Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/uUqZ4G6RRr6S-sT1eTNVLHU6OaU.roa
File: uUqZ4G6RRr6S-sT1eTNVLHU6OaU.roa (raw, json)
Hash identifier: 2tAsuFHZ00mdceNfVl+gBZwFYuPvynuiAXHxqcsLTjg=
Subject key identifier: B9:4A:99:E0:6E:91:46:BE:92:FA:C4:F5:79:33:55:2C:75:3A:39:A5
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F962FB040F277A4A1EEEAD72E957F327C
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/uUqZ4G6RRr6S-sT1eTNVLHU6OaU.roa
Signing time: Fri 24 Jul 2026 22:12:15 +0000
ROA not before: Fri 24 Jul 2026 22:12:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151814
IP address blocks: 2.27.235.0/24 maxlen: 24
31.77.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:2f:b0:40:f2:77:a4:a1:ee:ea:d7:2e:95:7f:32:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 24 22:12:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b94a99e06e9146be92fac4f57933552c753a39a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7a:68:b9:71:b7:f7:5a:c1:5d:86:65:9b:69:
12:f5:04:a4:f4:c7:b3:42:af:5e:c9:3a:3c:17:63:
c0:1d:9f:6d:69:2b:c5:52:0e:79:ec:0f:90:1f:0f:
6b:e5:dc:1a:04:cd:9b:90:1f:2e:65:75:eb:9a:7d:
de:eb:25:69:dc:4b:af:71:b5:1c:b5:57:bb:23:7b:
65:05:13:40:eb:1d:78:ed:bb:34:89:91:65:00:c7:
30:a0:52:ae:c6:ab:ae:b2:c5:9f:37:b6:ac:82:32:
f1:a7:f1:59:55:a8:24:cf:a8:39:81:fa:48:f6:76:
7d:81:92:2a:d9:f3:a3:08:2a:f9:c9:26:c0:2f:d6:
38:1c:ea:ff:4d:87:24:3a:46:cd:7f:e9:90:41:5e:
a3:ad:2b:99:fc:90:3a:93:71:ec:d1:69:6d:c7:d4:
fc:3c:48:da:6f:48:4e:67:92:1c:5d:e1:42:ee:70:
fe:d7:74:2b:b6:b8:d6:e1:41:11:29:0c:7d:54:bd:
6b:03:76:f9:47:cc:0d:04:92:59:5d:57:c4:c0:06:
6d:e2:c5:be:9b:53:ff:89:73:ee:3d:0d:2b:bb:23:
df:9b:62:36:70:e6:eb:34:28:34:83:44:75:de:93:
8f:5e:1e:22:ad:34:07:e5:10:b4:20:bb:c6:cc:68:
0e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4A:99:E0:6E:91:46:BE:92:FA:C4:F5:79:33:55:2C:75:3A:39:A5
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/uUqZ4G6RRr6S-sT1eTNVLHU6OaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.235.0/24
31.77.215.0/24
Signature Algorithm: sha256WithRSAEncryption
51:68:68:b4:28:97:56:4d:f0:f2:40:6b:d3:e2:7d:4d:11:83:
7b:25:e2:1d:d5:0c:a8:b2:37:f7:26:f4:b9:38:3d:a3:10:55:
d6:c7:7b:40:44:25:af:65:4c:72:1b:c8:a7:4e:88:8f:bf:ce:
f5:22:9d:9d:b2:17:f1:87:39:12:03:4b:31:97:ae:84:22:ea:
e6:0a:64:88:28:4e:49:78:18:e4:c2:c2:0f:05:09:6a:15:79:
f8:bd:4f:1d:34:ca:c2:49:89:cf:90:38:21:bb:fd:06:2a:86:
e7:4c:64:0d:95:80:82:4e:31:19:89:5d:2d:15:a7:91:cc:e3:
ea:e8:2d:52:fd:86:5c:ad:a0:e8:63:93:84:6f:b4:aa:03:21:
e2:79:b5:35:05:36:62:ab:ab:a9:56:0f:6d:bf:29:1d:da:65:
f7:90:65:95:7f:d4:ef:c1:14:63:5c:d9:13:6f:65:e5:c1:6c:
41:1c:88:69:6d:e3:46:72:ee:42:8c:be:c2:99:21:39:73:a5:
73:36:46:38:23:cc:f4:74:e9:14:44:ea:0d:e5:e9:b2:1a:74:
d6:9f:67:d0:27:86:83:36:b4:72:b8:88:04:8c:0a:8e:c5:3f:
5b:a8:48:54:7c:10:98:7d:1f:23:b3:70:13:c8:19:4a:af:c0:
a4:ae:86:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:47:04 2026 by rpki-client