Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lXJKhdfisk18DGx8Fbs1FiO6OX0.roa
File: lXJKhdfisk18DGx8Fbs1FiO6OX0.roa (raw, json)
Hash identifier: gJMoLJz0PoYntLLJdh4nGrIvGJjl0QNmnsHycYiT4/k=
Subject key identifier: 95:72:4A:85:D7:E2:B2:4D:7C:0C:6C:7C:15:BB:35:16:23:BA:39:7D
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D44CF6E913AED8FFC5F7C2261A5AB211B
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lXJKhdfisk18DGx8Fbs1FiO6OX0.roa
Signing time: Tue 31 Mar 2026 16:52:18 +0000
ROA not before: Tue 31 Mar 2026 16:52:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154317
IP address blocks: 2.27.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:44:cf:6e:91:3a:ed:8f:fc:5f:7c:22:61:a5:ab:21:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 31 16:52:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95724a85d7e2b24d7c0c6c7c15bb351623ba397d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:79:2a:7a:df:84:36:ec:be:3f:43:35:4e:5f:
3e:c3:ee:34:17:0d:f2:e9:8c:dc:b6:35:10:c8:2e:
c6:8a:29:67:f0:8a:9f:ca:40:87:65:93:88:50:d4:
42:01:9d:4e:4e:d5:b8:57:8a:e3:26:bb:a7:b5:4e:
46:60:c7:3c:95:05:71:b0:89:c1:b2:05:96:b8:d4:
a9:29:3a:b2:2d:ec:25:10:6b:b3:fc:ba:3f:73:0e:
b3:4f:cb:6b:6c:c8:85:32:8b:14:93:d6:f2:65:a9:
52:ad:04:86:d3:a9:62:bd:0e:44:2e:eb:ad:8e:e3:
f9:8b:89:7c:08:a2:e7:21:63:80:e6:f3:1a:be:44:
97:b5:f8:af:a1:ea:81:f9:98:4a:83:72:e8:ef:8a:
29:5a:13:b8:78:66:45:47:84:c9:f3:b5:8f:3c:f5:
7c:49:0b:3c:20:77:63:98:f8:d5:d8:a9:1c:e5:37:
d0:59:77:e7:d0:5b:97:1c:4c:c8:a7:3b:3d:c7:c4:
68:19:ec:5c:14:91:3d:d0:4b:ee:5d:e7:f4:0c:4b:
8a:76:1e:2f:0a:49:ff:3c:01:e6:c9:3b:d8:1c:d4:
38:b2:9c:12:6a:c2:33:86:2e:4a:23:58:0f:1b:ee:
3a:1e:e4:77:fc:a7:bb:e0:aa:76:ea:6c:31:c7:93:
0e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:72:4A:85:D7:E2:B2:4D:7C:0C:6C:7C:15:BB:35:16:23:BA:39:7D
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lXJKhdfisk18DGx8Fbs1FiO6OX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.152.0/24
Signature Algorithm: sha256WithRSAEncryption
35:8d:89:f0:22:3a:f9:0a:f4:5e:1b:91:ad:75:ff:ff:fc:d7:
d5:68:68:53:69:c1:31:4f:24:ec:6b:0f:06:6f:9f:fe:b9:5f:
1f:76:d0:8c:d5:c6:58:83:0c:c8:c7:1a:40:1f:7c:ea:9a:4b:
ab:c2:5b:66:d6:cb:31:95:92:72:a4:2e:52:89:47:75:9e:57:
07:c8:87:db:9f:24:4d:9c:aa:ec:2b:62:85:e7:b3:13:53:ef:
0a:6c:dd:2c:81:f3:3f:7e:bc:99:8f:7d:56:27:51:80:ea:03:
ec:23:d6:d9:93:6f:c6:8c:56:1f:c6:c2:4f:ad:34:d0:9c:da:
a8:93:b2:6f:da:cd:1c:38:ab:49:6a:66:d8:0b:9c:2d:9d:26:
74:98:98:f1:e9:80:18:bd:8f:e6:a2:c6:de:ab:70:74:bd:65:
d5:10:c7:c1:a7:e0:23:06:35:1b:e7:13:47:88:f8:de:2a:6f:
d5:cb:28:cd:f5:d1:84:93:6e:84:46:e7:7f:63:59:1e:25:c9:
7e:11:c2:db:71:bc:7f:7b:0a:31:44:e1:ed:71:58:50:62:5f:
11:12:08:7d:a5:d5:c9:7e:24:c7:e4:8b:59:69:6b:34:42:ba:
35:1e:b7:2a:87:62:ed:13:5f:65:3b:17:5e:5f:e9:7c:99:12:
3b:34:aa:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:42:31 2026 by rpki-client