Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/C27VtFBeN_Jt5N4C49ZP8y9aB4k.roa
File: C27VtFBeN_Jt5N4C49ZP8y9aB4k.roa (raw, json)
Hash identifier: wshTCmv2ukhmbUtWoS0Qnq2hrc++w0CDjpfdBqcQfTE=
Subject key identifier: 0B:6E:D5:B4:50:5E:37:F2:6D:E4:DE:02:E3:D6:4F:F3:2F:5A:07:89
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019CE2BDDA0FE3FC0A17695CE50DB951B809
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/C27VtFBeN_Jt5N4C49ZP8y9aB4k.roa
Signing time: Thu 12 Mar 2026 15:50:18 +0000
ROA not before: Thu 12 Mar 2026 15:50:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 144.31.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 21:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:bd:da:0f:e3:fc:0a:17:69:5c:e5:0d:b9:51:b8:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 12 15:50:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b6ed5b4505e37f26de4de02e3d64ff32f5a0789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d4:48:c0:37:70:4b:63:34:53:bc:51:c0:32:
0b:dd:00:ac:92:c8:47:0c:00:55:71:e3:74:0c:39:
2f:3f:30:d3:4f:ea:6c:fa:f9:3f:bc:4e:a5:47:43:
6d:a0:38:74:38:ba:ea:be:3f:a4:ce:c9:77:18:7e:
28:d4:23:42:be:c2:8f:09:12:77:9e:89:49:cb:00:
d9:e3:6e:a1:96:21:ad:da:37:b4:7b:e9:8b:59:23:
6d:2c:18:c9:5c:ce:ee:c2:05:46:50:92:ef:bf:e7:
48:19:32:ec:73:4a:3e:81:b0:c9:42:f3:99:ed:7d:
66:92:88:cb:11:7d:da:2b:9b:dc:5f:91:74:b5:e6:
39:d0:52:7d:b8:a9:58:13:f9:2b:cf:bb:60:85:cd:
1a:ae:a0:59:a8:d7:0f:94:b2:38:c4:6d:d3:00:38:
9b:6b:64:41:89:27:a6:4b:57:db:3d:eb:05:68:67:
e2:fe:bb:5b:01:8d:f0:8c:7f:b5:4f:77:c8:c0:7c:
43:06:b2:ae:95:7b:c3:30:93:68:8d:20:25:ec:5b:
96:90:50:b1:c0:b4:fb:15:96:24:7e:11:ee:ec:e2:
75:2c:20:f3:7d:06:48:3c:91:95:a2:4e:34:36:9a:
4a:15:42:d3:bd:f2:8c:16:a2:1b:5b:89:9e:4a:d7:
6d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6E:D5:B4:50:5E:37:F2:6D:E4:DE:02:E3:D6:4F:F3:2F:5A:07:89
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/C27VtFBeN_Jt5N4C49ZP8y9aB4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.149.0/24
Signature Algorithm: sha256WithRSAEncryption
80:49:14:0b:ba:c6:3d:9b:13:f5:d0:e9:91:26:78:d0:38:ce:
1c:70:a0:ba:dc:a8:44:c7:c0:f2:6d:74:63:0f:d4:85:06:2c:
b2:2a:d6:3b:9b:39:9c:8d:b4:b2:07:9b:37:96:ba:e5:9b:92:
b9:53:8f:1c:3b:16:43:36:30:a2:9c:62:e1:7e:0a:f9:5d:6f:
b0:c6:00:65:d3:14:cf:8b:6a:8d:44:25:d4:7f:b9:7d:93:69:
6b:ee:a6:ce:76:f7:c4:88:59:87:19:ce:85:9a:9a:84:ca:ba:
61:12:6c:1f:e2:5f:a6:54:2e:a7:8b:f4:24:e9:2d:80:54:42:
46:1e:17:8e:35:96:44:b2:eb:94:5a:1e:d6:a2:68:18:f7:cf:
18:01:f8:32:8c:13:dc:f1:78:e4:1c:28:0b:cb:e6:fd:5f:50:
a3:fd:c1:cb:fb:94:83:81:99:0e:10:89:0d:0a:34:fe:d8:a3:
b9:e9:77:c1:97:2e:f5:bd:0a:1e:d3:f6:13:f2:e0:40:c5:48:
cc:a3:3d:25:8d:7b:e0:ad:3c:14:ca:80:17:28:01:aa:b6:18:
35:68:3a:e9:48:35:9e:c3:af:1e:c2:eb:f9:d2:c7:0e:2f:41:
d6:1f:15:13:35:14:8d:36:56:4c:6b:ac:ec:cd:2e:86:77:6b:
d8:b3:17:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 06:14:09 2026 by rpki-client