Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/pPjR52boD_Vpw0XInU9KEATDq-Q.roa
File: pPjR52boD_Vpw0XInU9KEATDq-Q.roa (raw, json)
Hash identifier: /Gzn0gX0oBDTxFM5Pt+ZHG9GcsUMUj4aF4MGfe4xjxI=
Subject key identifier: A4:F8:D1:E7:66:E8:0F:F5:69:C3:45:C8:9D:4F:4A:10:04:C3:AB:E4
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F980E811153639F3D43BAEF7FD5FD13A4
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/pPjR52boD_Vpw0XInU9KEATDq-Q.roa
Signing time: Sat 25 Jul 2026 06:55:15 +0000
ROA not before: Sat 25 Jul 2026 06:55:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 2.27.218.0/23 maxlen: 24
2.27.220.0/23 maxlen: 24
2.27.222.0/23 maxlen: 24
13.143.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:98:0e:81:11:53:63:9f:3d:43:ba:ef:7f:d5:fd:13:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 25 06:55:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4f8d1e766e80ff569c345c89d4f4a1004c3abe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4a:fb:88:03:80:cf:36:22:03:eb:4b:41:a2:
17:a6:39:f1:0e:bd:b2:02:04:38:cd:2f:f6:8d:09:
b0:12:cc:37:04:18:17:6d:07:05:3b:90:af:c4:47:
83:20:55:5f:65:4f:2e:ca:58:8b:3c:b3:d7:35:2f:
aa:da:c5:cb:6d:71:7a:2c:92:63:03:c2:47:ce:20:
c2:e3:83:78:0c:26:86:46:f6:4d:5c:e7:56:1c:de:
64:a3:38:ad:d9:78:3c:f9:95:23:47:d4:4f:a1:5a:
55:62:5a:f0:12:8f:cc:43:20:59:c9:8f:9f:f5:94:
f4:21:a3:df:3c:3e:0d:36:e0:41:f1:4e:96:aa:c3:
ba:8a:6f:38:3b:59:fe:70:a0:af:33:c4:1c:2f:ed:
0c:2e:8f:b6:1e:61:61:15:5b:90:08:b2:91:25:d8:
ec:c0:a5:b4:e5:97:98:51:d6:cc:62:87:fa:ac:60:
80:db:fd:10:f8:35:96:8a:6c:fd:5d:b5:e3:e2:3a:
b1:4c:26:96:b0:f5:a9:9f:8d:cd:04:61:23:d9:b7:
75:e1:35:2a:0f:e6:ec:51:00:fa:6f:de:de:8e:f0:
2b:e1:a0:ea:92:20:aa:93:f5:51:07:d9:c3:00:e4:
8d:23:db:28:e4:a6:81:2b:46:c9:cf:05:71:06:bb:
30:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F8:D1:E7:66:E8:0F:F5:69:C3:45:C8:9D:4F:4A:10:04:C3:AB:E4
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/pPjR52boD_Vpw0XInU9KEATDq-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.218.0-2.27.223.255
13.143.208.0/24
Signature Algorithm: sha256WithRSAEncryption
92:25:e3:52:35:5f:d9:b4:d5:79:74:a7:e8:1d:4f:6e:77:42:
6e:8f:c0:92:89:a1:3b:f8:f5:60:a6:2f:6c:23:95:52:cb:c8:
21:54:33:c5:e1:db:fd:3f:f0:3e:36:7e:ce:ff:47:a4:80:9b:
79:a8:cc:b5:a7:07:47:eb:fc:c4:43:28:5b:6b:f9:ab:fd:9d:
2a:c9:b9:c9:75:29:4a:e2:40:30:ea:70:6e:43:73:27:1b:7d:
5e:d8:db:f5:60:61:4d:a9:21:b9:e3:bf:66:1a:fb:3c:45:9c:
ac:80:00:cf:6f:9b:28:f3:45:07:a7:77:05:6d:e9:cb:2e:9a:
8b:b2:2d:6e:09:55:c4:28:b9:b4:19:b9:57:38:ed:65:bc:8e:
e1:63:38:db:93:8a:f8:a4:73:4a:11:bd:df:e9:a7:61:e7:2d:
fb:89:3c:a1:19:2e:51:c3:9b:3b:ee:5b:4f:7c:5e:cd:0b:e6:
3b:90:41:d5:4d:03:68:06:bb:54:c3:bf:6c:f3:b9:94:9c:c6:
31:87:5c:eb:e3:c1:a2:68:92:54:bc:b0:71:66:21:42:99:f0:
71:00:6b:f1:2d:e6:3e:60:b6:5c:11:66:93:51:b4:e3:e8:e4:
8c:9a:e3:98:60:9a:85:1a:23:e3:26:74:89:7c:0c:de:d9:ac:
bc:a1:17:d2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:14:17 2026 by rpki-client