Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lRjyvSs77ZVr7iaHXElKhUyp1xM.roa
File: lRjyvSs77ZVr7iaHXElKhUyp1xM.roa (raw, json)
Hash identifier: 3Lh8CcQLkBM6RLsGgJK8JUEYsubxpbViBgfSpHBxHS8=
Subject key identifier: 95:18:F2:BD:2B:3B:ED:95:6B:EE:26:87:5C:49:4A:85:4C:A9:D7:13
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F90063E980D3011477084621B4498836F
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lRjyvSs77ZVr7iaHXElKhUyp1xM.roa
Signing time: Thu 23 Jul 2026 17:29:15 +0000
ROA not before: Thu 23 Jul 2026 17:29:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147229
IP address blocks: 2.27.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:06:3e:98:0d:30:11:47:70:84:62:1b:44:98:83:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 23 17:29:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9518f2bd2b3bed956bee26875c494a854ca9d713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:66:a6:08:8c:58:35:47:7d:1d:dc:e2:3e:20:
a8:bf:74:6c:dd:bc:dd:69:ca:17:37:1e:0b:31:f0:
37:34:8a:35:be:1a:d0:bc:8e:b4:17:4f:34:c1:c9:
85:da:fc:e6:0c:70:81:5a:74:a7:70:5c:69:28:8f:
59:9d:4b:d4:21:a1:bc:c7:9e:3d:b2:0c:a6:70:95:
b2:4c:da:67:a2:f8:8a:b4:ab:88:26:f9:a0:45:c4:
21:07:65:7c:0a:e9:a7:ea:db:75:0a:db:8a:a5:39:
ff:c2:49:5e:ac:96:ce:e8:c9:5b:63:ce:87:ba:25:
72:fa:2e:68:71:aa:83:92:77:22:8a:f1:55:2e:2d:
99:cb:e5:fc:59:d0:20:3c:ba:10:8b:d4:75:76:6b:
d3:c7:d3:e8:d8:03:47:d3:38:e5:49:f5:fb:35:96:
e3:75:78:55:86:1f:b3:75:e4:26:15:67:a0:4f:8f:
ff:14:73:36:3e:c0:97:6f:73:ce:34:21:af:43:8f:
23:b9:76:66:b2:a7:4d:22:4b:46:53:12:12:0d:7c:
f7:33:ea:d4:18:93:52:13:d8:46:c1:95:78:60:d4:
ef:8a:9c:8d:b3:42:46:98:14:12:4d:0e:f7:22:e6:
d5:2a:6d:27:8b:27:c4:6b:d7:5d:d1:95:b4:f3:11:
08:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:18:F2:BD:2B:3B:ED:95:6B:EE:26:87:5C:49:4A:85:4C:A9:D7:13
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lRjyvSs77ZVr7iaHXElKhUyp1xM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.235.0/24
Signature Algorithm: sha256WithRSAEncryption
81:f3:99:6e:72:83:68:e5:0c:97:2b:e8:bf:b7:cd:46:6b:b7:
44:e4:23:b3:3e:e1:50:3c:c5:e4:8e:90:1e:bc:e2:e4:62:69:
d5:ef:9f:25:a6:6a:d6:30:f9:77:a4:ab:f5:e5:1f:dc:da:1b:
1d:35:0c:2e:e1:ad:75:ad:e1:dc:32:de:0d:05:92:f4:39:22:
87:7a:1f:70:41:ae:d7:15:41:7a:ca:e4:fb:73:95:31:97:d8:
50:57:ef:72:d1:c5:a7:73:de:c0:df:8a:d8:7a:cb:1c:49:71:
35:f8:98:42:bb:b0:76:b2:ea:44:b6:1f:58:56:37:b5:3a:04:
85:59:8d:26:93:93:c5:2b:dc:31:77:03:74:c3:6f:7d:99:6a:
ac:08:3f:a9:45:e7:5e:a7:6a:f9:43:66:9b:f0:10:c3:e5:cc:
a9:14:7f:91:b8:20:37:f8:47:45:8a:5e:6d:d6:ca:19:7a:dc:
5e:34:f1:00:2f:be:fa:e4:c5:65:2e:00:9a:75:f8:be:25:75:
2d:03:52:15:19:67:5f:42:21:e8:5d:f2:4b:bc:e8:a5:9e:bc:
73:97:fd:86:c1:0d:64:a0:e5:16:00:c2:67:71:c3:e6:f1:ed:
3f:5c:b8:5a:53:31:3a:fb:45:49:ce:5d:ad:9e:d3:b0:e9:d1:
bc:4f:3a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:43:11 2026 by rpki-client