Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/t5iAVWpKhhAadY9gpjsN0S2aENs.roa
File: t5iAVWpKhhAadY9gpjsN0S2aENs.roa (raw, json)
Hash identifier: ZAqZ3aa4sl/ljv6L1NFVb0QJehrXJCJZXR/GwtOZCb8=
Subject key identifier: B7:98:80:55:6A:4A:86:10:1A:75:8F:60:A6:3B:0D:D1:2D:9A:10:DB
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F9AB1415DF7167374BEC15D2C08420A37
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/t5iAVWpKhhAadY9gpjsN0S2aENs.roa
Signing time: Sat 25 Jul 2026 19:12:15 +0000
ROA not before: Sat 25 Jul 2026 19:12:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 2.27.98.0/24 maxlen: 24
2.27.247.0/24 maxlen: 24
31.77.100.0/24 maxlen: 24
31.77.106.0/24 maxlen: 24
31.77.217.0/24 maxlen: 24
193.23.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9a:b1:41:5d:f7:16:73:74:be:c1:5d:2c:08:42:0a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 25 19:12:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b79880556a4a86101a758f60a63b0dd12d9a10db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:97:ae:6b:03:b6:96:74:81:23:93:26:db:61:
a6:73:4b:a4:47:1e:12:13:38:48:f9:ee:eb:d8:2e:
d4:5c:23:1d:ad:5d:e0:f0:e1:b2:6d:b1:0e:c5:ab:
10:00:81:b9:49:76:3d:f1:f0:ae:aa:8a:2b:e5:63:
c6:de:ae:12:74:15:51:87:70:fb:bd:48:87:08:76:
d5:e6:b8:15:42:2b:72:5a:95:8e:76:f5:50:b8:9a:
94:f3:28:13:06:e5:0b:47:77:47:7f:70:c2:39:09:
8a:48:5b:27:a5:5f:d6:0c:29:6c:25:2b:e6:52:cf:
b0:ce:8f:ca:66:ec:9c:db:65:b5:32:86:b4:22:93:
53:63:9f:7e:30:0b:0e:f9:d0:fc:79:6b:1d:24:b5:
7e:f0:dc:a9:db:58:9a:6d:b8:51:65:47:6b:68:3a:
83:5a:63:28:44:4b:c8:c1:cf:25:5e:00:d1:c8:c9:
3d:01:aa:7d:60:39:32:5b:f1:1c:8c:0f:f0:5b:ca:
c0:19:70:79:b8:5a:e5:8a:7b:0d:17:34:ef:68:4c:
3d:c6:75:1e:79:bf:51:14:0f:97:5f:30:60:04:62:
7d:d7:ff:aa:23:8b:c9:36:30:6e:79:33:92:23:fc:
59:e5:29:0b:b3:2c:43:b8:3d:7a:b1:28:10:03:1c:
c5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:98:80:55:6A:4A:86:10:1A:75:8F:60:A6:3B:0D:D1:2D:9A:10:DB
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/t5iAVWpKhhAadY9gpjsN0S2aENs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.98.0/24
2.27.247.0/24
31.77.100.0/24
31.77.106.0/24
31.77.217.0/24
193.23.217.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:3d:cf:df:e2:a8:00:57:a0:63:39:1e:13:47:3d:81:e3:5e:
7f:84:e6:84:a5:fe:b8:14:e1:a2:d2:f9:46:d5:ff:a5:75:e7:
aa:41:bd:b4:cd:a0:e3:ed:5f:11:7d:72:50:1b:a0:e1:1e:f7:
a1:82:4e:6a:5a:d3:6e:72:2f:05:cb:0e:2b:9a:c4:c4:e0:c8:
69:7f:83:3a:87:2e:2e:00:90:b0:ef:77:5d:56:00:23:18:81:
a6:43:62:48:cd:2f:71:09:a5:a6:40:28:c9:9e:fe:cd:d5:0d:
5f:11:8c:d7:55:2a:8b:7b:37:0c:80:30:c9:2b:04:c9:f9:d9:
32:06:25:24:fc:47:3f:02:80:f8:fe:23:ee:96:de:55:c5:23:
2f:5d:d9:17:29:f7:1b:22:16:79:98:68:74:d2:22:d4:64:74:
bd:1e:55:85:60:4a:b2:3a:d6:a7:fa:da:94:f1:b2:21:1c:3c:
1b:52:ce:a5:a9:e1:72:d2:7e:2d:eb:4a:d8:e9:17:22:94:fe:
35:60:bc:62:59:52:c0:92:57:40:7a:0d:93:a1:7e:7f:ca:a8:
08:51:17:bb:cc:86:b9:2d:d0:12:6e:05:96:c8:23:4a:8f:fb:
f2:9f:22:a5:0f:be:8c:ff:6c:fd:a2:58:45:f9:e5:91:af:fc:
39:ed:ba:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:01:34 2026 by rpki-client