Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/6cTs7Ega2tWuCyYVjTYvcsCwTHE.roa
File: 6cTs7Ega2tWuCyYVjTYvcsCwTHE.roa (raw, json)
Hash identifier: 68zyTaEZkS2782ahrJAJTOdfMu6Z8Ecbb35r744d400=
Subject key identifier: E9:C4:EC:EC:48:1A:DA:D5:AE:0B:26:15:8D:36:2F:72:C0:B0:4C:71
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E08591A9A9A6FDE22635CD3C8E975BD3E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/6cTs7Ega2tWuCyYVjTYvcsCwTHE.roa
Signing time: Fri 08 May 2026 16:08:37 +0000
ROA not before: Fri 08 May 2026 16:08:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151389
IP address blocks: 2.27.153.0/24 maxlen: 24
31.77.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:08:59:1a:9a:9a:6f:de:22:63:5c:d3:c8:e9:75:bd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 8 16:08:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9c4ecec481adad5ae0b26158d362f72c0b04c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:76:61:ba:c5:d0:5d:2e:df:ac:60:c7:a7:3a:
93:16:57:e4:3e:c2:6e:14:d6:30:29:97:02:1a:f4:
14:0e:14:37:1f:c4:8e:12:f3:61:20:c4:0e:06:74:
67:1d:37:9f:02:81:0b:20:d0:5d:3c:cd:08:5d:4e:
af:e6:96:55:32:c8:9e:92:f8:df:be:85:97:5f:ce:
09:3f:11:c9:5b:2e:03:57:a7:68:7d:b9:f6:e4:47:
1e:4e:f8:04:19:83:2d:3e:14:f1:d7:b1:d7:cc:27:
33:00:a7:5e:af:7e:5e:97:49:e8:fa:40:f3:bf:83:
0c:df:8f:43:7d:86:3d:82:9b:d0:73:60:36:a6:8e:
b1:6b:bd:36:fc:c5:10:f7:d3:50:e6:03:01:65:cd:
8f:92:96:30:03:4c:50:e2:05:11:b7:a0:c8:82:b2:
06:53:5c:42:10:da:2c:ce:e0:a7:d5:46:55:33:8c:
db:70:0d:46:0c:c9:f2:6f:f4:6d:d8:ab:e0:8c:ea:
c9:37:70:f7:d7:7c:4a:88:0e:5b:dc:26:79:bc:31:
dd:cc:fa:80:2b:d0:26:4e:92:01:cb:ec:9e:2f:ca:
69:54:e1:c1:84:9d:4f:27:0e:3f:27:27:9f:bc:25:
7e:df:e5:4c:34:1a:eb:e3:2a:06:9d:99:fa:6e:bf:
63:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C4:EC:EC:48:1A:DA:D5:AE:0B:26:15:8D:36:2F:72:C0:B0:4C:71
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/6cTs7Ega2tWuCyYVjTYvcsCwTHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.153.0/24
31.77.218.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:4f:2d:87:59:7b:95:0e:9b:a9:fd:c7:18:06:d7:6e:b2:27:
71:79:4c:aa:b7:20:15:e5:39:f6:ca:2b:46:92:c9:ac:18:7d:
dd:29:96:6e:08:ab:ac:5e:03:df:4d:f7:36:b4:01:e6:15:b2:
e9:5e:63:e1:46:c1:b6:95:90:ce:c2:d1:1b:b1:c1:5e:55:2a:
db:f6:fe:a5:29:e9:ab:a8:fc:52:09:4f:77:11:8a:e9:6d:aa:
74:58:a8:08:06:ee:83:cc:a3:a6:d1:f8:1d:5d:be:18:84:85:
64:64:67:44:ff:63:68:73:83:c6:9f:61:e4:49:1a:a5:5e:11:
a1:cd:81:06:41:b2:20:75:01:fa:8d:d8:dc:fd:af:e7:86:da:
1f:1d:f0:2c:81:0c:05:95:bb:ed:0a:69:3c:9c:d4:d4:3e:7b:
c6:6c:9a:2c:6c:71:2d:34:7e:6a:e3:b9:4e:20:11:e2:de:1a:
97:d9:1b:d6:37:be:d7:4c:2e:d3:40:8f:f4:41:53:ff:51:9c:
57:33:a9:06:ca:a8:70:5d:be:ff:ae:db:74:0e:9a:19:6c:4d:
27:24:96:e2:38:6f:6f:c7:a0:ba:b6:b9:e5:57:fd:d5:2b:fc:
c6:34:bb:7e:56:57:11:94:c1:c0:73:c9:2f:f5:4f:4d:e9:4a:
e4:ae:4e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:00 2026 by rpki-client