Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9u_JIwKi388h1MiNcr2ztuMyw08.roa
File: 9u_JIwKi388h1MiNcr2ztuMyw08.roa (raw, json)
Hash identifier: sF/+3ErFD3f+eX/PFklz5P4taqHugvC4nbClbIXgYZA=
Subject key identifier: F6:EF:C9:23:02:A2:DF:CF:21:D4:C8:8D:72:BD:B3:B6:E3:32:C3:4F
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F66C705663E952EC387BFE6E1915871E0
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9u_JIwKi388h1MiNcr2ztuMyw08.roa
Signing time: Wed 15 Jul 2026 17:15:46 +0000
ROA not before: Wed 15 Jul 2026 17:15:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213791
IP address blocks: 2.27.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:66:c7:05:66:3e:95:2e:c3:87:bf:e6:e1:91:58:71:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 15 17:15:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6efc92302a2dfcf21d4c88d72bdb3b6e332c34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9c:38:78:ce:41:76:4d:54:1b:fa:a2:2e:32:
73:d2:ac:60:5e:9e:da:af:bc:d2:4d:35:bd:20:8d:
cd:cf:9d:a0:0c:35:4d:c4:c8:3d:21:75:1f:91:62:
98:30:5e:e8:5f:38:8f:23:81:98:08:62:6e:50:b0:
56:f1:71:ee:51:70:1c:62:d7:b6:de:a7:3b:53:61:
a1:16:c6:e7:5d:3c:80:29:82:62:ce:27:0e:0e:52:
2f:12:d2:f4:7c:9f:43:4a:8b:81:43:f6:e3:6e:ed:
e0:19:38:ac:a7:9e:e1:0e:25:d8:35:9b:a4:94:50:
97:2c:15:86:83:5f:d0:6f:46:7e:90:53:b8:c9:42:
b9:d0:67:3b:de:02:be:f1:96:53:11:c8:e5:e4:dd:
12:5c:0e:3b:55:7e:34:2c:83:5a:17:f5:34:5c:da:
ed:d2:ae:15:a6:5d:0f:37:2b:dc:e6:9f:ed:39:54:
06:7d:c8:ea:0c:66:ba:93:6f:d8:6f:50:b1:3e:6d:
44:cd:1e:90:ec:16:6e:5d:36:20:ab:37:43:9a:42:
3d:31:b9:9f:d1:c3:43:aa:27:0a:41:08:18:8e:7b:
fb:ee:c3:51:a4:e2:be:87:89:53:b4:19:f7:fa:85:
7f:7a:9f:6d:8e:b7:4a:0b:18:04:81:a6:6a:3f:e4:
e5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EF:C9:23:02:A2:DF:CF:21:D4:C8:8D:72:BD:B3:B6:E3:32:C3:4F
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9u_JIwKi388h1MiNcr2ztuMyw08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.158.0/24
Signature Algorithm: sha256WithRSAEncryption
49:6e:55:99:03:8b:48:31:c6:d9:97:1f:fc:4d:a2:3a:97:05:
be:77:70:6b:f9:a7:72:88:89:4e:1c:8d:67:3d:6b:42:e8:13:
b6:03:69:b1:07:e3:f1:59:ff:29:bc:73:0d:e2:b3:af:05:eb:
71:cd:6f:e7:cc:b5:0d:01:f5:ab:66:7a:b8:cb:10:ee:e9:6f:
78:3b:d3:f4:ab:81:8a:bc:da:da:61:fa:c1:34:94:d8:2e:ea:
3c:fc:71:25:0d:f8:11:58:b6:a6:94:d0:0d:69:53:66:ff:38:
44:21:08:a8:f4:e6:31:53:41:99:79:45:b7:58:5b:ae:0b:d5:
d9:6c:e9:19:00:85:90:e5:78:b6:65:5f:33:65:0e:40:0e:86:
25:eb:5d:58:12:4f:52:16:bf:2b:27:cb:2b:fa:35:c5:ab:38:
30:14:a6:53:92:0b:21:4e:e2:17:36:37:88:30:a4:81:9c:ef:
b0:81:2a:9e:53:24:f6:d8:37:2b:26:23:56:1a:f6:c7:33:0a:
11:56:f8:d5:3e:9f:85:fc:36:a9:81:84:70:f2:ed:8b:dc:f1:
38:d6:9a:12:ab:ff:75:c8:a5:99:7a:58:2b:e8:bb:89:4e:a6:
a3:ec:43:09:eb:7a:f4:26:46:4c:e1:a9:a4:4c:ec:0e:50:cf:
2e:54:8e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:21:39 2026 by rpki-client