Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9ho0lIiaGtDKI55hMLKIKDVvF5A.roa
File: 9ho0lIiaGtDKI55hMLKIKDVvF5A.roa (raw, json)
Hash identifier: u/ASXOSbuNZtPtODLCWGy0EDCTAZikwOImaM0KORBlI=
Subject key identifier: F6:1A:34:94:88:9A:1A:D0:CA:23:9E:61:30:B2:88:28:35:6F:17:90
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1364061BE54FA4D4FE79DA5B5B69CAAA7
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9ho0lIiaGtDKI55hMLKIKDVvF5A.roa
Signing time: Tue 13 Oct 2026 17:12:31 +0000
ROA not before: Tue 13 Oct 2026 17:12:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207461
IP address blocks: 2.27.76.0/24 maxlen: 24
2.27.77.0/24 maxlen: 24
2.27.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:40:61:be:54:fa:4d:4f:e7:9d:a5:b5:b6:9c:aa:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 13 17:12:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f61a3494889a1ad0ca239e6130b28828356f1790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:b1:57:2d:f1:25:58:8d:57:24:20:7c:3c:
c2:c5:8b:71:85:9f:f0:20:d0:38:a8:17:2d:f0:ee:
5e:63:76:7b:f5:b6:db:fc:c9:ff:f8:91:b2:d9:8b:
40:40:62:61:cc:39:e2:76:b8:61:66:14:a3:39:49:
5c:cb:26:c4:c1:e1:40:51:1c:71:9d:ff:1f:3a:23:
d6:e6:df:f9:c6:24:45:ce:7a:b9:46:9c:d2:92:36:
94:26:cd:dc:29:fd:d8:71:62:63:b3:51:00:e3:f0:
ba:1e:fe:47:b2:ce:38:da:81:a9:94:74:d0:46:f4:
57:f5:8d:dc:7a:7d:92:c7:aa:3a:78:61:09:c7:a8:
45:91:91:e0:6f:b9:d7:f9:bd:cc:8d:ca:0d:ab:ff:
90:79:e5:3b:49:b0:50:33:01:08:c4:bd:6b:a5:23:
6d:a1:a1:6e:d2:8c:10:12:1c:06:e2:d9:88:3e:fc:
a6:73:14:f2:fd:1a:6b:4c:97:6b:85:ed:dc:6b:93:
67:b3:88:25:6b:33:60:62:a7:70:94:2a:fb:81:ef:
0b:b8:37:98:78:59:b2:c8:c2:2f:e4:be:f1:6c:69:
f3:89:d3:70:f9:b2:04:41:65:5f:fc:a2:f7:4f:bd:
1c:0c:80:08:04:74:c4:b1:ab:7b:d4:3a:87:d6:c0:
55:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1A:34:94:88:9A:1A:D0:CA:23:9E:61:30:B2:88:28:35:6F:17:90
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9ho0lIiaGtDKI55hMLKIKDVvF5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.76.0/23
2.27.80.0/24
Signature Algorithm: sha256WithRSAEncryption
04:84:79:77:d1:e0:28:2f:15:3c:7f:92:6a:b6:d6:fa:e2:2a:
f9:3f:70:2b:45:91:30:f4:e8:4c:f8:87:85:7d:28:d7:18:ae:
84:f0:64:0f:ba:49:ce:ce:cf:e9:6f:c7:be:ec:ca:9c:37:02:
9f:32:59:13:9a:e4:06:1c:c8:14:5d:2f:14:a5:a0:cd:e2:8b:
1e:64:c8:4f:e2:a4:c4:cb:a0:60:47:de:b8:fb:ae:5c:5a:68:
99:aa:be:49:13:34:1e:fc:23:a2:51:ec:17:99:3a:e4:fb:67:
61:88:48:77:0e:3a:2f:d3:09:d6:bd:b6:ac:1b:c8:52:e7:81:
40:3f:3e:1a:5d:4b:10:ef:2b:ef:9e:0f:df:a8:df:06:2c:77:
76:7d:fe:2a:f3:7d:11:eb:d4:3c:12:b1:77:a8:b7:cf:5f:59:
95:64:33:ab:e7:2c:8c:e1:61:84:fa:f8:88:fa:56:6e:8b:06:
25:55:55:5e:e4:d3:e8:0d:db:a3:75:3b:17:b1:b8:96:f2:7b:
66:b7:b4:b5:49:5a:1e:98:78:2a:d2:01:f5:aa:17:a2:8d:ac:
34:cf:6a:36:03:42:18:78:e6:7c:95:ed:bd:13:0a:39:bd:68:
6a:67:ae:ac:8b:9e:61:17:23:2b:e6:61:94:c1:fd:6a:1f:93:
79:29:8a:66
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaE2QGG+VPpNT+edpbW2nKqnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYxMDEzMTcxMjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjFhMzQ5NDg4OWExYWQwY2EyMzllNjEzMGIyODgyODM1NmYxNzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+WxVy3xJViNVyQgfDzCxYtxhZ/w
INA4qBct8O5eY3Z79bbb/Mn/+JGy2YtAQGJhzDnidrhhZhSjOUlcyybEweFAURxx
nf8fOiPW5t/5xiRFznq5RpzSkjaUJs3cKf3YcWJjs1EA4/C6Hv5Hss442oGplHTQ
RvRX9Y3cen2Sx6o6eGEJx6hFkZHgb7nX+b3MjcoNq/+QeeU7SbBQMwEIxL1rpSNt
oaFu0owQEhwG4tmIPvymcxTy/RprTJdrhe3ca5Nns4glazNgYqdwlCr7ge8LuDeY
eFmyyMIv5L7xbGnzidNw+bIEQWVf/KL3T70cDIAIBHTEsat71DqH1sBVCwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPYaNJSImhrQyiOeYTCyiCg1bxeQMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvOWhvMGxJaWFHdERLSTU1aE1MS0lLRFZ2RjVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBAhtMAwQA
AhtQMA0GCSqGSIb3DQEBCwUAA4IBAQAEhHl30eAoLxU8f5Jqttb64ir5P3ArRZEw
9OhM+IeFfSjXGK6E8GQPuknOzs/pb8e+7MqcNwKfMlkTmuQGHMgUXS8UpaDN4ose
ZMhP4qTEy6BgR964+65cWmiZqr5JEzQe/COiUewXmTrk+2dhiEh3Djov0wnWvbas
G8hS54FAPz4aXUsQ7yvvng/fqN8GLHd2ff4q830R69Q8ErF3qLfPX1mVZDOr5yyM
4WGE+viI+lZuiwYlVVVe5NPoDdujdTsXsbiW8ntmt7S1SVoemHgq0gH1qheijaw0
z2o2A0IYeOZ8le29Ewo5vWhqZ66si55hFyMr5mGUwf1qH5N5KYpm
-----END CERTIFICATE-----
Generated at Tue Oct 27 23:03:38 2026 by rpki-client