Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/6Miu1qn3S9Vp862UKBPKoNH1MrA.roa
File: 6Miu1qn3S9Vp862UKBPKoNH1MrA.roa (raw, json)
Hash identifier: hnL9Tzs4yfrk8WveduNARsCszMZDLQ5l5CFL5stVH6g=
Subject key identifier: E8:C8:AE:D6:A9:F7:4B:D5:69:F3:AD:94:28:13:CA:A0:D1:F5:32:B0
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F8663CFA18E09A28F6401EF127481A30D
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/6Miu1qn3S9Vp862UKBPKoNH1MrA.roa
Signing time: Tue 21 Jul 2026 20:35:15 +0000
ROA not before: Tue 21 Jul 2026 20:35:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51082
IP address blocks: 2.27.244.0/24 maxlen: 24
13.143.232.0/24 maxlen: 24
31.77.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:63:cf:a1:8e:09:a2:8f:64:01:ef:12:74:81:a3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 21 20:35:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8c8aed6a9f74bd569f3ad942813caa0d1f532b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:43:17:02:e5:d4:f9:c1:a6:c6:66:04:bf:42:
ab:04:46:4d:25:07:af:b5:ef:2a:c5:72:70:68:c6:
b5:27:b1:6d:92:54:4e:71:90:fd:aa:c0:78:4e:30:
90:24:10:b7:62:4a:09:68:26:84:62:cf:76:cf:0f:
08:5f:c7:d5:40:30:08:6f:7c:26:38:7c:ba:35:78:
e8:81:1d:5d:fb:e1:fa:45:17:8b:70:25:34:42:59:
b0:38:34:c9:4d:48:60:31:9d:8f:66:9f:dc:58:5c:
ba:33:d0:0c:14:88:c0:87:a9:7b:a7:90:61:89:2b:
ac:d4:86:2b:df:cb:7f:04:b0:bb:9e:a3:5b:e7:84:
09:90:f1:6d:fe:39:5b:76:3f:c1:b0:09:bf:8a:8c:
7c:5c:63:96:fc:0c:28:5a:26:75:9f:f0:45:60:d9:
2c:f8:e6:ea:e8:1f:2c:24:be:2d:1f:e4:17:67:97:
08:66:a8:4a:fe:a9:69:f3:01:e9:b0:6e:90:f5:ab:
ea:cc:c0:69:60:b8:3c:38:fd:f6:84:95:06:64:64:
46:8a:a5:84:95:60:dc:55:db:23:41:22:3a:44:80:
4c:a8:d4:7b:e8:95:3a:59:32:36:16:fc:81:78:50:
c2:b6:14:65:6d:f5:3a:8a:04:3d:4d:b5:28:ed:88:
f3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C8:AE:D6:A9:F7:4B:D5:69:F3:AD:94:28:13:CA:A0:D1:F5:32:B0
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/6Miu1qn3S9Vp862UKBPKoNH1MrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.244.0/24
13.143.232.0/24
31.77.248.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:ac:ac:6e:c2:68:9d:4c:1d:f0:47:09:b4:63:26:a9:a8:9d:
f8:a3:7a:d8:f4:e9:70:be:82:48:ac:a9:b3:60:f3:38:9a:a5:
99:ac:2d:4d:09:2e:62:7d:0a:3b:d2:d3:b8:ad:99:e2:8a:7a:
08:93:71:59:13:5e:b1:1f:0e:23:10:69:3c:e7:b4:9b:e5:db:
b4:aa:a7:72:80:ff:5d:0b:aa:47:17:fb:e5:3a:9c:25:58:23:
5e:06:53:6d:f8:c9:2e:97:63:d7:aa:6b:6a:ab:05:0e:a9:de:
d8:49:b7:fd:ba:fd:ff:89:71:a1:ed:22:68:53:c2:19:ab:85:
1d:f9:9c:86:cf:b8:d5:c8:f7:a5:9b:eb:68:e8:7b:ce:4c:27:
17:8f:3e:9a:35:94:7d:80:96:bc:e2:73:00:3f:e5:9c:90:f3:
2c:4e:a9:21:5d:d2:a0:25:9a:84:1f:56:ef:b8:02:97:02:2e:
1a:02:53:62:89:ce:e4:f4:50:53:b2:1b:53:e2:e6:1c:38:29:
81:3d:11:ec:42:25:12:71:52:c4:3f:4d:a5:9e:0a:b1:9e:08:
a3:24:e3:a1:ee:5a:f3:33:a5:3e:0e:4d:bc:c6:7d:f3:28:d4:
11:2e:d6:dc:07:c5:54:de:b3:bb:b8:3d:fb:36:6c:49:6c:14:
24:bd:7f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:12:35 2026 by rpki-client