Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/sxqNNdwXrzGtYF14Nzx7bT4gEVM.roa
File: sxqNNdwXrzGtYF14Nzx7bT4gEVM.roa (raw, json)
Hash identifier: g5c4HPnCutsYz/MEusHKx9UpY5RiS6nXip7lwoaPiw0=
Subject key identifier: B3:1A:8D:35:DC:17:AF:31:AD:60:5D:78:37:3C:7B:6D:3E:20:11:53
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D11F5BC877104634D9ED67DE0993692A0
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/sxqNNdwXrzGtYF14Nzx7bT4gEVM.roa
Signing time: Sat 21 Mar 2026 19:53:30 +0000
ROA not before: Sat 21 Mar 2026 19:53:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201907
IP address blocks: 2.27.218.0/23 maxlen: 24
2.27.220.0/23 maxlen: 24
2.27.222.0/23 maxlen: 24
144.31.32.0/24 maxlen: 24
144.31.34.0/24 maxlen: 24
144.31.37.0/24 maxlen: 24
144.31.38.0/24 maxlen: 24
144.31.39.0/24 maxlen: 24
144.31.40.0/24 maxlen: 24
144.31.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:11:f5:bc:87:71:04:63:4d:9e:d6:7d:e0:99:36:92:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 21 19:53:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b31a8d35dc17af31ad605d78373c7b6d3e201153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:61:c4:b1:7c:d1:83:b2:e2:01:1a:62:5c:
bd:b2:9a:5b:5f:f1:1e:37:6d:50:d3:0f:79:e5:11:
bf:f2:c4:ce:c8:48:84:a7:7b:b4:fe:4f:f1:28:3a:
5f:48:9a:8f:d4:bb:74:e0:4e:5c:b5:f0:a6:1b:d2:
6c:28:2d:b0:1c:a5:77:00:6a:b2:8f:16:da:57:d6:
62:32:40:1d:c3:72:6a:35:48:af:fd:83:d4:a6:69:
4e:43:69:fa:3f:54:79:a7:ce:bf:6d:75:6d:3e:cb:
ed:3b:81:f2:44:9b:a3:c0:3d:5b:81:ac:1a:f6:fe:
24:15:24:a8:92:94:45:3d:08:80:7a:99:37:39:37:
63:f7:9d:2d:8a:75:b0:39:fa:48:12:77:51:99:5e:
ea:a3:1c:af:40:1a:da:be:96:44:9c:c3:17:e1:46:
fe:e7:d2:39:f7:c7:fa:ad:e9:25:f3:8e:6b:4d:e9:
7d:ad:a0:7a:8b:03:76:ae:01:d6:8a:c2:46:86:c7:
da:9a:eb:65:c0:69:63:44:09:04:08:80:51:c3:84:
51:72:6a:cf:ff:b2:30:66:0f:55:47:1b:70:a3:4a:
2d:d6:14:10:a5:02:49:3c:a4:e3:8f:e7:c2:89:d5:
4b:03:e9:96:c5:c9:72:a8:04:cf:36:54:48:ec:15:
a7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1A:8D:35:DC:17:AF:31:AD:60:5D:78:37:3C:7B:6D:3E:20:11:53
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/sxqNNdwXrzGtYF14Nzx7bT4gEVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.218.0-2.27.223.255
144.31.32.0/24
144.31.34.0/24
144.31.37.0-144.31.40.255
144.31.43.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:04:11:fa:d0:5b:26:11:f1:ba:08:80:61:18:44:90:57:d5:
e8:75:ea:2f:c1:bf:80:e2:0b:43:57:8a:51:25:c4:66:6e:ec:
d0:0e:6c:4a:53:80:e8:bc:c3:47:07:cd:45:6b:86:01:ea:ba:
72:f2:73:43:93:a7:34:0f:e7:e6:53:55:6b:6e:6b:d2:f7:dd:
8f:a3:fe:e9:c7:14:c4:5f:ca:78:d2:88:7a:10:e4:9d:72:6b:
4a:92:7d:b0:ef:0c:c6:28:00:e2:5e:ba:1b:e0:45:43:76:cd:
91:39:ef:c6:28:f9:0c:81:b9:a7:ab:72:65:44:c3:ad:54:33:
49:f6:72:d5:44:0f:5e:10:0a:76:97:2f:b5:09:03:d0:f8:9f:
c8:11:b1:45:ea:6b:8e:e7:8d:a9:18:5e:c8:4a:b3:9c:3c:43:
1c:1f:35:61:eb:6c:e8:8f:ae:a9:33:e9:c6:ee:80:68:6d:9c:
02:03:9d:d3:f5:0f:a6:d3:50:74:9b:9e:20:e2:cb:d8:68:4a:
f9:f2:4d:e9:44:b4:b4:73:72:80:06:98:2a:72:a3:8a:01:d5:
8b:a9:4b:7a:4b:15:4b:06:5d:5b:ec:60:96:fa:e2:06:18:c6:
e7:78:43:98:a5:7a:1f:ab:62:61:84:83:ad:f3:97:97:82:31:
ce:96:8e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:40:47 2026 by rpki-client