Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lhYWidweaU4Bq6_oSzhOSSSPj9U.roa
File: lhYWidweaU4Bq6_oSzhOSSSPj9U.roa (raw, json)
Hash identifier: nVu7M1m8k1Ns9T70iy7ueTVe202CxYs5RxW69H+PgLM=
Subject key identifier: 96:16:16:89:DC:1E:69:4E:01:AB:AF:E8:4B:38:4E:49:24:8F:8F:D5
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D4129982EE7F7472DBA5CC72227A0F204
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lhYWidweaU4Bq6_oSzhOSSSPj9U.roa
Signing time: Mon 30 Mar 2026 23:52:18 +0000
ROA not before: Mon 30 Mar 2026 23:52:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207043
IP address blocks: 2.27.160.0/24 maxlen: 24
2.27.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:41:29:98:2e:e7:f7:47:2d:ba:5c:c7:22:27:a0:f2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 30 23:52:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96161689dc1e694e01abafe84b384e49248f8fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8b:b2:06:c3:93:71:80:cf:83:a7:1e:75:34:
cf:23:58:7f:97:c7:87:a3:df:4d:b2:b0:c5:85:7c:
f4:53:7b:66:e6:95:56:7a:3a:00:12:11:a5:a4:22:
df:39:a4:b0:d3:cd:02:e6:7c:5f:0b:92:23:c6:f3:
e1:13:37:5c:16:a3:71:e6:3b:e8:c9:c1:6b:5f:e0:
94:2b:fa:87:82:52:52:e1:e0:b3:17:df:c8:81:98:
43:72:cf:18:20:e5:07:57:c8:27:cc:62:09:95:2b:
9b:c4:99:b5:8c:26:a7:c8:a5:85:4d:32:57:2b:5c:
e6:14:25:29:ef:2c:8c:d4:97:ec:b3:85:d0:77:0f:
b8:0b:0a:c6:f2:d8:62:06:33:4f:1b:6a:7c:d4:d5:
c3:52:7f:1a:23:3f:fe:76:f4:7c:b1:8c:e2:a9:2a:
86:16:e2:e2:4b:d1:ad:f6:61:a4:bb:11:0a:96:f3:
7c:1e:e7:1a:cb:02:b4:0c:8e:79:4c:99:ba:62:94:
90:3b:9a:b2:c6:2a:a7:d4:81:7f:7f:ea:a5:1b:6d:
c4:84:e0:22:ba:0d:10:d7:f2:4f:1d:5c:98:08:81:
2d:9a:ae:48:64:a6:94:2b:29:ba:13:44:3d:74:10:
9f:64:82:b1:d2:aa:9f:88:0d:b9:61:68:7a:48:c0:
68:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:16:16:89:DC:1E:69:4E:01:AB:AF:E8:4B:38:4E:49:24:8F:8F:D5
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lhYWidweaU4Bq6_oSzhOSSSPj9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.160.0/24
2.27.248.0/24
Signature Algorithm: sha256WithRSAEncryption
41:32:0a:63:a9:ee:6e:5a:7f:0e:8c:83:fd:39:32:b5:24:88:
78:cb:ef:ad:3b:4c:ec:05:d9:a8:19:b2:0a:3d:83:92:42:ce:
8f:67:6a:bf:b7:0f:07:aa:65:33:10:cb:2d:1d:62:05:75:ae:
c7:c2:db:6c:46:fe:c2:22:f3:e2:80:f0:e1:4c:7c:ba:e0:f2:
54:a6:b8:9e:5e:92:8d:f5:6a:58:cb:64:79:7e:00:5a:56:d8:
69:54:03:4f:c4:50:3a:54:e5:f0:b0:be:7e:28:a0:6e:32:d3:
09:b1:9c:d6:42:4e:47:e8:78:90:78:4d:c8:68:4d:18:95:31:
c9:b9:4f:a3:d1:e4:43:0a:a9:75:a0:51:69:55:bd:70:49:4e:
d0:8c:51:aa:ce:01:98:e3:92:a8:e9:dc:94:c2:13:d9:78:95:
d8:81:e8:b0:06:80:f1:3c:43:b1:a9:bb:73:f6:1b:73:d9:99:
69:86:bb:eb:28:8e:39:d3:1b:e7:15:b1:f6:fa:2c:62:be:18:
e6:dc:85:a4:98:03:ef:6c:3a:69:3b:96:77:ba:ba:fa:e9:e7:
34:15:80:88:36:b5:73:2c:1c:3f:f7:4c:02:cf:64:0d:7e:c1:
29:52:c7:be:f8:3e:07:62:cf:67:4b:4d:d9:53:62:ff:cc:70:
60:50:be:4c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ1BKZgu5/dHLbpcxyInoPIEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwMzMwMjM1MjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjE2MTY4OWRjMWU2OTRlMDFhYmFmZTg0YjM4NGU0OTI0OGY4ZmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ouyBsOTcYDPg6cedTTPI1h/l8eH
o99NsrDFhXz0U3tm5pVWejoAEhGlpCLfOaSw080C5nxfC5IjxvPhEzdcFqNx5jvo
ycFrX+CUK/qHglJS4eCzF9/IgZhDcs8YIOUHV8gnzGIJlSubxJm1jCanyKWFTTJX
K1zmFCUp7yyM1Jfss4XQdw+4CwrG8thiBjNPG2p81NXDUn8aIz/+dvR8sYziqSqG
FuLiS9Gt9mGkuxEKlvN8HucaywK0DI55TJm6YpSQO5qyxiqn1IF/f+qlG23EhOAi
ug0Q1/JPHVyYCIEtmq5IZKaUKym6E0Q9dBCfZIKx0qqfiA25YWh6SMBo/QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJYWFoncHmlOAauv6Es4Tkkkj4/VMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvbGhZV2lkd2VhVTRCcTZfb1N6aE9TU1NQajlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAhugAwQA
Ahv4MA0GCSqGSIb3DQEBCwUAA4IBAQBBMgpjqe5uWn8OjIP9OTK1JIh4y++tO0zs
BdmoGbIKPYOSQs6PZ2q/tw8HqmUzEMstHWIFda7HwttsRv7CIvPigPDhTHy64PJU
prieXpKN9WpYy2R5fgBaVthpVANPxFA6VOXwsL5+KKBuMtMJsZzWQk5H6HiQeE3I
aE0YlTHJuU+j0eRDCql1oFFpVb1wSU7QjFGqzgGY45Ko6dyUwhPZeJXYgeiwBoDx
PEOxqbtz9htz2ZlphrvrKI450xvnFbH2+ixivhjm3IWkmAPvbDppO5Z3urr66ec0
FYCINrVzLBw/90wCz2QNfsEpUse++D4HYs9nS03ZU2L/zHBgUL5M
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:58:28 2026 by rpki-client