Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0jKCKLfDfLOqrWjiJ8lXfApzwlQ.roa
File: 0jKCKLfDfLOqrWjiJ8lXfApzwlQ.roa (raw, json)
Hash identifier: UnXFmwtzUVRVpqqrLR27EBgxntf+VtRZX1r/boF5oDU=
Subject key identifier: D2:32:82:28:B7:C3:7C:B3:AA:AD:68:E2:27:C9:57:7C:0A:73:C2:54
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0CA123E6BBD1F8D75B85C7009A6903395
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0jKCKLfDfLOqrWjiJ8lXfApzwlQ.roa
Signing time: Tue 22 Sep 2026 17:03:08 +0000
ROA not before: Tue 22 Sep 2026 17:03:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211826
IP address blocks: 2.27.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:12:3e:6b:bd:1f:8d:75:b8:5c:70:09:a6:90:33:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 22 17:03:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2328228b7c37cb3aaad68e227c9577c0a73c254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c4:58:9c:e8:f8:87:2f:76:86:f8:03:1f:37:
01:03:89:f1:c4:6b:45:60:93:72:63:c7:41:05:ec:
7c:36:f4:f2:11:91:ca:13:bf:6e:0d:3b:3b:7f:32:
ce:8b:27:5a:e6:e4:22:30:d6:da:5e:df:89:13:23:
8e:07:b1:97:2c:9b:f6:b0:63:6e:99:3c:64:9a:c5:
4d:81:53:d3:f1:86:f0:6d:9b:6a:05:69:b0:75:6d:
20:16:f2:41:37:8c:88:b7:e6:e0:62:5d:1d:d2:ba:
64:c2:01:84:4a:bf:02:a2:2c:4c:bf:3d:fc:38:36:
56:0e:ef:26:fc:a2:19:60:63:80:2b:db:ad:6a:e6:
c3:4a:a6:09:6a:4b:ba:e4:7b:77:f1:89:b8:cb:49:
e1:a0:5c:de:19:53:8d:fd:b3:64:45:ec:46:4f:4a:
7b:8e:5a:68:c0:b0:88:20:e6:07:d6:7f:d3:d2:52:
b0:6b:52:79:66:5a:76:d1:d6:0c:77:2f:51:03:42:
b6:18:72:d4:2a:a9:53:10:f4:ae:ed:6d:d5:95:a6:
4a:17:3d:05:77:27:3d:5c:cb:1d:3d:b7:46:25:ff:
8d:75:0d:67:30:2d:1a:0e:ea:66:44:f8:be:17:44:
e8:04:14:47:b7:bb:06:9d:2a:86:b8:0b:12:41:63:
c7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:32:82:28:B7:C3:7C:B3:AA:AD:68:E2:27:C9:57:7C:0A:73:C2:54
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0jKCKLfDfLOqrWjiJ8lXfApzwlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.102.0/24
Signature Algorithm: sha256WithRSAEncryption
56:6f:9c:c7:fb:fe:8f:e7:f7:d9:2e:1c:ad:0e:0c:d0:f8:0f:
a4:8e:a9:30:72:9b:49:7c:a9:78:b0:6d:17:87:8c:d9:18:fd:
78:0f:a6:e3:46:f2:3d:3b:2e:2c:93:f3:fc:34:fb:12:29:4e:
a7:98:b1:7e:06:a1:b6:38:b9:e8:12:4b:7c:96:8f:20:95:27:
81:e4:4c:08:e4:0f:de:26:28:8f:09:e7:ca:13:ae:26:d9:e9:
a1:f4:89:1c:ad:14:1e:ef:83:9e:17:23:17:0e:98:cf:9c:26:
fc:b1:a1:42:f1:12:07:ab:4a:2f:5b:b9:2c:d2:48:20:28:8a:
5b:ea:e5:4b:1e:21:af:a2:82:eb:11:ef:7a:93:48:c3:78:11:
e1:64:de:d1:45:56:3b:ed:d3:bb:c2:00:fe:4e:be:2b:73:0d:
ce:b4:7c:bc:fe:ee:38:a3:0a:52:18:ce:b3:0c:54:14:a6:36:
80:b6:da:6e:a7:6b:8b:72:8e:e6:d8:8c:81:f8:f7:c9:66:78:
07:09:b4:a8:e4:20:ce:8a:ef:0f:58:69:cb:de:14:99:64:65:
ce:ac:0d:0b:77:c2:5b:a6:4f:57:cd:05:e2:41:6f:72:6c:c3:
e6:59:8e:0c:ea:ec:35:69:c4:33:54:21:a2:52:68:87:33:59:
ec:ca:b6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:16:25 2026 by rpki-client