Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/uGEFRbLX--Xz5p6r0cQt5dScmrs.roa
File: uGEFRbLX--Xz5p6r0cQt5dScmrs.roa (raw, json)
Hash identifier: 78FgJVDEZjEFDk95CsURf07yJBf0TCpaYt4JejTtzZs=
Subject key identifier: B8:61:05:45:B2:D7:FB:E5:F3:E6:9E:AB:D1:C4:2D:E5:D4:9C:9A:BB
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D4498811D39D41DCDE5DC2C88672AD79E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/uGEFRbLX--Xz5p6r0cQt5dScmrs.roa
Signing time: Tue 31 Mar 2026 15:52:18 +0000
ROA not before: Tue 31 Mar 2026 15:52:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 2.27.86.0/24 maxlen: 24
2.27.127.0/24 maxlen: 24
144.31.55.0/24 maxlen: 24
144.31.56.0/24 maxlen: 24
144.31.58.0/24 maxlen: 24
144.31.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:44:98:81:1d:39:d4:1d:cd:e5:dc:2c:88:67:2a:d7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 31 15:52:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8610545b2d7fbe5f3e69eabd1c42de5d49c9abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7f:9d:2f:35:77:51:65:1a:66:8e:83:8d:16:
b3:70:34:e6:14:2c:5e:1e:49:6c:1e:93:85:5d:8c:
9a:a7:a5:ec:3d:6e:ed:74:dc:e3:6c:bf:cb:40:82:
6b:2e:4f:8b:ab:80:12:63:a2:54:a0:a5:39:67:a2:
d1:3d:cd:b8:3a:4b:bb:dd:d0:8b:5c:83:55:d9:69:
da:3c:83:16:4a:93:83:da:78:a9:9a:6a:7f:8f:15:
2e:77:ac:f6:30:39:d3:35:bc:1f:a5:43:c9:9b:6d:
bb:38:b9:47:4c:97:fb:ca:b8:23:06:03:38:14:12:
be:c4:12:68:7c:7c:0e:c7:3a:1e:8c:c5:86:3d:21:
aa:db:1f:78:13:42:33:32:f4:2a:37:43:97:ad:23:
4e:f9:75:8f:99:d8:1a:69:66:c3:27:27:0c:a6:f1:
e6:38:46:2a:65:dd:97:a3:f1:90:1a:b0:0c:6d:ec:
da:b6:6a:82:d8:ab:f2:84:47:85:2b:58:9a:54:26:
ef:a4:a1:a8:67:2e:5b:92:a3:a7:f9:e0:e8:4b:59:
c0:3c:ff:1d:71:95:5b:19:ec:92:c3:69:1c:e8:38:
e6:3e:2d:ff:b4:fb:61:fb:db:f4:35:be:67:0b:df:
d8:1c:fd:5c:97:67:ba:f2:39:01:92:18:c2:27:86:
74:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:61:05:45:B2:D7:FB:E5:F3:E6:9E:AB:D1:C4:2D:E5:D4:9C:9A:BB
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/uGEFRbLX--Xz5p6r0cQt5dScmrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.86.0/24
2.27.127.0/24
144.31.55.0-144.31.56.255
144.31.58.0/24
144.31.60.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:b5:f1:e2:fd:87:fc:0a:8d:26:f1:43:18:19:a4:09:59:82:
cf:54:5e:63:18:70:64:12:43:f4:90:09:8d:de:5f:53:cb:d6:
c4:f4:42:91:d4:30:da:3e:7a:5a:f2:ce:c5:d7:11:ab:72:cd:
35:60:47:99:68:2c:63:9c:e3:65:2a:90:6f:53:d8:f5:0b:94:
11:94:3f:f5:99:6e:9b:16:6c:f5:1e:2a:6d:ed:ef:37:84:47:
03:60:cd:c5:0d:bf:8f:a4:ec:ac:31:1f:af:ae:65:93:82:05:
f2:69:34:84:09:58:00:e5:86:b1:c2:26:cc:b6:14:d5:ed:80:
bd:da:dd:ea:a9:e4:bf:a9:95:ce:98:26:a4:b7:62:bb:e2:bc:
dc:be:ca:a0:d7:99:51:da:b8:7c:bf:5b:f1:3d:6d:ff:a3:f3:
99:36:c0:9a:87:c2:16:85:0c:14:85:ce:fd:5c:37:e4:5e:1f:
34:78:4e:33:9e:58:23:e6:81:c5:7c:7d:c3:3c:98:a5:af:85:
a6:3b:2b:15:86:c7:b2:9d:20:0a:2a:c5:c4:c2:1b:ee:e5:6c:
5e:ff:4a:3d:44:de:29:96:ce:0b:a4:66:16:3b:f1:54:b4:51:
a9:d6:f4:62:56:3f:34:07:64:18:5e:d6:d7:95:39:8f:2b:27:
52:94:33:d5
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZ1EmIEdOdQdzeXcLIhnKteeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwMzMxMTU1MjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODYxMDU0NWIyZDdmYmU1ZjNlNjllYWJkMWM0MmRlNWQ0OWM5YWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3+dLzV3UWUaZo6DjRazcDTmFCxe
HklsHpOFXYyap6XsPW7tdNzjbL/LQIJrLk+Lq4ASY6JUoKU5Z6LRPc24Oku73dCL
XINV2WnaPIMWSpOD2nipmmp/jxUud6z2MDnTNbwfpUPJm227OLlHTJf7yrgjBgM4
FBK+xBJofHwOxzoejMWGPSGq2x94E0IzMvQqN0OXrSNO+XWPmdgaaWbDJycMpvHm
OEYqZd2Xo/GQGrAMbezatmqC2KvyhEeFK1iaVCbvpKGoZy5bkqOn+eDoS1nAPP8d
cZVbGeySw2kc6DjmPi3/tPth+9v0Nb5nC9/YHP1cl2e68jkBkhjCJ4Z0bwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFLhhBUWy1/vl8+aeq9HELeXUnJq7MB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvdUdFRlJiTFgtLVh6NXA2cjBjUXQ1ZFNjbXJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAAhtWAwQA
Aht/MAwDBACQHzcDBACQHzgDBACQHzoDBACQHzwwDQYJKoZIhvcNAQELBQADggEB
AAu18eL9h/wKjSbxQxgZpAlZgs9UXmMYcGQSQ/SQCY3eX1PL1sT0QpHUMNo+elry
zsXXEatyzTVgR5loLGOc42UqkG9T2PULlBGUP/WZbpsWbPUeKm3t7zeERwNgzcUN
v4+k7KwxH6+uZZOCBfJpNIQJWADlhrHCJsy2FNXtgL3a3eqp5L+plc6YJqS3Yrvi
vNy+yqDXmVHauHy/W/E9bf+j85k2wJqHwhaFDBSFzv1cN+ReHzR4TjOeWCPmgcV8
fcM8mKWvhaY7KxWGx7KdIAoqxcTCG+7lbF7/Sj1E3imWzgukZhY78VS0UanW9GJW
PzQHZBhe1teVOY8rJ1KUM9U=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:40:44 2026 by rpki-client