Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/A_VvtwpEDtRwe8-wvuTQm09pHCM.roa
File: A_VvtwpEDtRwe8-wvuTQm09pHCM.roa (raw, json)
Hash identifier: 5zbVREXhC0ioBlHsNHUDax/cMV4LSOGD5TGZlSktPSU=
Subject key identifier: 03:F5:6F:B7:0A:44:0E:D4:70:7B:CF:B0:BE:E4:D0:9B:4F:69:1C:23
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F1B2AE9A2AFCB0E3FCBA0F1A8030229AA
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/A_VvtwpEDtRwe8-wvuTQm09pHCM.roa
Signing time: Wed 01 Jul 2026 00:53:44 +0000
ROA not before: Wed 01 Jul 2026 00:53:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2.27.218.0/23 maxlen: 24
2.27.220.0/23 maxlen: 24
2.27.222.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1b:2a:e9:a2:af:cb:0e:3f:cb:a0:f1:a8:03:02:29:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 1 00:53:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03f56fb70a440ed4707bcfb0bee4d09b4f691c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ca:0f:e6:15:d3:df:43:b4:4a:d6:fe:d7:0e:
37:49:9c:0d:31:e1:72:dd:c9:60:f6:d8:8b:6b:4b:
c9:53:35:09:d8:de:0f:6f:8a:c9:71:28:b7:f4:a2:
7d:21:39:71:bc:93:28:78:52:e1:a6:d4:bf:13:e8:
f1:2c:dc:b6:5f:25:47:2b:93:83:24:3f:71:29:73:
ee:d2:7e:09:22:81:28:10:89:9e:e0:33:1e:78:66:
43:2f:a9:25:b1:ef:db:a9:ec:a2:a3:c9:b1:c9:c9:
c8:10:ff:10:1c:30:d2:c0:40:4a:70:b8:90:be:66:
42:a0:ba:0e:87:ba:ec:1a:ce:cf:be:1f:a0:b1:88:
11:64:ae:2e:7a:42:ff:20:3d:a0:5b:be:e0:ec:30:
93:12:0d:d1:9e:dd:86:5b:20:8a:a0:2d:e8:21:4c:
77:f5:ce:02:f8:9d:4f:65:bd:2f:fb:fe:ad:ed:4d:
70:4d:e6:77:e0:4d:ef:44:83:46:ed:dc:dc:48:d4:
28:a4:ae:30:e1:b5:49:c2:dc:14:67:9a:d3:d2:38:
93:df:f8:68:f7:4c:db:99:b0:ec:fe:40:5d:eb:cc:
1c:33:e1:f4:b0:6b:73:eb:a9:5f:11:b6:f2:92:38:
f4:57:3c:01:18:ed:22:0a:89:56:a8:46:cc:4b:2e:
24:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F5:6F:B7:0A:44:0E:D4:70:7B:CF:B0:BE:E4:D0:9B:4F:69:1C:23
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/A_VvtwpEDtRwe8-wvuTQm09pHCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.218.0-2.27.223.255
Signature Algorithm: sha256WithRSAEncryption
1e:e3:4d:29:14:20:23:d4:8f:d0:3d:68:38:15:6d:c4:7d:ba:
90:ac:19:bd:e6:db:0c:18:25:86:22:50:f6:1e:61:60:71:30:
a1:fb:42:5d:a7:16:1a:34:51:8b:53:e4:c8:a6:d2:f0:e1:05:
bd:ab:8c:c0:4c:de:99:a5:71:85:a0:e0:c4:d1:7e:fc:2b:f6:
ab:5c:75:f8:c0:8e:ec:05:e1:e8:7e:d5:f1:05:cf:be:84:33:
32:2c:8b:91:39:7e:ee:7d:9d:cf:31:97:51:97:25:fb:3d:43:
0b:9a:77:e5:b1:34:d0:d0:0e:ed:8b:c3:06:2e:32:36:74:f1:
66:41:62:78:6f:8a:27:70:d4:7b:b1:96:e0:84:5a:66:94:d1:
6d:46:2d:df:5e:29:f7:3c:d4:bb:04:7d:ad:39:30:2a:6b:f4:
b8:d8:bb:ca:02:8e:89:f8:9d:22:f9:54:11:fa:17:24:65:9c:
96:87:19:43:a5:aa:24:b6:64:f9:b6:d8:7a:d1:20:2f:29:81:
47:f9:ec:64:85:77:f1:14:d7:7f:7d:65:45:41:3e:cb:86:f1:
8c:1b:39:67:a4:0f:c9:73:b5:7b:ac:3b:b6:b5:2e:2c:2c:77:
10:dd:60:a4:1e:60:f9:ce:40:06:e7:77:55:a1:99:8a:8c:28:
97:aa:db:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:55:16 2026 by rpki-client