Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/fw1hQM-MPqyX0yLqRBA-wR0gPLc.roa
File: fw1hQM-MPqyX0yLqRBA-wR0gPLc.roa (raw, json)
Hash identifier: LuyDiMJDi47RnJYrb4ArsE/aSXa0ZhwMDw6P72k39AM=
Subject key identifier: 7F:0D:61:40:CF:8C:3E:AC:97:D3:22:EA:44:10:3E:C1:1D:20:3C:B7
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F7B2AE1502DBBCBEBEF8A2702C4EA0069
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/fw1hQM-MPqyX0yLqRBA-wR0gPLc.roa
Signing time: Sun 19 Jul 2026 16:17:15 +0000
ROA not before: Sun 19 Jul 2026 16:17:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198487
IP address blocks: 2.27.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7b:2a:e1:50:2d:bb:cb:eb:ef:8a:27:02:c4:ea:00:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 19 16:17:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f0d6140cf8c3eac97d322ea44103ec11d203cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:c6:b6:26:57:97:d5:4f:ad:bd:c2:b0:23:
e8:38:50:1d:19:45:cc:ca:7d:49:5b:d3:29:14:d9:
3e:8b:3c:3f:7e:af:f2:b0:70:6e:43:17:88:81:3a:
c0:9a:2f:d6:f0:24:cf:e1:cc:e5:ce:ed:fc:3b:80:
d7:50:f6:5b:46:23:0a:09:5f:b8:46:ab:9e:68:d1:
fa:ca:0d:bd:62:3b:27:78:13:ce:eb:3b:1a:a1:39:
7c:15:a4:fb:8e:0e:98:07:3f:75:1e:44:98:e0:9a:
e4:8c:02:6d:b5:67:9e:1e:bb:74:a3:d2:b3:0a:98:
73:7e:ec:05:99:71:77:9c:24:a1:b5:bb:19:11:05:
73:88:84:88:7e:8d:b0:d6:ec:2a:94:11:79:d0:10:
ed:e3:42:5a:d2:0a:01:29:e8:fb:b8:24:17:32:e4:
8f:df:c2:97:cd:20:93:95:e0:37:af:75:01:b7:b0:
85:49:e0:c5:f5:f8:3a:1a:75:52:c8:39:ea:b6:3d:
fd:1d:50:aa:13:7b:9c:01:d7:0e:d0:1f:90:05:ab:
2e:98:e1:ed:af:31:41:c8:65:11:b7:1e:09:2a:73:
a1:78:a9:c6:84:8c:56:38:b2:aa:ff:89:48:7c:d9:
83:70:93:fc:e0:29:eb:98:2b:9d:9f:9f:ed:32:0c:
47:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0D:61:40:CF:8C:3E:AC:97:D3:22:EA:44:10:3E:C1:1D:20:3C:B7
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/fw1hQM-MPqyX0yLqRBA-wR0gPLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.155.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:9b:b6:e3:f5:c7:ef:97:c4:3f:c8:34:46:66:7c:dd:af:7e:
e6:2f:1d:f1:49:8d:81:e1:09:69:79:39:a8:32:f0:3b:09:ef:
9e:b9:95:ec:7e:00:e5:b1:20:88:28:e2:c2:90:b9:43:8a:f0:
4d:cb:19:19:33:52:2e:98:78:b1:e4:3c:16:3b:79:8f:2f:bb:
2c:22:03:e1:c6:7a:2f:14:23:8f:22:ea:80:87:12:b9:94:5a:
05:44:b8:09:63:e0:a0:ad:c6:be:ca:82:72:35:93:e6:92:88:
fc:9f:24:ff:7a:ce:5e:0c:2c:08:23:a4:36:38:d5:b4:8f:f4:
7c:e7:31:7a:e3:48:de:52:79:54:d8:aa:11:67:3b:bd:54:5c:
23:c3:7f:3c:ef:e7:f2:57:2a:8b:9a:3d:6a:be:20:83:4d:ca:
52:8c:13:eb:ff:44:f8:8a:da:fe:51:32:26:65:30:0f:f1:68:
c4:c4:1b:54:82:c0:da:87:d3:da:85:77:8d:73:ee:ee:ca:ad:
9f:f0:96:84:99:ab:6e:28:7e:8a:16:83:05:6a:fe:3e:34:19:
f2:92:88:76:cb:42:ac:4d:86:1e:f2:6f:45:68:03:4b:83:82:
41:14:6f:72:8f:bf:41:21:c9:38:c1:95:9a:9c:c7:fd:2c:b2:
c2:d1:5d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:25:06 2026 by rpki-client