Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GHuaG4bL_qtpSVuySua7-jubskE.roa
File: GHuaG4bL_qtpSVuySua7-jubskE.roa (raw, json)
Hash identifier: U9wD2IPVxYZmzuDDkznhDP5NhfPmt4Opz08XoFnHnis=
Subject key identifier: 18:7B:9A:1B:86:CB:FE:AB:69:49:5B:B2:4A:E6:BB:FA:3B:9B:B2:41
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D1B1D9F17F0D669A07FC987CFF12ED4F0
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GHuaG4bL_qtpSVuySua7-jubskE.roa
Signing time: Mon 23 Mar 2026 14:33:39 +0000
ROA not before: Mon 23 Mar 2026 14:33:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4766
IP address blocks: 2.27.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:18:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1b:1d:9f:17:f0:d6:69:a0:7f:c9:87:cf:f1:2e:d4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 23 14:33:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=187b9a1b86cbfeab69495bb24ae6bbfa3b9bb241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a9:ce:ac:48:c2:88:5a:df:d2:f7:c3:be:7f:
70:b7:03:ae:04:b3:7d:6f:ae:42:6a:9d:2e:8f:02:
e8:be:f7:42:71:96:02:6b:1c:15:fa:f6:fb:15:10:
34:7b:27:ce:eb:c5:7e:f3:e1:7c:14:77:7b:d4:3f:
62:36:92:d3:13:83:04:65:fa:34:e4:c5:6b:3a:ec:
f6:67:51:5c:c4:ba:43:ce:80:e8:36:d1:cb:ee:7b:
ba:9f:60:46:2c:f4:57:5e:87:b6:79:02:a4:a9:83:
bb:ef:b3:41:cb:a2:0f:5a:94:28:07:ec:dd:d2:df:
a7:7c:34:0c:17:43:ca:a3:c2:f8:bf:9a:fc:6a:c2:
11:a6:e2:31:cc:c5:70:d5:39:5d:ed:7e:99:df:5a:
ed:2e:61:65:b5:db:19:03:fa:67:01:51:d5:c4:32:
53:04:d8:87:f4:b1:fb:4c:10:33:8f:32:c4:e9:8c:
b4:8b:91:86:04:60:9f:69:2e:6b:b3:eb:c0:1a:07:
de:ee:30:1c:0f:d5:be:c5:c3:06:bd:97:99:ff:52:
a4:99:e2:98:70:5a:8d:d3:30:7a:96:40:c7:c4:9a:
04:a6:9a:94:64:83:b0:1a:20:09:16:9d:9e:b9:69:
8d:53:a5:45:5d:ce:98:e2:23:5f:56:50:c4:42:fe:
69:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7B:9A:1B:86:CB:FE:AB:69:49:5B:B2:4A:E6:BB:FA:3B:9B:B2:41
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GHuaG4bL_qtpSVuySua7-jubskE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.212.0/23
Signature Algorithm: sha256WithRSAEncryption
63:f6:79:b4:bf:71:78:79:44:2d:d4:dc:73:b8:68:71:d2:38:
05:31:b7:6e:3b:e6:fc:6e:70:aa:17:d9:34:f3:71:88:0e:f9:
03:4b:c3:07:e1:10:54:11:d7:0a:ba:97:79:eb:c5:f1:a5:34:
b5:61:88:ee:f2:ec:e6:78:7e:09:d8:64:9f:81:50:7c:4d:bb:
a3:03:7b:aa:56:0b:f0:ac:c8:4d:22:c8:97:a6:b2:a7:47:fd:
6a:86:ec:16:c9:50:92:48:cd:3e:18:8c:fe:54:9c:fe:89:fd:
67:ed:4d:f3:e7:2e:e9:90:f7:2b:66:de:33:03:ea:0f:bd:56:
37:88:c1:c9:c1:e3:72:3d:25:09:1b:6d:3d:bc:71:da:7b:4e:
7a:1a:80:68:7e:bb:1e:9f:03:ad:db:50:da:e4:3e:5b:fc:ae:
1d:e8:41:70:eb:57:a6:f8:59:2a:10:96:91:da:d6:e6:20:98:
f4:56:9c:92:9b:8d:3d:9c:b6:3a:a7:f2:06:ce:82:d5:60:8a:
81:ca:9b:cd:75:f0:64:ab:bb:08:22:6b:7e:01:e4:34:05:c5:
04:fd:53:0c:8e:d9:b6:2a:c6:f0:19:02:9a:49:45:d8:8e:23:
c4:5a:cc:95:ee:78:54:c6:62:89:d4:d9:9c:37:a0:0c:f6:ae:
b1:e8:17:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:39:03 2026 by rpki-client