Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7OfLCuNiJwQL3x0vDKEY4IuFPwc.roa
File: 7OfLCuNiJwQL3x0vDKEY4IuFPwc.roa (raw, json)
Hash identifier: aT2A9lXC46q2XgwXFlfmDZtomWv6C2BjJ0qQtQVUuEA=
Subject key identifier: EC:E7:CB:0A:E3:62:27:04:0B:DF:1D:2F:0C:A1:18:E0:8B:85:3F:07
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A188CFECBA73E9C9FFF2C640CFB7C91404
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7OfLCuNiJwQL3x0vDKEY4IuFPwc.roa
Signing time: Thu 29 Oct 2026 17:58:10 +0000
ROA not before: Thu 29 Oct 2026 17:58:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219443
IP address blocks: 2.27.241.0/24 maxlen: 24
13.143.140.0/24 maxlen: 24
13.143.169.0/24 maxlen: 24
177.1.190.0/24 maxlen: 24
177.1.191.0/24 maxlen: 24
177.1.193.0/24 maxlen: 24
177.1.194.0/24 maxlen: 24
177.1.196.0/24 maxlen: 24
177.1.197.0/24 maxlen: 24
191.217.236.0/24 maxlen: 24
191.217.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:cf:ec:ba:73:e9:c9:ff:f2:c6:40:cf:b7:c9:14:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 29 17:58:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ece7cb0ae36227040bdf1d2f0ca118e08b853f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:ae:22:fc:36:7f:68:91:85:21:b4:13:66:
bc:45:29:a6:08:c7:29:50:23:ee:2e:78:93:11:e9:
a8:48:1c:c1:f0:78:ac:43:e0:9e:c4:51:78:a5:19:
ab:31:94:1e:65:5c:78:46:1e:ee:12:13:06:92:5b:
d3:59:fe:83:54:96:9f:79:1d:fe:37:7c:b1:4d:f1:
75:45:5f:b3:85:c4:6f:61:71:ed:f6:4c:c8:10:15:
90:5a:0d:40:7f:70:9c:e3:45:8b:af:ef:df:33:13:
ea:55:f6:fe:1b:94:41:98:a2:62:be:b1:ad:be:69:
5f:2f:05:4c:ad:e1:90:8b:f8:b1:04:0c:d5:3c:d5:
3f:a7:6a:ad:78:53:3c:14:86:d5:fd:ed:90:86:8a:
f4:4f:d9:64:57:b8:05:16:b4:b0:3f:7c:14:9b:8c:
20:74:d0:54:57:52:e8:1e:f1:d9:59:a4:b2:99:ea:
ad:c8:ae:0f:a3:c9:5d:6d:dd:aa:1c:58:97:d0:ff:
21:33:d4:cc:e8:78:58:c3:02:8e:d3:0a:8b:de:e7:
5f:83:d1:5e:b3:cc:d0:47:6d:16:bf:cc:4c:45:bd:
dd:b4:02:9e:49:fa:a7:cf:a3:63:23:89:21:2e:f5:
da:f4:2d:03:d8:03:7f:84:bf:5e:96:89:04:0d:78:
9d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E7:CB:0A:E3:62:27:04:0B:DF:1D:2F:0C:A1:18:E0:8B:85:3F:07
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7OfLCuNiJwQL3x0vDKEY4IuFPwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.241.0/24
13.143.140.0/24
13.143.169.0/24
177.1.190.0/23
177.1.193.0-177.1.194.255
177.1.196.0/23
191.217.236.0/24
191.217.242.0/24
Signature Algorithm: sha256WithRSAEncryption
99:7b:f2:55:47:f2:20:8e:a6:34:59:8d:02:36:d8:e1:22:84:
b9:80:50:99:5c:2b:ce:1c:ba:d4:17:d1:5a:7e:bf:60:78:52:
15:89:1b:63:9e:0f:a1:1a:ae:4b:ed:ec:fb:1d:62:2b:cf:14:
52:9d:26:3a:ba:e7:c2:80:4b:19:80:d3:9c:b6:c0:01:bf:8a:
5b:dc:ea:a6:02:34:ec:b7:66:41:5c:a3:1e:73:56:97:1a:f9:
6d:61:2e:1d:12:33:7e:91:a0:20:fc:61:dd:f8:c1:74:3e:5f:
6c:08:00:69:f4:db:5a:de:6f:a7:83:ff:0e:d8:d0:cb:dd:c9:
16:cc:68:56:88:5a:35:f5:c3:76:b4:a4:36:44:5e:eb:0e:bb:
56:14:7b:99:1f:8e:3c:1e:f0:10:90:11:0c:5e:1d:56:52:c5:
66:eb:c7:11:6e:aa:cb:02:76:2f:bf:d1:9b:27:6c:95:85:da:
ff:5a:fe:32:f9:7c:4f:4e:05:15:ee:a7:43:c9:a8:45:d2:01:
6b:e2:c1:d3:93:27:fd:15:53:f5:72:49:e9:10:67:8a:8a:db:
c2:0a:14:32:3c:15:f9:78:7e:31:6b:eb:fd:45:7b:80:7e:ae:
90:90:d2:75:0f:89:05:ba:a1:a0:c2:d2:a2:12:d6:5e:a7:bc:
c0:c7:51:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:41:54 2026 by rpki-client