Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5nT8ip-WvlnO9V2q-3uFd72Mdx8.roa
File: 5nT8ip-WvlnO9V2q-3uFd72Mdx8.roa (raw, json)
Hash identifier: R11wsS72TJzIlxGs7Bmq5in5MtObam2lpSoZUC6BOt8=
Subject key identifier: E6:74:FC:8A:9F:96:BE:59:CE:F5:5D:AA:FB:7B:85:77:BD:8C:77:1F
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1705E896ECD9D9CF88360453DE7663D65
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5nT8ip-WvlnO9V2q-3uFd72Mdx8.roa
Signing time: Sun 25 Oct 2026 00:03:26 +0000
ROA not before: Sun 25 Oct 2026 00:03:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203363
IP address blocks: 2.27.144.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:5e:89:6e:cd:9d:9c:f8:83:60:45:3d:e7:66:3d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 25 00:03:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e674fc8a9f96be59cef55daafb7b8577bd8c771f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ef:e5:54:e2:e4:b7:22:e5:6f:44:ef:1a:fe:
61:b1:76:24:c3:41:1d:0e:30:e9:12:f1:0e:d0:85:
64:b9:14:d6:6d:c0:cb:43:c1:32:16:55:2d:04:00:
23:28:0d:d3:5c:31:ae:64:d1:62:07:f5:23:ea:42:
c2:0f:d1:9a:db:33:2f:ec:06:11:68:96:31:fa:27:
b8:09:7e:93:36:42:bb:bf:6d:e8:66:e3:ba:b2:df:
b0:de:3d:73:16:81:d6:89:96:c3:1d:36:ab:94:f0:
30:14:d8:f4:c6:bd:d2:d4:12:eb:0b:ba:da:6c:94:
10:12:2c:e4:f7:b5:8f:92:5d:2f:d6:da:05:83:c1:
2e:95:94:75:49:a4:e9:cb:1c:9e:9f:04:5b:ad:1f:
bd:58:72:98:8f:a0:8a:df:fb:cf:4f:e7:bb:59:54:
ef:2f:c8:ec:a0:8b:ca:78:45:51:a9:fd:8a:6f:31:
ff:5b:dd:be:3f:74:78:37:7e:21:35:80:1e:c7:25:
13:d3:f7:2b:ed:3f:18:02:ee:b3:6d:b4:d6:b8:05:
e6:cf:ab:bc:53:e5:cc:09:d7:a8:7d:bd:12:81:cb:
88:f2:6a:51:34:af:50:36:66:1e:8c:63:60:19:26:
78:66:18:fe:d4:1d:8e:e5:03:d7:28:be:15:54:a7:
c4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:74:FC:8A:9F:96:BE:59:CE:F5:5D:AA:FB:7B:85:77:BD:8C:77:1F
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5nT8ip-WvlnO9V2q-3uFd72Mdx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.144.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:a1:37:35:21:46:ce:35:fd:90:b2:76:02:a6:14:96:fd:9b:
39:b2:70:ee:c6:c4:55:ce:18:97:ca:8c:78:8b:3f:3c:fa:77:
d2:2f:f7:d7:d3:3f:d2:3a:e3:bb:f4:71:e3:73:f2:8a:53:a9:
42:ca:e4:cb:5c:ab:7a:01:1c:35:ac:1f:1d:21:d9:32:1b:2f:
3b:a4:49:c5:c5:43:c0:d4:2e:28:64:6e:b8:09:04:64:e5:55:
a6:36:b3:b3:f6:dc:cf:64:f1:83:79:ba:19:da:92:9d:f3:a9:
1a:85:65:f1:21:60:81:b8:0b:43:c4:84:c5:bf:61:8b:c2:0b:
37:99:31:cb:14:8c:25:a0:4b:0a:f6:74:7e:4e:ad:74:35:25:
e9:53:38:17:c7:70:57:3d:ec:61:b2:8a:ed:29:11:04:bb:1d:
00:47:69:b7:03:38:25:2c:69:a8:5e:b5:de:21:12:11:5d:dc:
e5:b6:30:78:bb:87:16:e5:8d:df:2c:a8:d9:c1:f3:5b:e6:41:
b4:6c:fd:42:98:7e:16:08:e3:b3:fa:1c:10:9b:8c:45:91:c4:
30:9b:06:94:2d:3e:4c:18:7d:1f:f0:e2:c2:8b:a3:06:ce:61:
75:ad:a2:96:fa:30:59:8e:f1:05:96:40:5d:a9:85:42:df:1d:
51:17:fc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:29:16 2026 by rpki-client