Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/24G2zWF4TxYz7SFaJdg27oO4BfM.roa
File: 24G2zWF4TxYz7SFaJdg27oO4BfM.roa (raw, json)
Hash identifier: G/HedzEX/DXIJO7zAMr0zeCsEFGc/8nOXC6cVfZBgms=
Subject key identifier: DB:81:B6:CD:61:78:4F:16:33:ED:21:5A:25:D8:36:EE:83:B8:05:F3
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DAC45C75EA62E3BD118876C3733B1F3CD
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/24G2zWF4TxYz7SFaJdg27oO4BfM.roa
Signing time: Mon 20 Apr 2026 19:02:27 +0000
ROA not before: Mon 20 Apr 2026 19:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202413
IP address blocks: 2.27.59.0/24 maxlen: 24
2.27.61.0/24 maxlen: 24
144.31.12.0/24 maxlen: 24
144.31.136.0/24 maxlen: 24
144.31.191.0/24 maxlen: 24
144.31.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ac:45:c7:5e:a6:2e:3b:d1:18:87:6c:37:33:b1:f3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 20 19:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db81b6cd61784f1633ed215a25d836ee83b805f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ac:68:0d:b4:78:39:f2:c3:71:e7:7c:53:8a:
72:7c:89:c4:21:2b:42:55:b0:d4:e7:b9:bc:af:59:
75:79:ad:88:59:2e:70:a0:9b:12:1c:71:33:ec:9c:
e4:be:3b:37:2a:03:d6:d4:0b:e2:a5:41:c7:31:5b:
37:f8:c8:ff:8c:47:f2:ed:42:a7:c9:a8:00:5d:9a:
d1:e2:4d:4a:c6:7e:de:a8:e9:ee:56:cd:c4:1b:8e:
02:63:89:7c:09:e9:a6:ac:88:5a:83:c9:90:1c:b6:
7e:01:3b:52:ae:3e:1b:ff:22:d2:1a:a9:51:0a:32:
60:b3:c5:26:3c:97:10:9c:40:ed:8b:57:f3:20:a6:
b4:ea:3d:0e:2a:a8:45:b8:84:2a:c1:e4:06:f9:2f:
61:9a:f1:75:e8:7c:1b:fd:2b:bb:51:02:cc:6d:8d:
dc:98:34:ab:44:02:78:01:3c:fc:34:9a:06:8a:9b:
d6:e3:19:05:b5:56:43:0d:81:9f:b4:98:1f:7e:c6:
61:ae:aa:c1:ab:56:08:e3:68:2f:b5:89:7a:1d:29:
23:46:30:56:bc:e1:73:b9:77:54:49:fc:89:92:26:
6f:9d:b0:79:b6:f5:08:43:05:75:2c:95:eb:0e:b9:
05:a6:a6:07:92:0e:7a:a5:89:6b:9c:7c:8b:cc:36:
ab:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:81:B6:CD:61:78:4F:16:33:ED:21:5A:25:D8:36:EE:83:B8:05:F3
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/24G2zWF4TxYz7SFaJdg27oO4BfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.59.0/24
2.27.61.0/24
144.31.12.0/24
144.31.136.0/24
144.31.191.0/24
144.31.237.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:b3:5f:cc:7d:ab:08:90:76:77:f9:39:a3:58:82:4a:89:56:
5d:45:b4:0c:3f:68:76:e6:97:42:ea:f9:1a:e6:de:01:ac:41:
c9:03:c4:51:ac:39:ed:cd:ac:c3:e3:ae:42:eb:c3:e0:cf:23:
c4:57:ee:1f:7b:bd:4e:ce:b1:84:20:f7:81:fb:af:e5:99:ea:
75:ad:ce:9e:f9:33:f5:13:5a:b7:95:8f:68:96:21:dd:eb:5f:
dd:51:bf:f4:10:66:47:0a:e2:d3:a3:d4:aa:ef:a9:54:8d:2e:
7e:d7:a1:4e:1c:bd:bf:4a:8e:87:d7:c6:d6:43:e3:8b:bb:96:
ee:8c:fc:12:e4:6a:dd:b4:94:cc:0c:8a:69:92:cd:bf:cd:52:
66:14:e3:cf:d5:1d:75:cc:33:b4:82:9f:61:63:10:90:98:d1:
41:dd:64:96:45:ec:b6:2e:2f:50:04:85:5f:59:5b:2c:be:5c:
9b:64:90:71:0c:0e:63:cf:23:6a:8c:dc:35:dd:c6:b0:68:e8:
1d:2a:8d:e5:9a:49:ff:1c:ac:3e:c6:5c:fe:26:97:d4:be:25:
23:4b:14:84:25:7b:5e:b1:61:e4:ca:b0:fe:93:e7:67:36:ce:
82:36:bc:1c:dd:ef:96:50:50:a4:71:63:e0:9b:6f:bb:d5:f2:
90:72:88:ef
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZ2sRcdepi470RiHbDczsfPNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNDIwMTkwMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjgxYjZjZDYxNzg0ZjE2MzNlZDIxNWEyNWQ4MzZlZTgzYjgwNWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqxoDbR4OfLDced8U4pyfInEIStC
VbDU57m8r1l1ea2IWS5woJsSHHEz7Jzkvjs3KgPW1AvipUHHMVs3+Mj/jEfy7UKn
yagAXZrR4k1Kxn7eqOnuVs3EG44CY4l8CemmrIhag8mQHLZ+ATtSrj4b/yLSGqlR
CjJgs8UmPJcQnEDti1fzIKa06j0OKqhFuIQqweQG+S9hmvF16Hwb/Su7UQLMbY3c
mDSrRAJ4ATz8NJoGipvW4xkFtVZDDYGftJgffsZhrqrBq1YI42gvtYl6HSkjRjBW
vOFzuXdUSfyJkiZvnbB5tvUIQwV1LJXrDrkFpqYHkg56pYlrnHyLzDarIwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFNuBts1heE8WM+0hWiXYNu6DuAXzMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvMjRHMnpXRjRUeFl6N1NGYUpkZzI3b080QmZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAAhs7AwQA
Ahs9AwQAkB8MAwQAkB+IAwQAkB+/AwQAkB/tMA0GCSqGSIb3DQEBCwUAA4IBAQB7
s1/MfasIkHZ3+TmjWIJKiVZdRbQMP2h25pdC6vka5t4BrEHJA8RRrDntzazD465C
68PgzyPEV+4fe71OzrGEIPeB+6/lmep1rc6e+TP1E1q3lY9oliHd61/dUb/0EGZH
CuLTo9Sq76lUjS5+16FOHL2/So6H18bWQ+OLu5bujPwS5GrdtJTMDIppks2/zVJm
FOPP1R11zDO0gp9hYxCQmNFB3WSWRey2Li9QBIVfWVssvlybZJBxDA5jzyNqjNw1
3cawaOgdKo3lmkn/HKw+xlz+JpfUviUjSxSEJXtesWHkyrD+k+dnNs6CNrwc3e+W
UFCkcWPgm2+71fKQcojv
-----END CERTIFICATE-----
Generated at Wed Apr 22 09:40:54 2026 by rpki-client