Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/FRNtJs2oy8R53qMEoqaFM6tqGmk.roa
File: FRNtJs2oy8R53qMEoqaFM6tqGmk.roa (raw, json)
Hash identifier: 2brwNwFmd8SUpgmQD3vzOmToC4NzlS/kU9Y9t9C7tAI=
Subject key identifier: 15:13:6D:26:CD:A8:CB:C4:79:DE:A3:04:A2:A6:85:33:AB:6A:1A:69
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F3913779B064DC374920BEE372ED86E10
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/FRNtJs2oy8R53qMEoqaFM6tqGmk.roa
Signing time: Mon 06 Jul 2026 20:16:44 +0000
ROA not before: Mon 06 Jul 2026 20:16:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215828
IP address blocks: 2.27.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:39:13:77:9b:06:4d:c3:74:92:0b:ee:37:2e:d8:6e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 6 20:16:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15136d26cda8cbc479dea304a2a68533ab6a1a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:75:1e:14:4a:2f:9f:ce:81:17:76:7f:d3:9b:
01:26:dc:79:aa:b6:9d:9a:15:1d:7e:a9:e6:6e:19:
66:51:1b:fd:61:94:30:15:b6:4e:72:4c:48:44:d5:
fa:01:ea:02:f7:df:ee:ce:ac:93:cd:5d:f2:0b:1f:
3f:cd:c0:4b:5c:cc:83:88:0e:be:da:89:30:86:33:
71:79:71:13:b9:38:e1:99:b8:eb:15:b2:c1:6a:44:
1f:7a:9e:3a:03:55:fb:ae:76:7d:7b:57:66:7e:2f:
e9:8d:55:00:2b:49:e4:e5:51:9c:b8:c0:48:54:27:
5e:36:8b:f1:2c:b0:d4:4e:36:33:ff:68:05:da:11:
2c:61:84:68:58:e4:62:fa:83:ad:0b:3d:93:c0:1c:
44:82:be:34:ae:4c:f0:c9:75:67:d8:13:af:51:ce:
2c:6b:09:b7:b3:f8:4d:2a:65:11:3d:24:c3:88:b2:
97:e7:38:c5:d1:67:a3:69:92:bb:01:af:e1:2e:73:
2e:a0:a4:03:a4:9d:e7:95:1e:d1:f8:a0:b7:70:12:
c1:23:3f:53:0c:26:37:a7:35:68:aa:24:38:92:92:
8a:0e:a9:47:b7:32:c7:cf:e2:7d:ee:0b:97:52:fd:
37:55:90:86:69:c2:7e:13:8a:b1:35:6f:d9:96:df:
c4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:13:6D:26:CD:A8:CB:C4:79:DE:A3:04:A2:A6:85:33:AB:6A:1A:69
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/FRNtJs2oy8R53qMEoqaFM6tqGmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.111.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:64:b8:1f:ab:4e:a6:db:73:e8:6d:e4:ac:4b:ae:8a:56:93:
8c:70:9f:04:c2:fc:7b:bc:23:f5:df:24:7b:b5:9f:b3:d4:bd:
a1:c1:f8:7f:4c:a5:21:ab:48:9d:f5:09:37:07:ff:f0:ad:bc:
34:9d:0b:94:f9:2e:20:e5:22:36:39:b8:2b:75:6b:d3:34:29:
50:98:d4:77:13:19:48:23:81:4d:be:01:c3:9c:51:08:b6:a0:
19:d1:dd:05:f5:06:b4:6e:92:e1:d0:62:17:cc:a0:06:b7:04:
86:47:bb:a9:64:31:80:9d:6a:eb:44:df:88:d0:76:88:96:60:
9c:3d:86:36:e2:90:76:4c:95:81:ea:7a:4f:7c:99:8e:26:70:
69:6c:ad:3c:d0:f8:77:4f:c6:f7:78:30:10:b1:89:dd:49:be:
f6:5d:c8:99:8f:bf:42:ec:ac:40:c0:c4:62:e3:6f:48:07:f9:
06:77:02:b1:47:2d:14:29:ab:88:df:7d:31:71:d1:cb:35:64:
db:70:a5:05:6f:71:b3:32:5b:b6:7f:b0:e1:65:d2:15:b5:c0:
32:7c:61:50:12:a3:3f:a2:5d:61:75:7d:01:b7:21:c1:0a:5e:
e2:ac:0d:33:6e:e6:86:03:77:cf:19:e3:41:6a:78:fa:ec:47:
80:e4:94:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ85E3ebBk3DdJIL7jcu2G4QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNzA2MjAxNjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTEzNmQyNmNkYThjYmM0NzlkZWEzMDRhMmE2ODUzM2FiNmExYTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHUeFEovn86BF3Z/05sBJtx5qrad
mhUdfqnmbhlmURv9YZQwFbZOckxIRNX6AeoC99/uzqyTzV3yCx8/zcBLXMyDiA6+
2okwhjNxeXETuTjhmbjrFbLBakQfep46A1X7rnZ9e1dmfi/pjVUAK0nk5VGcuMBI
VCdeNovxLLDUTjYz/2gF2hEsYYRoWORi+oOtCz2TwBxEgr40rkzwyXVn2BOvUc4s
awm3s/hNKmURPSTDiLKX5zjF0WejaZK7Aa/hLnMuoKQDpJ3nlR7R+KC3cBLBIz9T
DCY3pzVoqiQ4kpKKDqlHtzLHz+J97guXUv03VZCGacJ+E4qxNW/Zlt/EiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBUTbSbNqMvEed6jBKKmhTOrahppMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvRlJOdEpzMm95OFI1M3FNRW9xYUZNNnRxR21rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAhtvMA0G
CSqGSIb3DQEBCwUAA4IBAQBMZLgfq06m23PobeSsS66KVpOMcJ8Ewvx7vCP13yR7
tZ+z1L2hwfh/TKUhq0id9Qk3B//wrbw0nQuU+S4g5SI2ObgrdWvTNClQmNR3ExlI
I4FNvgHDnFEItqAZ0d0F9Qa0bpLh0GIXzKAGtwSGR7upZDGAnWrrRN+I0HaIlmCc
PYY24pB2TJWB6npPfJmOJnBpbK080Ph3T8b3eDAQsYndSb72XciZj79C7KxAwMRi
429IB/kGdwKxRy0UKauI330xcdHLNWTbcKUFb3GzMlu2f7DhZdIVtcAyfGFQEqM/
ol1hdX0BtyHBCl7irA0zbuaGA3fPGeNBanj67EeA5JSq
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:27 2026 by rpki-client