Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xp0UoOyXrnoQOlGjr0XVgOi1N3A.roa
File: xp0UoOyXrnoQOlGjr0XVgOi1N3A.roa (raw, json)
Hash identifier: v6G47p4oUicCPJKHBkMrDcPiDDiXgil/sA95s/Vs6g0=
Subject key identifier: C6:9D:14:A0:EC:97:AE:7A:10:3A:51:A3:AF:45:D5:80:E8:B5:37:70
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F42FB7963C94B985E0F1A69E54EDBE3FE
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xp0UoOyXrnoQOlGjr0XVgOi1N3A.roa
Signing time: Wed 08 Jul 2026 18:26:44 +0000
ROA not before: Wed 08 Jul 2026 18:26:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 2.27.96.0/24 maxlen: 24
2.27.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:fb:79:63:c9:4b:98:5e:0f:1a:69:e5:4e:db:e3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 8 18:26:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c69d14a0ec97ae7a103a51a3af45d580e8b53770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f9:b1:c5:a4:62:76:44:26:ff:da:60:10:51:
dd:70:54:c0:08:11:4f:d1:91:99:84:4c:ee:02:36:
52:63:19:61:a7:69:48:6b:46:00:bd:30:a6:74:27:
62:8a:31:2a:ac:50:a1:d3:b0:16:eb:08:d3:0f:65:
ff:1e:39:5a:c0:9d:cf:c2:04:ed:71:2a:55:f8:af:
fd:ef:42:69:ea:7a:27:fb:53:f7:5f:b2:11:e3:94:
7e:96:98:d8:5b:0e:20:37:93:59:82:c8:28:7d:67:
75:54:77:a8:df:8b:eb:f5:7c:d4:17:1a:44:b9:d7:
81:f2:91:d1:e6:c4:23:9b:2d:11:a4:9c:19:31:db:
9c:2e:58:df:bf:02:de:3e:f4:1f:f0:b0:eb:fe:cf:
32:b9:12:19:7a:fb:ec:b0:16:80:6f:ee:bc:aa:8f:
99:67:91:50:49:6b:f5:7f:cb:d8:05:4b:02:4c:73:
4c:06:08:ac:3f:38:61:f2:2f:ea:94:ad:81:48:61:
fc:de:c2:7e:06:9d:91:54:ea:5f:05:2a:04:02:af:
00:21:c3:38:15:3d:bc:4f:ff:07:74:d5:86:9d:40:
93:64:c0:c8:23:83:da:d8:02:5f:99:b1:79:b9:0c:
81:04:9f:68:de:c8:ce:29:b8:18:04:0b:26:82:75:
2e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9D:14:A0:EC:97:AE:7A:10:3A:51:A3:AF:45:D5:80:E8:B5:37:70
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xp0UoOyXrnoQOlGjr0XVgOi1N3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.96.0/24
2.27.110.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:e7:57:7a:60:90:3e:7b:8f:00:bb:4b:e3:92:9d:e2:10:f3:
fa:f3:d7:f0:95:b2:9e:07:ad:b9:25:49:76:69:f6:1c:6c:a8:
05:e1:a4:ca:e6:3a:64:bc:e3:4c:c6:21:96:d8:21:a8:7a:d8:
86:ae:84:bd:a3:87:3f:54:2f:54:d5:9e:47:94:c3:f6:1a:78:
32:14:8e:99:f7:3f:01:74:43:a8:e1:6c:16:10:fe:23:ac:42:
e1:f4:3e:97:22:df:3d:6e:31:16:30:c5:23:2a:65:59:8b:f9:
27:99:11:97:94:a3:aa:7a:d8:d1:61:17:01:65:ad:ac:b0:f2:
73:cf:61:62:c7:aa:81:f3:c7:c2:bc:50:70:2f:98:a0:d6:9c:
d2:eb:c6:51:66:4a:f8:3a:98:bc:3d:10:fc:90:79:0b:0f:9d:
05:05:2e:9e:b5:de:09:2d:ad:31:7f:73:8b:fa:4d:fb:29:6b:
a4:c3:93:8f:e2:0b:eb:9e:0e:1e:f5:53:28:8e:92:ae:6a:10:
56:a5:17:fd:bc:e9:22:d2:9c:cf:7f:da:ca:89:81:25:4c:54:
d8:f1:83:5f:8a:0c:ef:83:04:66:5b:51:58:bb:f1:0d:34:0b:
8f:20:ce:bb:b2:13:d9:4f:f4:e7:9d:07:72:55:fc:e9:d1:4f:
fd:59:ec:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:41:08 2026 by rpki-client