Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3y2mPaMF3WDtQn9xQpH8m5XFPmk.roa
File: 3y2mPaMF3WDtQn9xQpH8m5XFPmk.roa (raw, json)
Hash identifier: Vc1lPcN3KNe60WgBBpN6zfccEh8251o+pHCpHR/G4XU=
Subject key identifier: DF:2D:A6:3D:A3:05:DD:60:ED:42:7F:71:42:91:FC:9B:95:C5:3E:69
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0CF28127F93DEB8CF55BB19D980FF63B7
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3y2mPaMF3WDtQn9xQpH8m5XFPmk.roa
Signing time: Wed 23 Sep 2026 16:45:04 +0000
ROA not before: Wed 23 Sep 2026 16:45:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 274564
IP address blocks: 2.27.83.0/24 maxlen: 24
2.27.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:28:12:7f:93:de:b8:cf:55:bb:19:d9:80:ff:63:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 23 16:45:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df2da63da305dd60ed427f714291fc9b95c53e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:41:26:c5:a6:48:d9:2a:b8:ff:39:d7:47:a3:
98:d2:d3:6f:99:03:56:64:4d:1a:74:c3:f0:f6:ca:
8f:56:27:26:24:4c:1b:6b:b7:e4:00:46:cb:5f:78:
53:6d:5c:33:5e:e9:0d:8b:96:53:c3:15:f5:f0:93:
9a:63:91:37:69:80:74:b0:0a:db:67:8f:23:97:18:
ef:31:fa:20:fc:fc:34:f9:6e:35:34:03:3a:d6:98:
0a:13:da:b3:d5:a1:e5:b6:3e:71:5d:32:1e:90:91:
c2:1f:20:2f:ec:58:88:7c:e4:cb:9e:f7:46:4a:63:
15:b4:60:63:e6:14:81:12:6d:03:c5:49:ca:0c:eb:
1e:27:79:9c:10:72:06:13:10:5f:d5:04:4e:64:53:
ef:9e:7c:1b:2a:89:22:bd:b5:36:98:e1:86:51:80:
1b:c9:38:55:a4:6d:41:5c:6c:08:a3:2e:f5:55:d8:
52:50:b7:18:38:b6:16:89:67:17:4c:8f:5d:44:b2:
89:37:d1:94:fd:cc:81:24:91:82:d7:b5:f9:36:60:
f4:36:e1:ac:21:b7:21:46:8e:c4:f2:72:61:41:2b:
10:9a:62:69:62:ac:03:13:99:ac:d2:72:17:cf:67:
a4:1c:49:34:4f:9d:58:ca:c7:92:21:8c:4b:31:36:
28:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2D:A6:3D:A3:05:DD:60:ED:42:7F:71:42:91:FC:9B:95:C5:3E:69
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3y2mPaMF3WDtQn9xQpH8m5XFPmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.83.0/24
2.27.92.0/24
Signature Algorithm: sha256WithRSAEncryption
11:7b:d8:18:6b:0b:64:bc:be:19:9e:8b:61:ae:82:19:a2:5d:
82:34:dd:77:ee:ab:8b:f4:25:04:5c:34:ca:b7:a5:60:f5:49:
65:d1:31:89:1e:18:14:9c:34:f8:eb:c6:40:f0:fb:29:cd:45:
2f:8a:60:b6:33:7e:ae:15:2c:a2:a7:49:f4:92:cb:e1:06:5b:
3f:09:43:4b:dc:8f:dd:88:20:85:7a:93:5c:23:8b:52:7d:64:
66:6f:6e:7a:44:22:93:c8:45:9c:58:a7:18:05:2b:f3:3c:4d:
2e:c9:bb:8a:2f:6e:76:0e:60:b7:2c:48:6e:59:aa:33:07:9e:
af:cf:e2:ea:86:92:95:e4:aa:a3:23:ea:b9:84:ef:24:2b:c1:
3d:05:4a:80:f8:a1:d9:e8:a4:af:2f:d6:55:a6:7c:e8:62:28:
1b:db:ea:8e:29:cf:f5:d4:84:33:f9:af:43:fc:e0:2d:66:f8:
1b:8f:29:fb:12:c9:9c:2b:40:eb:c1:09:c8:3d:97:fe:af:01:
80:50:91:cc:da:57:ca:18:93:0f:7e:46:ce:11:13:8e:02:62:
8c:d7:d9:c8:44:ef:e1:c3:c3:a9:90:9a:86:44:47:77:50:93:
bb:ac:e4:42:40:ca:a6:73:1f:a9:d1:1a:d6:b4:39:63:aa:49:
12:cc:6b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:26:41 2026 by rpki-client