Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/kaeE27-xTx8zk9VBMHxEH-B70g0.roa
File: kaeE27-xTx8zk9VBMHxEH-B70g0.roa (raw, json)
Hash identifier: o/V5W6JCCBaDw1eZo8Mx/blvMeHEny3Ip1b4zpjqtAg=
Subject key identifier: 91:A7:84:DB:BF:B1:4F:1F:33:93:D5:41:30:7C:44:1F:E0:7B:D2:0D
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E088421E4558750890FE839751E03834E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/kaeE27-xTx8zk9VBMHxEH-B70g0.roa
Signing time: Fri 08 May 2026 16:55:37 +0000
ROA not before: Fri 08 May 2026 16:55:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199742
IP address blocks: 2.27.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:08:84:21:e4:55:87:50:89:0f:e8:39:75:1e:03:83:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 8 16:55:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91a784dbbfb14f1f3393d541307c441fe07bd20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:92:79:02:2d:a2:1b:ad:40:fd:1a:96:43:d6:
8e:82:df:25:ae:f8:21:d5:47:da:e7:17:b4:0d:3b:
48:66:36:70:69:c0:7c:62:67:52:08:4d:f9:cb:80:
91:06:dd:93:66:ad:7a:ac:40:80:42:28:e8:f2:15:
9f:93:e2:93:f2:21:c1:1f:94:6f:c3:76:38:69:14:
b1:5f:8f:80:0b:87:7e:d2:01:73:8d:7a:0a:63:dc:
64:21:e6:0c:24:1e:50:ca:99:4d:20:00:51:c7:37:
33:c7:c6:ff:07:46:57:64:0c:e1:2d:05:4d:c2:c3:
a7:06:8c:fc:dc:e2:a2:f6:24:f6:fa:b0:3d:05:ff:
24:ae:fb:ee:47:1f:0a:0b:cd:9f:23:12:69:98:40:
47:dc:47:26:7b:8f:69:24:95:27:11:7d:e1:f8:c1:
52:87:91:94:8f:5e:3e:94:64:c9:fb:c8:54:e3:ed:
81:4b:93:ab:f4:e9:c3:31:3d:f6:86:0b:d7:6d:6f:
a6:77:6a:db:27:3b:48:c9:b2:c5:c0:e6:26:c5:f3:
6d:93:7e:0c:71:ca:ca:8c:e0:52:d9:06:57:a1:b0:
14:36:d9:06:bb:c6:01:75:20:20:26:b6:19:b6:5c:
43:d9:7a:b4:01:91:e4:3c:86:17:3a:38:da:ab:00:
84:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A7:84:DB:BF:B1:4F:1F:33:93:D5:41:30:7C:44:1F:E0:7B:D2:0D
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/kaeE27-xTx8zk9VBMHxEH-B70g0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.58.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:9d:f1:65:ac:4c:2e:70:02:c4:b2:b4:19:62:db:8b:81:06:
93:c8:a6:60:e0:3a:6e:07:bc:b3:f8:12:04:09:69:62:db:0c:
44:f9:f0:e3:32:5d:5d:21:8e:78:cf:0a:a8:ea:d3:11:d2:71:
06:d0:7b:dd:f9:4b:d2:12:7c:48:2c:1c:1b:85:a6:17:92:5c:
74:d5:02:47:50:a7:15:d2:ba:8a:2c:69:e2:9a:04:9d:f7:40:
76:c4:56:50:1d:8c:df:47:c9:a3:ed:ed:f1:f1:d4:ac:60:3a:
10:0f:60:c8:38:46:ad:48:c7:5f:a7:0b:4d:40:c5:3e:4e:7b:
f0:a2:1d:18:eb:2e:9c:5f:2a:b9:db:c3:d5:8b:f5:28:33:87:
0c:96:7b:f3:f8:f8:ae:96:b9:27:aa:a2:50:aa:88:76:d0:e7:
4f:01:3f:10:90:38:4b:d9:87:89:3c:f9:c2:c2:a4:de:76:cd:
95:7f:f7:aa:8a:54:27:c2:4b:b0:c2:0a:e7:a3:eb:a0:d1:d2:
a5:51:0a:12:d4:17:74:6f:34:89:4e:f6:c0:ac:df:7c:80:c3:
ed:10:2a:d1:77:85:90:bf:27:23:36:ee:07:81:39:32:76:f5:
9e:8a:57:d3:d4:50:07:d5:a6:4f:56:f1:f5:9d:a8:33:1c:92:
bf:54:d2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:32:05 2026 by rpki-client