Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/osqN2YcvBYECfPeZZx-LvqUpFeg.roa
File: osqN2YcvBYECfPeZZx-LvqUpFeg.roa (raw, json)
Hash identifier: wnhakYFMEFqX+gS/98fmJUk3D4jAewsAwm1kNB5RzpI=
Subject key identifier: A2:CA:8D:D9:87:2F:05:81:02:7C:F7:99:67:1F:8B:BE:A5:29:15:E8
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019EB31D2628BBF3D23A5E5021FE123A091B
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/osqN2YcvBYECfPeZZx-LvqUpFeg.roa
Signing time: Wed 10 Jun 2026 19:58:12 +0000
ROA not before: Wed 10 Jun 2026 19:58:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207513
IP address blocks: 2.27.57.0/24 maxlen: 24
144.31.13.0/24 maxlen: 24
144.31.29.0/24 maxlen: 24
144.31.91.0/24 maxlen: 24
144.31.92.0/24 maxlen: 24
144.31.100.0/24 maxlen: 24
144.31.101.0/24 maxlen: 24
144.31.102.0/24 maxlen: 24
144.31.111.0/24 maxlen: 24
144.31.112.0/24 maxlen: 24
144.31.113.0/24 maxlen: 24
144.31.144.0/24 maxlen: 24
144.31.248.0/24 maxlen: 24
150.241.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b3:1d:26:28:bb:f3:d2:3a:5e:50:21:fe:12:3a:09:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 10 19:58:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2ca8dd9872f0581027cf799671f8bbea52915e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:58:21:82:d7:be:64:97:98:ed:27:91:ad:4b:
5c:ad:11:07:88:73:27:3a:80:8c:44:28:89:9e:37:
76:62:ff:e9:57:92:c1:f0:fd:87:22:d1:aa:30:af:
d0:71:07:de:f5:26:e0:da:f4:ad:fe:27:10:b1:7f:
39:ad:b4:21:65:eb:d0:8b:d3:8a:31:06:8c:9c:37:
48:72:1b:4d:78:1d:9a:2b:77:63:01:59:01:82:08:
69:5a:4b:66:5f:4f:5c:ab:34:09:c8:71:0d:e0:d9:
28:b0:b0:7a:a4:86:25:30:ef:1b:48:4a:d2:7d:69:
f8:62:64:ef:50:3c:9d:a0:60:6d:83:4e:60:09:c2:
3c:d6:03:f6:27:e6:fd:eb:86:d3:25:05:0c:67:97:
74:4e:06:ea:da:a5:79:a9:7e:fe:f4:1e:7a:7f:4b:
c0:55:1d:da:29:a8:ea:d0:cf:02:43:99:87:a7:d2:
93:36:25:0f:cc:e5:af:fc:20:7b:28:81:04:01:22:
2b:d0:78:f5:4e:39:7a:ad:08:db:ec:1b:36:0e:0b:
8e:ae:38:5e:31:e0:ae:88:02:67:ba:77:63:f7:e9:
17:2b:ed:cc:e2:04:a2:f6:91:c0:b5:10:c2:74:bc:
46:6e:29:20:1c:e9:cb:da:7f:e0:ff:02:28:4c:1d:
60:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CA:8D:D9:87:2F:05:81:02:7C:F7:99:67:1F:8B:BE:A5:29:15:E8
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/osqN2YcvBYECfPeZZx-LvqUpFeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.57.0/24
144.31.13.0/24
144.31.29.0/24
144.31.91.0-144.31.92.255
144.31.100.0-144.31.102.255
144.31.111.0-144.31.113.255
144.31.144.0/24
144.31.248.0/24
150.241.80.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:de:48:22:f3:18:d5:ec:86:2e:1d:ee:d1:e2:be:66:26:b6:
82:40:c5:33:fd:a6:0b:da:fd:f6:e2:74:6a:96:7c:10:85:4a:
20:ef:b6:01:f0:a5:cc:1b:10:23:df:f1:6d:63:a5:89:af:21:
c4:c1:ae:e5:4f:f0:a0:3b:6c:92:86:a0:b7:ab:c6:f1:68:a5:
3d:ff:84:5a:ff:e7:52:9a:06:fa:24:d3:59:b0:96:de:2b:f8:
f6:59:12:50:71:e2:d3:59:d6:cd:6e:4e:2d:7e:c0:c8:c6:a5:
1f:8c:87:d9:a6:bf:bc:72:a0:cc:2d:6e:da:8f:b3:17:10:cc:
30:8f:0c:bc:11:47:76:0e:ce:15:d7:3b:b9:ef:1e:3d:34:09:
cc:0c:ab:06:dd:9f:93:2c:a7:41:b5:af:c5:ef:32:7a:55:af:
65:3b:5b:18:38:08:46:49:a5:b4:1f:5a:d6:77:59:38:8a:1c:
a8:07:ed:2e:45:6d:b5:16:8b:9f:2e:6f:c3:bd:dd:df:82:ea:
62:f6:49:7c:e9:af:20:6a:38:84:9f:09:fe:60:d7:67:ec:c9:
39:dc:3a:07:a0:92:2a:99:e3:41:8e:a3:9e:ee:7f:52:d3:c1:
7c:07:c4:22:90:e5:d0:ed:04:19:2e:e2:18:bf:60:96:0d:ad:
3c:96:18:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:24 2026 by rpki-client