Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ObsOP6JqNM6OaeL4S_uCJxCn4pQ.roa
File: ObsOP6JqNM6OaeL4S_uCJxCn4pQ.roa (raw, json)
Hash identifier: 1NnsQyNwQBYPfJmkhQuFZHkxMusxu5h0FrQj9eSXx0g=
Subject key identifier: 39:BB:0E:3F:A2:6A:34:CE:8E:69:E2:F8:4B:FB:82:27:10:A7:E2:94
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0C59543611B01FE34D8F91332FA96C949
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ObsOP6JqNM6OaeL4S_uCJxCn4pQ.roa
Signing time: Mon 21 Sep 2026 20:08:08 +0000
ROA not before: Mon 21 Sep 2026 20:08:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219543
IP address blocks: 2.27.153.0/24 maxlen: 24
2.27.155.0/24 maxlen: 24
13.143.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:95:43:61:1b:01:fe:34:d8:f9:13:32:fa:96:c9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 21 20:08:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39bb0e3fa26a34ce8e69e2f84bfb822710a7e294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c6:a0:f0:cd:d6:75:20:1c:bc:bb:5b:3a:a1:
fa:47:9f:14:82:df:7b:4e:29:30:bc:73:ab:22:da:
0a:9b:5c:47:75:74:11:6a:24:f3:35:81:57:c0:0b:
7b:60:19:48:9a:d9:98:ec:9b:22:bb:a6:e6:a3:f6:
9f:79:24:ff:97:f1:b3:65:b4:30:91:36:68:e3:78:
63:c2:fe:b2:26:8f:9f:0f:9b:90:ed:37:5d:c2:21:
2e:32:a8:8f:cf:06:97:30:5d:c1:ab:45:db:a3:b2:
94:b1:02:5e:44:1c:65:3e:11:0c:c3:5c:cf:34:9b:
3e:c2:fc:f8:a1:9e:2a:b9:9f:49:c0:18:14:27:89:
da:98:e4:0b:2e:6b:1d:7b:69:11:07:07:92:d4:c7:
15:5a:03:98:55:d4:f6:f6:14:4b:ca:f7:c1:f1:c1:
3a:0d:55:a4:52:51:21:0e:70:07:c1:d6:d8:39:6b:
8a:e0:8d:f8:df:13:69:81:0a:37:32:e7:40:e7:2a:
75:cb:49:10:d7:ff:80:1a:58:64:2f:1d:55:2b:19:
85:e1:37:25:8b:ba:5d:91:76:d6:a3:5a:84:c0:81:
e3:7b:31:3a:b4:64:29:ba:58:77:99:54:b3:23:8f:
e6:48:48:75:0b:2f:5f:70:34:56:58:e7:41:b5:ce:
9e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BB:0E:3F:A2:6A:34:CE:8E:69:E2:F8:4B:FB:82:27:10:A7:E2:94
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ObsOP6JqNM6OaeL4S_uCJxCn4pQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.153.0/24
2.27.155.0/24
13.143.170.0/24
Signature Algorithm: sha256WithRSAEncryption
81:54:8b:de:44:aa:34:a0:5a:cd:83:7a:ad:76:91:32:e0:b3:
78:fb:c3:b7:ad:da:a1:24:b1:32:51:96:4f:d4:2b:80:6d:09:
bb:25:f2:f6:d8:4c:0b:c0:1c:50:e5:18:a7:c1:1d:ac:f5:de:
4f:fc:f5:87:0d:b2:aa:6c:b7:cb:fc:08:da:be:f9:ed:19:4b:
5e:94:ea:a9:cf:46:41:ba:f3:5c:05:41:30:2f:d5:a4:82:4c:
0e:a5:b4:78:87:e9:3f:41:a7:ac:fc:57:95:9e:f6:6e:22:e0:
cf:bb:2b:61:25:ad:f5:83:cd:12:04:83:62:6e:22:53:da:cc:
6d:bf:98:59:ac:1b:67:37:a9:7c:30:78:f2:15:be:a3:e6:48:
e1:fc:05:fc:4c:f8:dc:43:c8:af:d9:6e:10:24:13:71:08:82:
f8:4a:8e:c3:14:4d:b9:d7:a2:f3:ca:76:5d:e4:26:cb:5e:7f:
23:74:72:08:4d:09:e8:a7:c0:c0:f5:b7:c9:d9:6c:26:41:e8:
50:5f:d5:1f:07:7a:a0:74:d0:ce:e9:9a:a0:d6:b9:03:15:88:
ff:5a:6e:6d:71:d1:fa:c9:5a:2b:24:af:82:b7:9d:de:74:96:
d4:bc:e3:27:43:d3:2d:5e:f4:91:8a:3c:a4:b9:5e:b4:14:cc:
4f:36:ca:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:04:06 2026 by rpki-client