Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/nYiVUoxfjwwYvpvaYaRK07VVj4k.roa
File: nYiVUoxfjwwYvpvaYaRK07VVj4k.roa (raw, json)
Hash identifier: qpp/HRBbFGpjrtfmOkRPKArvg3V14sD/tp0KTvRYIlo=
Subject key identifier: 9D:88:95:52:8C:5F:8F:0C:18:BE:9B:DA:61:A4:4A:D3:B5:55:8F:89
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D7E32077EA68FA935E2322A991CA6E567
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/nYiVUoxfjwwYvpvaYaRK07VVj4k.roa
Signing time: Sat 11 Apr 2026 20:18:21 +0000
ROA not before: Sat 11 Apr 2026 20:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137897
IP address blocks: 2.27.134.0/23 maxlen: 24
144.31.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:7e:32:07:7e:a6:8f:a9:35:e2:32:2a:99:1c:a6:e5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 11 20:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d8895528c5f8f0c18be9bda61a44ad3b5558f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:73:7b:3f:01:97:42:f6:3a:8d:6a:de:fc:ca:
14:09:70:b2:1e:63:6b:d0:19:8e:b4:56:d6:fe:27:
12:11:4a:10:21:af:db:07:2d:56:dd:44:b6:e9:1d:
91:cd:a9:df:14:72:e9:13:81:46:89:36:06:4d:f5:
58:08:d8:be:8e:79:2c:cd:08:3c:cc:85:b9:fd:af:
62:fb:e5:04:da:23:87:a6:9a:d3:89:74:bf:14:8c:
48:5a:06:79:52:4b:7c:4f:bd:49:e7:5c:4f:43:2b:
7c:a7:a0:11:7e:8c:b7:f6:52:18:5e:e3:1b:49:ec:
51:41:d6:24:7b:5b:c1:98:90:80:c0:0d:67:2a:af:
6b:f3:b6:18:31:44:aa:7d:1e:29:f8:20:cb:53:24:
54:86:2b:36:f1:a4:aa:6e:20:61:d8:35:c1:5c:9b:
42:a8:c7:14:85:2d:c1:ea:e9:e4:6c:22:5d:e1:ee:
62:2f:2a:5b:a4:1b:e1:58:fd:73:c2:24:bf:fa:e0:
d7:b4:f6:97:94:2a:dc:00:db:11:97:4b:f4:6c:91:
59:48:83:33:2e:2e:cf:dd:4d:0f:1a:48:e9:db:97:
14:af:12:fe:36:cc:2c:46:73:05:fb:3a:36:33:e7:
27:3a:c4:23:c4:be:c1:07:fe:2b:fc:8c:96:14:b2:
bd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:88:95:52:8C:5F:8F:0C:18:BE:9B:DA:61:A4:4A:D3:B5:55:8F:89
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/nYiVUoxfjwwYvpvaYaRK07VVj4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.134.0/23
144.31.45.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:bd:b2:e4:0e:31:0d:c0:42:3c:36:dd:19:42:6b:a6:9a:5a:
0c:2a:0b:81:38:a9:b4:fb:f9:ae:91:15:16:b2:cc:a3:6d:43:
3c:cf:ab:13:59:41:ba:8f:6e:f1:2c:59:86:6f:c9:fe:b5:6b:
05:6a:b0:56:04:ee:c6:83:3f:f4:79:a6:0d:1d:9a:be:d4:e8:
a5:b3:17:68:5a:be:c9:f8:74:ef:e0:98:eb:76:e5:b5:75:e0:
b4:5f:96:43:93:57:d3:3a:ce:7d:d3:4a:42:33:fc:e6:1f:c0:
1e:ba:e6:7c:8d:81:40:81:71:91:fb:9f:64:f0:69:42:75:df:
b8:f5:5b:3e:ce:a4:81:b5:da:23:96:a8:8d:80:9d:bd:0f:59:
3b:17:2f:55:f0:a2:67:95:fa:6d:38:69:40:61:dc:84:6f:cb:
08:0f:78:66:a7:83:60:6d:6e:c7:46:03:e7:e4:8e:bd:fd:39:
a5:6f:39:b4:0a:00:f3:89:d1:1e:b7:59:b6:0a:04:bd:ac:4a:
5d:59:9a:86:2d:00:f3:63:1e:82:9c:2b:82:bb:a4:7d:20:48:
64:f2:db:7f:f5:ea:35:c4:2f:6e:77:b5:a5:24:d9:15:99:b3:
9f:19:a1:8c:cb:ea:77:b4:29:79:f1:0a:c9:a0:17:5e:7d:4e:
1e:6f:c3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:21:13 2026 by rpki-client