Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/98JFfPVqU6RXbOylMqy9uUwuGFg.roa
File: 98JFfPVqU6RXbOylMqy9uUwuGFg.roa (raw, json)
Hash identifier: FqK8h+LNSijvEXd1SIFFK0CtoriYFo3jhzwOOjzZwyo=
Subject key identifier: F7:C2:45:7C:F5:6A:53:A4:57:6C:EC:A5:32:AC:BD:B9:4C:2E:18:58
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FD7E8F2C686A851CD737822605BB828A4
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/98JFfPVqU6RXbOylMqy9uUwuGFg.roa
Signing time: Thu 06 Aug 2026 16:29:55 +0000
ROA not before: Thu 06 Aug 2026 16:29:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219443
IP address blocks: 2.27.241.0/24 maxlen: 24
13.143.140.0/24 maxlen: 24
177.1.190.0/24 maxlen: 24
177.1.191.0/24 maxlen: 24
177.1.194.0/24 maxlen: 24
177.1.196.0/24 maxlen: 24
177.1.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 22:15:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:e8:f2:c6:86:a8:51:cd:73:78:22:60:5b:b8:28:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 6 16:29:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7c2457cf56a53a4576ceca532acbdb94c2e1858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:27:ae:75:1e:78:6d:9c:e6:1f:cd:7b:f4:ba:
ec:bf:29:b0:76:39:d0:bb:4a:aa:79:35:e3:b9:fa:
14:cf:83:e1:87:59:23:e1:ee:56:ad:7c:e3:6b:c3:
b7:71:b1:72:ec:b8:6e:7f:b6:03:21:b8:9d:76:9f:
d2:76:fb:45:6c:b5:c4:fe:13:22:80:10:9c:e3:a6:
b0:5f:51:c7:11:29:af:85:78:8c:6a:c4:88:dd:f4:
74:c3:e0:16:ae:a2:b0:0b:7c:67:02:2b:85:c1:2f:
9c:90:4f:2a:9a:88:28:2d:5c:7f:b5:ee:a3:e2:14:
c9:dc:d2:f8:d7:ef:ee:12:49:b6:6d:23:82:ab:c4:
77:72:3c:aa:9b:20:46:89:fd:17:90:32:9e:83:ec:
e3:a6:fb:fb:5b:30:ec:85:de:72:39:c9:ea:df:6f:
9e:2f:7b:f1:a3:0d:69:ac:05:23:55:c4:a9:68:c2:
81:17:3c:4f:06:24:92:5a:70:c6:65:e2:86:31:b6:
43:e4:36:9e:61:ad:13:f7:21:6b:3a:c1:a0:35:6d:
c7:76:8d:d9:ec:2d:41:78:9b:31:a6:74:ac:52:fe:
13:7d:70:69:b8:86:a7:6d:c4:b4:39:34:0e:16:2b:
6e:6a:1b:e4:94:f1:be:5f:06:4d:1e:4f:0a:6b:ed:
54:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C2:45:7C:F5:6A:53:A4:57:6C:EC:A5:32:AC:BD:B9:4C:2E:18:58
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/98JFfPVqU6RXbOylMqy9uUwuGFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.241.0/24
13.143.140.0/24
177.1.190.0/23
177.1.194.0/24
177.1.196.0/23
Signature Algorithm: sha256WithRSAEncryption
55:a6:46:a2:34:35:20:92:29:02:5c:00:0a:e1:72:89:96:ba:
6d:da:3e:c2:2b:8a:92:68:aa:64:c4:e8:69:b8:91:77:12:13:
ab:e1:75:c6:7f:6c:f5:1a:71:85:bc:34:62:e7:e5:63:ff:92:
1e:cb:94:b7:cf:b2:f3:52:c2:da:1b:de:37:e6:57:b8:af:a6:
b5:1f:58:f9:13:89:40:2c:a1:75:7b:27:20:d8:47:fa:a0:3e:
a0:ca:c7:bd:05:bb:0a:3b:c0:a7:f3:b7:f9:3d:0e:9c:03:29:
9f:f3:e1:0c:00:d9:2f:79:29:dc:47:5f:72:9b:fd:d2:ca:00:
85:96:20:4b:c4:1a:fb:d4:3a:02:f8:06:65:5f:4b:e9:f2:53:
46:f7:9f:8a:e4:c0:21:f8:3c:3d:4f:f1:f9:5e:e4:b7:ce:55:
f7:a1:af:35:9d:cd:48:78:d6:48:0d:43:21:aa:ea:51:9a:2e:
7f:97:6e:91:3c:b7:e5:3a:b5:f9:03:ba:8b:99:f2:e7:15:20:
f8:63:0c:2e:ca:d2:5b:c1:7a:2d:06:49:26:ad:87:45:32:5c:
37:6d:89:57:7a:a5:ae:0e:c6:20:67:4f:82:7d:4a:4f:16:43:
48:6b:ad:f7:ff:21:8b:5f:c0:15:e7:82:08:c8:f6:c9:c7:b8:
05:b1:6f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:34:31 2026 by rpki-client