Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/lQ-pHpjRMZhyd1Y9T0154pmTd_A.roa
File: lQ-pHpjRMZhyd1Y9T0154pmTd_A.roa (raw, json)
Hash identifier: 36dtU5Co+4Osmz8MPPCQzI62McYBILqhF760HloYOJc=
Subject key identifier: 95:0F:A9:1E:98:D1:31:98:72:77:56:3D:4F:4D:79:E2:99:93:77:F0
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 01A0EB993134DACE1201D9E160C0D0F78002
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/lQ-pHpjRMZhyd1Y9T0154pmTd_A.roa
Signing time: Tue 29 Sep 2026 05:18:00 +0000
ROA not before: Tue 29 Sep 2026 05:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43754
IP address blocks: 2.188.88.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:99:31:34:da:ce:12:01:d9:e1:60:c0:d0:f7:80:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Sep 29 05:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=950fa91e98d131987277563d4f4d79e2999377f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:52:5a:62:5e:16:d8:64:e1:0f:2d:1e:d2:e8:
78:1c:ea:b6:cd:41:23:30:63:ae:e5:02:29:0c:10:
dd:7c:7a:a7:5b:f2:dd:5d:4b:a9:b5:74:32:c0:b0:
fb:a4:1c:3b:11:2e:10:d5:1f:ce:fc:d4:8b:7f:c3:
6c:e5:94:de:19:7f:25:b8:ca:a0:a8:27:50:f4:10:
44:74:46:9a:54:74:b1:cb:81:10:53:db:f4:87:21:
b2:b5:eb:0b:90:06:c8:54:28:58:9d:40:e9:bd:aa:
b2:0a:2f:4d:64:98:3c:cc:25:77:18:9d:41:a0:40:
f4:2f:2b:24:fc:30:20:75:61:e1:2b:ab:81:1c:e4:
29:7c:25:25:f8:3f:4e:c3:8f:c7:a7:a4:d4:16:7c:
f2:fe:c3:96:e0:3b:12:72:05:7c:c3:60:22:70:81:
09:af:a6:cd:88:bf:42:45:8f:fa:b1:5a:5a:16:27:
0f:25:6f:7d:d6:1a:45:76:78:b6:34:dd:e3:b6:6e:
fb:5e:0d:52:0d:97:62:33:84:41:cb:e4:cf:9f:32:
22:17:90:5e:d7:6c:32:7b:16:f5:a6:df:9a:74:46:
59:54:01:45:10:e2:eb:10:61:42:06:fe:e5:6e:b7:
6e:b0:16:2b:52:8c:90:3d:c2:f4:fd:dc:3e:f9:c9:
57:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0F:A9:1E:98:D1:31:98:72:77:56:3D:4F:4D:79:E2:99:93:77:F0
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/lQ-pHpjRMZhyd1Y9T0154pmTd_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.188.88.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:b0:c8:d7:1b:65:c8:ad:70:42:1d:09:61:d1:b7:ea:97:15:
8c:a5:01:84:2d:aa:88:f1:bc:b2:c1:fb:52:45:1b:94:4d:02:
5b:7e:30:99:cc:b0:6a:fe:ee:61:3e:8a:6d:0d:28:45:3a:c0:
df:c7:97:1a:38:7c:71:48:50:cc:19:92:5f:63:65:da:99:9a:
85:f0:05:59:4b:3e:62:64:58:9c:ca:2a:7e:f7:ea:44:4f:0a:
f0:39:91:cd:1a:55:7b:d5:3f:3e:08:cf:c1:20:e0:0d:ee:14:
0c:19:97:37:fd:08:22:12:19:ee:8a:3b:11:bf:aa:37:83:b6:
bf:d6:8d:63:56:33:fb:7b:49:10:00:6b:3f:bf:94:73:5c:8c:
0a:62:af:fe:ad:a4:69:e5:01:a4:c8:c4:d7:c0:ae:ab:44:9d:
bf:c2:f5:e7:39:fa:bb:ac:70:a2:5c:04:1a:f0:8d:5f:b8:20:
c0:e8:be:71:25:9f:c9:f6:78:e6:df:c0:68:7f:d7:28:e4:fc:
e6:f9:5e:e1:66:5c:cb:30:7d:71:5b:90:d4:27:b3:4a:96:26:
73:17:96:c3:8d:7e:e0:cb:d4:cd:83:0e:39:4e:5c:15:97:8c:
af:50:e7:22:e6:be:59:14:11:d4:61:75:e3:7c:42:1f:1b:d0:
1e:c1:88:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:46:27 2026 by rpki-client