Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5i_9-ktwYKT5GAa0c1VNf1EdQnU.roa
File: 5i_9-ktwYKT5GAa0c1VNf1EdQnU.roa (raw, json)
Hash identifier: LTety8+O4n9sNXb3jg1TrI8GT05EjaLc7FXNTeVeikY=
Subject key identifier: E6:2F:FD:FA:4B:70:60:A4:F9:18:06:B4:73:55:4D:7F:51:1D:42:75
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A06B758FE9543F6D22E4F027507632FAB5
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5i_9-ktwYKT5GAa0c1VNf1EdQnU.roa
Signing time: Fri 04 Sep 2026 08:07:41 +0000
ROA not before: Fri 04 Sep 2026 08:07:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201283
IP address blocks: 2.27.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:75:8f:e9:54:3f:6d:22:e4:f0:27:50:76:32:fa:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 4 08:07:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e62ffdfa4b7060a4f91806b473554d7f511d4275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:cd:a0:e2:11:ff:7a:5e:f9:c7:f0:5d:65:
6a:9b:ee:ed:99:59:66:dc:4a:9c:6e:8f:5f:6d:8f:
06:5f:da:68:ea:cc:37:52:45:9c:9f:60:07:e3:c9:
70:2d:1d:b3:8b:f8:b6:1a:d5:10:86:17:ad:08:8f:
f4:76:fd:c4:bb:45:68:aa:46:93:61:59:f9:15:b1:
fd:5e:61:db:33:2c:46:e6:20:89:99:c2:92:91:28:
6e:df:fa:da:b2:db:ad:8c:99:9b:9f:7a:a6:58:48:
19:52:56:f7:48:ee:dc:65:9c:1a:1c:4a:ba:27:18:
79:d3:0c:35:7a:93:b9:52:ed:e7:3f:05:9c:b9:61:
cf:cb:ef:81:b4:87:50:5c:39:ec:64:0a:c1:d9:4c:
53:f1:c3:f2:83:51:18:9c:e6:51:ab:30:72:5e:8a:
54:7a:bc:f9:ea:55:75:a2:7f:ad:78:da:4d:a0:d5:
22:c5:7f:92:70:03:a1:25:d0:8b:bc:23:9a:0a:fa:
8c:7b:77:66:8d:92:d3:43:cd:5f:a1:d2:f8:4d:bc:
d0:82:e7:6a:54:70:4c:df:2e:0b:e2:0e:09:ea:7c:
9b:e2:95:08:88:ff:49:fb:c7:b7:ee:f9:87:ed:ec:
9d:f3:03:ec:48:ec:d1:99:ae:49:96:ad:e2:3f:3c:
da:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2F:FD:FA:4B:70:60:A4:F9:18:06:B4:73:55:4D:7F:51:1D:42:75
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5i_9-ktwYKT5GAa0c1VNf1EdQnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.119.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:9f:db:54:67:86:f9:22:cf:08:c5:c3:ad:f2:27:7a:f4:9a:
1b:a2:54:21:e7:f9:52:2f:97:d4:f0:b7:3b:35:bd:e4:a8:bb:
d1:4a:56:e1:73:ea:64:84:34:7b:eb:a9:0b:68:fb:37:ef:2f:
d0:8b:d7:4c:5c:64:54:5f:47:29:eb:c5:aa:2b:2c:ce:55:2a:
f5:2a:0c:11:5d:b5:3a:21:06:3d:f1:29:1b:d6:e7:a7:08:c6:
4e:d4:ff:a4:2a:ae:95:40:13:c0:09:35:1a:b4:e3:f3:f4:68:
9f:79:a8:6f:70:2c:7e:f5:d0:6c:d7:80:b7:a6:18:fa:d7:eb:
6b:ba:68:9e:4a:84:aa:2f:51:71:e5:d0:2b:f7:65:62:95:c0:
94:a2:78:ed:92:37:f3:11:fd:68:1d:9a:f8:c4:18:5a:96:35:
3a:e7:72:12:e0:c4:9d:23:3e:2f:c5:3c:83:83:fe:57:e0:21:
91:a4:57:c2:b1:c4:7f:b4:bc:41:93:17:9e:70:5f:12:e2:b7:
10:a5:66:3d:48:48:32:28:dd:67:d0:ca:0c:ca:03:eb:39:73:
28:a9:fa:8f:48:52:e8:02:53:88:7e:10:a4:25:e3:d7:28:48:
8d:6b:45:62:f2:67:d4:eb:86:cf:ec:99:09:8b:87:ca:be:9c:
f2:de:05:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:21 2026 by rpki-client