Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/87Ztaae2CeaPVN3a9QVpLfdggT0.roa
File: 87Ztaae2CeaPVN3a9QVpLfdggT0.roa (raw, json)
Hash identifier: C6UdpzNAwnM7bHoX20BrcCgCp221V/3h6a/64M/fwT4=
Subject key identifier: F3:B6:6D:69:A7:B6:09:E6:8F:54:DD:DA:F5:05:69:2D:F7:60:81:3D
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E5E39AAD435AD0A6F00C40B578971DED6
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/87Ztaae2CeaPVN3a9QVpLfdggT0.roa
Signing time: Mon 25 May 2026 08:21:37 +0000
ROA not before: Mon 25 May 2026 08:21:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204116
IP address blocks: 2.27.250.0/24 maxlen: 24
31.77.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5e:39:aa:d4:35:ad:0a:6f:00:c4:0b:57:89:71:de:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 25 08:21:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3b66d69a7b609e68f54dddaf505692df760813d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0c:7b:a6:4c:e0:69:91:e6:6e:e3:71:ec:3c:
0b:e9:ac:1f:ba:98:ac:ed:5e:f5:1c:8c:7e:f0:17:
65:8a:c3:27:3a:12:d4:86:c3:b6:a1:89:ad:4e:89:
e1:89:07:cf:22:11:0a:a2:47:34:2c:3f:2e:18:3d:
89:38:c6:f6:e1:de:07:11:46:1f:05:2a:db:81:4a:
97:90:7c:01:7d:64:c6:e7:60:63:69:29:66:eb:44:
72:13:28:9c:4b:64:62:25:63:ba:48:3d:f9:4e:da:
8e:93:f4:a6:9c:88:63:73:23:6a:64:46:c3:72:2b:
ee:3a:88:42:20:64:9a:bf:9b:76:2d:a0:53:7f:d8:
c4:a6:47:d2:28:ab:ef:c3:c0:28:40:39:82:78:c9:
04:4e:65:16:23:92:90:1b:37:ac:61:27:9d:d4:31:
4e:9c:ed:11:f6:38:72:63:d3:03:1a:d4:4e:54:25:
3c:a9:33:06:09:b0:f4:6d:8c:b5:29:29:48:b0:48:
68:d0:9e:0d:a9:d0:76:65:48:ea:5b:20:fb:0b:6f:
2a:36:0f:e7:a2:3b:fe:47:1f:d8:33:8d:bf:f5:0c:
8c:b6:ff:f8:e3:ef:dc:0d:5c:64:75:bf:51:4a:31:
d7:1e:96:76:76:35:7b:c2:6d:59:68:1b:1c:d5:6f:
e8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B6:6D:69:A7:B6:09:E6:8F:54:DD:DA:F5:05:69:2D:F7:60:81:3D
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/87Ztaae2CeaPVN3a9QVpLfdggT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.250.0/24
31.77.102.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:a1:eb:b7:5d:e9:72:33:58:e8:e5:7b:81:07:45:3c:36:53:
7a:42:a6:66:9a:8a:47:4a:d4:3c:6b:1b:b0:47:9a:eb:14:45:
21:3d:22:7d:f7:f2:6e:10:ba:f9:c1:a0:1f:2c:a7:46:6c:50:
fb:d3:24:c1:e8:6b:a7:b0:74:3c:d8:6a:1a:c2:19:14:53:cf:
2b:85:3f:ed:90:f3:38:f7:8a:14:02:ec:e2:fc:11:56:4a:f1:
64:a2:35:b6:08:9c:4e:6b:4d:48:f9:b3:c5:13:37:dc:ec:59:
85:75:8f:3d:aa:1d:4c:c1:0b:c5:9c:64:9a:4f:da:39:c7:20:
13:c0:3a:5a:7f:05:e0:86:3d:28:e2:95:4f:51:15:b2:2f:5c:
7e:5b:b8:f8:90:ce:d2:3c:ba:8e:c0:36:76:50:82:83:51:fa:
8f:82:9c:49:a9:b2:bc:3b:a2:04:9c:33:0a:38:3f:0f:a1:2c:
0a:68:1e:f8:aa:c8:d6:16:ba:8e:a5:d1:25:8c:1e:39:91:53:
5b:3d:15:dd:68:e8:17:38:db:95:dd:08:ee:85:59:19:93:4c:
af:15:b2:b5:18:80:9d:b0:6b:3f:c9:4d:5d:25:4d:cb:74:52:
09:31:80:f4:d8:ed:e8:ea:e6:8c:48:6a:e1:54:6e:c4:71:27:
ed:0e:d5:b1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ5eOarUNa0KbwDEC1eJcd7WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNTI1MDgyMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2I2NmQ2OWE3YjYwOWU2OGY1NGRkZGFmNTA1NjkyZGY3NjA4MTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wx7pkzgaZHmbuNx7DwL6awfupis
7V71HIx+8BdlisMnOhLUhsO2oYmtTonhiQfPIhEKokc0LD8uGD2JOMb24d4HEUYf
BSrbgUqXkHwBfWTG52BjaSlm60RyEyicS2RiJWO6SD35TtqOk/SmnIhjcyNqZEbD
civuOohCIGSav5t2LaBTf9jEpkfSKKvvw8AoQDmCeMkETmUWI5KQGzesYSed1DFO
nO0R9jhyY9MDGtROVCU8qTMGCbD0bYy1KSlIsEho0J4NqdB2ZUjqWyD7C28qNg/n
ojv+Rx/YM42/9QyMtv/44+/cDVxkdb9RSjHXHpZ2djV7wm1ZaBsc1W/onQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPO2bWmntgnmj1Td2vUFaS33YIE9MB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvODdadGFhZTJDZWFQVk4zYTlRVnBMZmRnZ1QwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAhv6AwQA
H01mMA0GCSqGSIb3DQEBCwUAA4IBAQC0oeu3XelyM1jo5XuBB0U8NlN6QqZmmopH
StQ8axuwR5rrFEUhPSJ99/JuELr5waAfLKdGbFD70yTB6GunsHQ82GoawhkUU88r
hT/tkPM494oUAuzi/BFWSvFkojW2CJxOa01I+bPFEzfc7FmFdY89qh1MwQvFnGSa
T9o5xyATwDpafwXghj0o4pVPURWyL1x+W7j4kM7SPLqOwDZ2UIKDUfqPgpxJqbK8
O6IEnDMKOD8PoSwKaB74qsjWFrqOpdEljB45kVNbPRXdaOgXONuV3QjuhVkZk0yv
FbK1GICdsGs/yU1dJU3LdFIJMYD02O3o6uaMSGrhVG7EcSftDtWx
-----END CERTIFICATE-----
Generated at Wed May 27 17:40:29 2026 by rpki-client