Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GYJcvdFKopHC3HuSX1gC3vZ-tbc.roa
File: GYJcvdFKopHC3HuSX1gC3vZ-tbc.roa (raw, json)
Hash identifier: pfpRO71ja/pa8WpRBfBPopBPkI6c4oEU55hXP3xLysU=
Subject key identifier: 19:82:5C:BD:D1:4A:A2:91:C2:DC:7B:92:5F:58:02:DE:F6:7E:B5:B7
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0B80EBAAA0E5BEBE76DBD994C4C6335EE
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GYJcvdFKopHC3HuSX1gC3vZ-tbc.roa
Signing time: Sat 19 Sep 2026 05:06:08 +0000
ROA not before: Sat 19 Sep 2026 05:06:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 2.27.214.0/23 maxlen: 24
31.77.99.0/24 maxlen: 24
31.77.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b8:0e:ba:aa:0e:5b:eb:e7:6d:bd:99:4c:4c:63:35:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 19 05:06:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19825cbdd14aa291c2dc7b925f5802def67eb5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:03:9f:d4:93:eb:5c:cf:4f:2a:89:0e:55:d0:
77:d9:3b:aa:c8:f1:8b:84:b5:39:30:8e:11:77:cd:
99:3e:7b:02:90:94:a5:a7:f7:61:0b:fc:70:55:d9:
2a:35:3e:f8:a8:73:85:87:85:b7:72:1b:69:19:80:
a6:f6:07:e7:1f:53:3f:c2:99:0c:1d:5a:7b:b5:1e:
eb:97:62:7e:fe:ee:a3:b6:99:62:03:e7:fb:d5:09:
6b:48:55:63:12:b3:8c:5c:b4:86:b5:d1:8d:95:b6:
7e:08:03:f1:38:1b:89:7b:cd:06:26:26:04:f6:f8:
74:c8:6a:bd:f1:dd:56:ad:7a:08:39:ff:77:44:de:
50:89:2d:53:03:f3:b0:2e:34:11:f4:4a:d7:81:97:
28:f2:34:af:7c:5e:4e:cb:5a:57:29:25:e4:01:26:
81:c8:d5:d8:79:4d:8d:86:4c:bd:6d:c3:8e:83:24:
ec:20:aa:15:db:90:e3:4d:2b:3d:11:69:4b:50:dc:
be:09:7c:12:e0:77:d9:5e:db:99:74:13:04:3b:20:
21:10:51:49:9b:f7:4f:f4:c4:1a:c3:9c:52:9e:0a:
c5:62:a7:e8:b0:6a:fc:e6:a5:45:e4:a9:0d:e6:b0:
00:bd:5f:a7:48:ca:55:b4:c5:b9:88:5d:6c:ee:d0:
51:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:82:5C:BD:D1:4A:A2:91:C2:DC:7B:92:5F:58:02:DE:F6:7E:B5:B7
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GYJcvdFKopHC3HuSX1gC3vZ-tbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.214.0/23
31.77.99.0/24
31.77.104.0/24
Signature Algorithm: sha256WithRSAEncryption
15:1b:1d:79:b4:1e:db:b7:4b:6c:68:5a:53:52:8c:96:cf:17:
59:7e:5e:8f:8f:07:32:dd:02:2b:89:34:b3:80:23:c0:bc:16:
1f:4c:58:e4:47:50:6f:d1:f7:a6:85:de:c4:47:bc:42:b1:1e:
32:64:46:e2:fe:a8:df:71:21:a1:fd:2b:4c:16:e7:d3:5b:52:
e9:c3:ec:18:56:af:66:4c:e4:f1:82:b6:aa:67:06:7a:80:ba:
12:1e:9f:3d:58:e7:f1:26:ef:d1:f3:05:e9:23:ff:b3:f9:ae:
b0:27:fd:79:1c:fe:fc:f3:5d:af:92:dc:21:b9:8f:e2:dc:c0:
ef:ab:ad:6d:42:a8:8b:b3:22:1c:28:27:d9:2c:49:97:f5:02:
9b:da:cd:57:0f:ac:0a:e5:54:c1:7e:7f:dd:70:c7:8f:6f:21:
7c:6c:6e:57:ec:f8:68:aa:92:69:49:33:2c:ff:c3:20:ff:17:
0d:8e:1a:0e:3f:e5:b2:10:ba:4c:ec:65:16:9b:ca:75:91:86:
23:de:4c:e3:23:a5:d6:d8:75:dc:e6:70:f0:6f:bd:8f:f2:3a:
92:d8:70:05:9f:43:3b:1b:29:c9:79:dd:63:aa:be:84:98:c4:
32:6d:48:66:86:af:86:cd:76:0e:0e:81:12:76:01:58:cc:4f:
ba:33:c6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:47:59 2026 by rpki-client