Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/NHVbiJhIbbsxNDUnG7fdgPGX914.roa
File: NHVbiJhIbbsxNDUnG7fdgPGX914.roa (raw, json)
Hash identifier: Y23BEMNwr22wxfeF5rsalLHO4fKVqLwdKfv+sDiOQds=
Subject key identifier: 34:75:5B:88:98:48:6D:BB:31:34:35:27:1B:B7:DD:80:F1:97:F7:5E
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F2E2EC4A4BD101DA9C7D099787021108C
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/NHVbiJhIbbsxNDUnG7fdgPGX914.roa
Signing time: Sat 04 Jul 2026 17:30:44 +0000
ROA not before: Sat 04 Jul 2026 17:30:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209179
IP address blocks: 2.27.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2e:2e:c4:a4:bd:10:1d:a9:c7:d0:99:78:70:21:10:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 4 17:30:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34755b8898486dbb313435271bb7dd80f197f75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5f:14:9d:96:2d:c8:a5:a5:66:89:35:c5:60:
92:ae:44:53:f5:16:36:99:cb:cd:c1:88:17:0f:87:
fa:51:3f:28:f7:9a:81:32:e5:dd:ba:57:a9:6c:df:
0e:b6:60:f7:34:ed:c6:84:03:5c:11:1c:9e:62:a3:
d8:ac:90:d5:d8:25:43:a8:1b:0a:eb:ae:53:f3:0f:
9b:79:4d:32:34:a6:7c:cf:96:29:bf:e2:dc:3f:e7:
69:fa:3b:1a:ab:87:1d:14:2f:c4:c9:3d:c2:6e:b2:
89:8d:73:ec:36:1c:c5:42:5b:c5:e9:e7:ca:31:d5:
be:5a:97:ee:be:eb:8e:40:2e:f5:f9:7f:5a:4b:d6:
a6:39:65:e5:f1:e2:75:84:73:c7:10:3b:c6:bd:26:
a4:b4:1c:ec:c5:87:ca:be:1b:4a:7e:8d:d2:83:d4:
2b:61:2f:18:5d:ca:bb:f3:ab:63:c3:d0:79:e8:1b:
47:c9:6a:c6:3c:3a:3e:4c:0b:4d:79:50:e2:54:8c:
52:2b:1a:b7:ee:e2:a2:f0:31:d0:2e:6e:99:00:d7:
b9:d8:71:bb:69:8a:47:67:53:f9:56:38:81:74:b8:
f2:6c:cb:6c:f7:54:0f:8a:a6:04:f0:a2:ee:8b:5e:
2c:9e:80:4e:43:7b:26:f0:02:0c:20:13:88:0b:01:
90:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:75:5B:88:98:48:6D:BB:31:34:35:27:1B:B7:DD:80:F1:97:F7:5E
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/NHVbiJhIbbsxNDUnG7fdgPGX914.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.252.0/24
Signature Algorithm: sha256WithRSAEncryption
27:34:2d:eb:8d:0f:f3:7a:6c:ac:62:f2:c8:65:c6:95:12:7c:
61:c6:ad:84:73:66:15:54:35:9f:a5:66:e2:33:24:15:9e:85:
84:80:f6:cc:09:9b:66:81:c5:91:02:5d:9d:9e:a7:35:e6:99:
cd:2e:cb:47:f7:67:cb:74:96:57:1b:90:68:c6:a6:23:95:ab:
94:8f:b1:6e:4a:fb:e1:1a:cd:45:5c:09:06:9b:4e:9d:9f:84:
b2:41:31:ea:cd:4e:c2:70:7c:fb:1e:d1:39:2a:a5:a9:6e:a7:
c7:bd:94:5d:57:aa:e8:be:09:13:25:75:d1:ce:20:92:a6:07:
1d:de:17:47:79:4e:d8:32:a0:8c:29:37:16:2d:f1:12:92:88:
24:41:cf:ac:64:f1:89:dc:30:67:84:49:3d:66:4a:1e:78:14:
eb:5d:df:31:ea:6b:c9:df:4b:84:13:94:8e:7b:95:6b:f6:d6:
f1:62:db:a7:ef:6d:ec:32:2c:f7:73:68:f7:8e:48:e3:f6:be:
0e:d5:6b:6e:f1:e5:46:ec:b9:19:9f:8f:99:e8:9b:7b:55:e8:
bf:39:48:9d:af:07:d3:30:7a:6f:e4:1d:54:4d:cb:93:df:8a:
a2:eb:14:97:38:78:36:04:73:d6:6f:5a:3c:03:27:d2:0b:37:
da:8c:4b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:48:10 2026 by rpki-client