Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9ZHtf9Lvx_v12MupJ5TFHH1598g.roa
File: 9ZHtf9Lvx_v12MupJ5TFHH1598g.roa (raw, json)
Hash identifier: Vzem53yev4ngfZ5Q692P5wkYeAJUQmkp8wDdyzoBk0k=
Subject key identifier: F5:91:ED:7F:D2:EF:C7:FB:F5:D8:CB:A9:27:94:C5:1C:7D:79:F7:C8
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D354838F51C16595562EAAB9C55B47F0C
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9ZHtf9Lvx_v12MupJ5TFHH1598g.roa
Signing time: Sat 28 Mar 2026 16:30:18 +0000
ROA not before: Sat 28 Mar 2026 16:30:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402257
IP address blocks: 2.27.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 Apr 2026 08:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:48:38:f5:1c:16:59:55:62:ea:ab:9c:55:b4:7f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 28 16:30:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f591ed7fd2efc7fbf5d8cba92794c51c7d79f7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a7:d6:61:b1:c0:b4:89:da:bd:ca:f6:00:dc:
96:72:2f:88:f0:61:44:7b:46:7e:a5:4a:dd:18:92:
7b:29:a4:ff:26:91:9c:8a:1d:98:e6:65:f9:27:8b:
b3:a3:49:c3:b1:8a:16:48:29:b4:94:ef:54:4e:fb:
ef:17:b3:20:f9:98:74:e6:65:d8:3b:62:60:e7:ae:
5a:34:5f:2b:37:d0:7a:bb:c6:4c:b8:db:86:b8:64:
3e:31:a0:f5:b7:ef:9e:bf:1c:65:2a:82:32:d7:d2:
04:44:d9:8e:92:4d:4f:e0:ef:0d:cc:b3:d9:ca:e5:
9b:f2:56:05:26:3d:38:30:7f:7c:0f:97:ae:0d:08:
a8:4e:37:83:df:d3:c2:9a:a8:0e:81:7b:d0:4c:d9:
7b:f4:c9:5c:93:10:e5:b5:08:b7:e6:16:ef:3f:6e:
4b:7e:07:20:ba:46:ca:03:16:47:47:64:40:c0:0b:
2b:74:de:05:4c:aa:d9:4d:1a:81:7b:1b:70:62:eb:
3a:eb:d9:7a:a1:32:e0:be:53:64:3d:bf:c9:56:cf:
f7:ea:b7:05:3f:f0:c6:d0:9d:3c:3d:c4:0e:a2:c3:
91:e8:9e:ef:bc:2b:88:1c:fd:bf:dd:0a:70:f7:84:
48:6e:23:04:a6:22:35:e2:42:6a:57:88:70:6d:11:
ad:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:91:ED:7F:D2:EF:C7:FB:F5:D8:CB:A9:27:94:C5:1C:7D:79:F7:C8
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9ZHtf9Lvx_v12MupJ5TFHH1598g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.235.0/24
Signature Algorithm: sha256WithRSAEncryption
73:26:91:0e:b2:4f:3f:ac:de:97:71:88:bb:b1:cd:cb:ed:0d:
73:a9:15:09:81:d5:07:a8:a8:f3:f8:f3:73:a0:2b:39:b6:47:
72:4d:b0:da:36:ae:90:85:1f:17:7b:99:fb:60:95:df:d1:4c:
88:a2:d0:10:83:04:20:ca:bf:7b:13:df:54:81:a2:8b:ca:6d:
04:6d:cb:9c:87:d0:1a:c3:33:4a:2b:b0:ed:b9:2e:34:78:83:
d7:66:10:92:8e:83:bb:ef:94:e0:f1:7e:40:d3:b5:77:b1:3c:
0f:33:37:e8:ed:9e:05:ad:73:a2:fd:17:07:48:00:1f:fb:29:
b2:27:fa:0c:5d:b2:c3:76:86:dc:e8:ed:03:c4:60:50:b4:1a:
2c:3b:34:16:50:52:7b:7d:6f:4e:1a:aa:e2:22:83:a2:db:0f:
53:15:d5:7f:66:55:f7:0b:ca:34:cb:66:1a:8d:e2:1f:32:81:
d6:8c:5d:a5:0b:61:93:72:11:27:cd:86:32:09:a1:45:40:66:
3d:b8:87:2a:32:7b:4c:e6:40:7a:40:d9:60:d1:1d:6b:42:ef:
52:ea:80:dd:e4:ef:7b:5b:e2:f5:79:c3:b2:45:46:12:37:ab:
aa:e4:68:45:87:4a:40:9d:5a:61:98:26:c8:20:80:dd:be:55:
8a:b7:96:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 4 17:01:18 2026 by rpki-client