Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/l_Vf9Gppgwm0hMApcHAPem6W7HU.roa
File: l_Vf9Gppgwm0hMApcHAPem6W7HU.roa (raw, json)
Hash identifier: yj+tQrbQNMMrxVmf7I2blQ4FA2zu39T56FqNURTc24w=
Subject key identifier: 97:F5:5F:F4:6A:69:83:09:B4:84:C0:29:70:70:0F:7A:6E:96:EC:75
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D25AFEBAD9C50976B0AEDCEB4542DBEA0
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/l_Vf9Gppgwm0hMApcHAPem6W7HU.roa
Signing time: Wed 25 Mar 2026 15:49:39 +0000
ROA not before: Wed 25 Mar 2026 15:49:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209630
IP address blocks: 2.27.106.0/24 maxlen: 24
2.27.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:af:eb:ad:9c:50:97:6b:0a:ed:ce:b4:54:2d:be:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 25 15:49:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97f55ff46a698309b484c02970700f7a6e96ec75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0c:9b:45:f9:e2:09:de:e2:14:e8:a6:aa:47:
22:77:31:a6:a1:23:94:ff:db:57:c4:9b:84:28:56:
17:55:eb:d3:62:71:5d:c8:13:6e:d4:e7:61:4f:3e:
18:20:ce:af:32:14:8e:ab:0c:e8:e1:d1:b5:9b:c2:
d1:30:fd:a4:31:bc:cb:44:ff:ad:da:c7:e3:85:6a:
8c:34:59:05:1a:31:49:c2:bb:79:5a:0c:22:cd:1a:
e6:1e:4d:8c:d4:76:64:fb:c0:c2:c1:4f:63:b6:7b:
3e:56:bc:65:c2:80:35:36:f7:6e:4d:98:1c:fe:88:
db:8d:22:22:84:bd:43:80:4c:fc:88:0b:62:79:01:
50:23:5f:a7:1d:5a:db:cb:8e:d5:36:32:a7:6d:0a:
cb:6e:b8:42:9e:a9:32:b9:5f:8b:c3:56:fb:b2:c6:
d9:77:e2:8d:7c:ef:4f:b7:ae:aa:ae:eb:40:64:3e:
33:df:e2:ef:61:c3:36:cc:73:03:7e:eb:35:30:f5:
7b:30:1e:f1:81:3f:9d:13:91:0f:b6:4d:55:d5:c3:
4d:e0:92:96:7d:e3:d2:b7:dd:2d:48:26:65:31:1d:
ab:c8:8f:7b:dc:d9:d3:64:ff:b1:1a:a0:00:a2:6e:
84:d5:4d:6c:2c:c1:a4:e9:e7:66:68:8d:7b:d5:b4:
cf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F5:5F:F4:6A:69:83:09:B4:84:C0:29:70:70:0F:7A:6E:96:EC:75
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/l_Vf9Gppgwm0hMApcHAPem6W7HU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.106.0/24
2.27.116.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:ce:fe:94:0b:2e:11:6a:76:87:9b:c5:c4:f8:73:18:91:c8:
6b:8d:0a:55:8f:43:52:13:fe:9e:72:43:77:12:7d:b7:aa:5a:
a4:8b:bf:18:ac:ba:10:08:39:38:1a:04:e7:03:79:3c:52:d1:
87:77:e4:eb:44:f1:86:7c:ef:1c:b8:b0:ea:74:88:c9:e7:34:
55:69:b4:bb:62:c9:07:27:0e:2f:d2:94:39:88:28:0b:d9:37:
2a:fd:30:94:ef:fd:cc:f3:33:3f:74:24:0b:fd:ce:11:6d:26:
ae:86:0c:74:52:ec:81:9b:4b:3f:bb:88:db:90:26:36:56:52:
d8:61:39:79:1b:90:ac:03:d7:db:6f:0d:f1:69:df:5b:a2:d1:
c8:f4:81:ed:7b:2b:ea:47:12:82:90:f1:18:01:0c:1b:f1:ca:
d9:9c:d8:a9:1f:16:8e:7f:a3:3c:fc:38:2f:16:5b:04:24:17:
22:fa:8c:1a:c3:f5:70:5c:9d:6a:99:2e:c3:23:77:70:5b:9c:
8a:56:3c:59:b7:c5:85:67:31:1b:79:47:2d:fd:a0:28:44:fd:
4b:6f:7b:88:b7:d8:64:99:e5:59:e9:cf:52:94:18:96:f7:4b:
5b:7a:d9:5c:96:a7:e3:0e:bd:cc:59:33:9c:fe:bd:68:1b:9b:
44:74:72:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:18:28 2026 by rpki-client