 Apr 2026 17:41:20 +0000
ROA not before: Fri 10 Apr 2026 17:41:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34202
IP address blocks: 2.27.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:78:7b:ed:4d:4a:1c:74:08:06:39:68:d5:7d:a4:c9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 10 17:41:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93b439509a598a9a4470c8fa411897197fb6c5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3a:17:11:00:1c:9b:b4:4e:6e:a7:30:75:1e:
14:83:01:77:f8:e5:eb:b4:9f:7f:1f:64:52:1f:ea:
42:86:a4:e9:1e:43:36:15:3e:8e:80:99:b4:95:c4:
50:a6:af:99:68:d0:6f:dc:9d:e4:3b:13:08:cc:43:
d7:d9:5c:19:62:a5:89:2e:49:d6:d7:74:ce:43:d8:
4f:32:64:4d:6b:36:6f:83:71:fe:a6:eb:d5:81:56:
a6:5a:d5:23:26:81:dc:47:e3:90:26:66:83:b8:be:
8d:aa:76:e0:b2:fc:2e:20:99:21:7c:fd:d5:4d:8e:
cc:68:e0:75:e2:03:f4:a7:12:ff:bb:3a:42:2b:64:
03:45:81:c2:4d:66:58:16:19:22:1d:f5:81:8e:70:
bc:b9:e0:ff:ff:19:58:ab:c4:96:d7:a7:58:5c:16:
a1:ec:7e:f3:85:34:e9:f5:38:00:72:87:ce:ae:54:
55:a1:e6:41:86:46:d6:c3:e2:52:f3:2b:12:6c:21:
f9:5a:25:e9:0b:cd:3b:10:27:92:a4:aa:e3:a7:07:
d1:6f:3a:82:b7:9d:1f:3f:9e:d8:a1:67:cf:b9:47:
3a:ea:b5:14:62:fa:f6:d4:6c:c8:dd:ca:19:e6:ac:
ef:0f:6f:bb:ae:3f:7a:ad:dd:e7:ae:01:8a:1c:81:
de:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B4:39:50:9A:59:8A:9A:44:70:C8:FA:41:18:97:19:7F:B6:C5:EA
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/k7Q5UJpZippEcMj6QRiXGX-2xeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.114.0/24
Signature Algorithm: sha256WithRSAEncryption
88:0c:38:40:8e:a3:15:7e:ce:db:04:37:fb:4c:21:25:8e:b0:
36:07:c3:2e:ee:83:dc:ab:0e:cf:af:c2:dc:da:1b:d5:75:84:
29:2d:c8:c1:14:ff:7f:54:0f:25:f7:2f:3b:50:16:b5:f7:e7:
76:b5:6f:af:52:e1:64:e8:b3:ed:b1:66:93:17:7e:62:ee:78:
05:c8:1b:dc:63:05:a6:07:4f:75:07:94:88:ba:70:62:c3:d7:
67:fb:50:e9:5a:de:6d:2d:29:9e:f3:bd:4a:cc:e7:a2:e3:ef:
8f:5a:02:f4:1d:9a:ae:6c:ae:47:dc:af:a6:b6:dc:25:0a:71:
95:70:f1:ca:e6:c6:ba:5f:71:38:4c:19:2f:10:b1:b3:58:69:
91:19:b9:57:03:0e:be:6a:f5:2c:83:05:e9:1f:fe:9f:c5:0d:
2f:2b:f6:30:27:af:2e:78:3c:63:27:8b:c2:aa:94:16:d2:8a:
b1:0b:22:2f:74:96:dc:15:76:1e:a5:97:96:8b:6a:f2:5c:bf:
a5:0c:5a:eb:cb:b6:de:9d:5e:a1:ae:53:34:45:3b:9f:36:9b:
6e:c2:e5:49:d8:fe:85:3f:1e:02:39:4f:5d:ea:7d:66:b9:b0:
7f:21:69:11:4b:8c:3e:9a:d1:f0:c4:1a:58:bc:6a:eb:27:f1:
6d:e7:e0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:06 2026 by rpki-client