Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rZknYA2LNUY_V2JStn5SCx1bxQI.roa
File: rZknYA2LNUY_V2JStn5SCx1bxQI.roa (raw, json)
Hash identifier: NX7PbI2KIBfTxeAYoMqe9wH4bxusEwNMivG5sqD76Z4=
Subject key identifier: AD:99:27:60:0D:8B:35:46:3F:57:62:52:B6:7E:52:0B:1D:5B:C5:02
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D25B1C10C3B92130880D74353F3A013FE
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rZknYA2LNUY_V2JStn5SCx1bxQI.roa
Signing time: Wed 25 Mar 2026 15:51:39 +0000
ROA not before: Wed 25 Mar 2026 15:51:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213618
IP address blocks: 2.27.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:b1:c1:0c:3b:92:13:08:80:d7:43:53:f3:a0:13:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 25 15:51:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad9927600d8b35463f576252b67e520b1d5bc502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:53:7b:9f:ac:fe:51:f2:54:36:4b:0b:4b:
fb:0e:45:37:0f:0c:09:b1:00:44:aa:ef:c1:86:42:
7b:54:bf:f8:46:44:63:16:f6:b9:dd:c8:94:b6:d2:
82:ec:61:ca:5a:c3:e8:3e:f7:df:3f:b7:72:6f:ea:
e5:de:ec:c1:05:89:ad:07:05:be:b9:51:53:5b:12:
c7:1a:2f:ee:25:22:df:3d:f6:ec:98:a8:f5:ea:a9:
45:8f:a4:97:2b:af:4b:73:2c:75:00:79:90:60:d3:
60:08:13:7b:0b:a1:fd:31:84:85:99:7d:aa:b2:ac:
87:ee:c5:8d:5e:c9:80:a2:0f:84:f3:39:de:e2:38:
ee:e5:78:2c:46:88:0f:4c:23:42:65:42:4e:e5:9d:
5c:50:aa:4f:1a:2b:d9:ae:9a:b9:88:6d:52:34:de:
d4:78:f6:9d:db:e9:20:c3:f0:7c:fa:10:1f:d0:9d:
82:63:b2:0a:a9:5e:66:b5:7c:f4:b4:1a:39:7c:47:
c5:c4:03:15:86:30:2c:6e:90:a7:01:11:e6:8f:a8:
fd:69:a8:ba:24:51:42:36:34:06:b2:ac:f2:1b:bd:
a2:01:3a:34:b8:40:87:df:e9:16:a7:fc:a4:72:ca:
5d:16:ce:93:97:f6:90:2f:08:c9:01:2a:e4:78:bf:
65:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:99:27:60:0D:8B:35:46:3F:57:62:52:B6:7E:52:0B:1D:5B:C5:02
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rZknYA2LNUY_V2JStn5SCx1bxQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.115.0/24
Signature Algorithm: sha256WithRSAEncryption
41:62:48:f3:20:b6:9f:40:f7:e5:29:ba:52:41:62:7a:b6:fa:
de:fd:7d:16:0f:99:28:d0:12:50:3e:c8:a8:59:f3:54:ba:05:
07:83:27:42:44:1e:f4:af:6e:ac:1b:2f:18:8e:e0:a1:b5:6e:
cd:13:e1:7b:02:2d:53:b7:dd:8e:89:de:97:36:0b:57:d8:ec:
23:2a:ef:9c:f0:2d:d9:af:10:d8:2a:11:3d:74:cc:cd:89:f0:
c8:36:75:09:28:29:3f:cd:0a:1e:e7:9e:06:3d:94:6e:be:c4:
87:71:78:78:60:f8:21:b0:24:5a:d5:fb:f4:06:b9:67:65:d3:
71:7a:b5:87:62:5d:4b:f1:ab:92:d8:c2:38:8a:4c:7a:25:47:
f2:25:a3:a7:cc:63:55:9f:bc:51:3a:a5:a8:32:a9:c9:ad:f4:
b5:2f:7e:51:88:0b:76:2c:f4:08:de:95:0f:82:d5:bd:a0:94:
ac:c1:0c:88:4b:0c:ad:20:95:ab:bc:f0:6c:10:c6:e7:5c:62:
ab:b1:a5:11:cc:64:59:27:eb:58:14:ef:6f:0b:a1:f0:a6:88:
4a:50:c0:56:00:67:97:77:61:75:a5:b4:45:f2:94:63:d6:69:
9f:a1:a7:74:10:97:f7:dc:32:fa:38:48:0b:2f:5f:67:de:fb:
b8:18:26:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:18:22 2026 by rpki-client