Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/C6Qqg3x_WqDdrpM6C3ydL4Giwhc.roa
File: C6Qqg3x_WqDdrpM6C3ydL4Giwhc.roa (raw, json)
Hash identifier: 4CY+4zD4dC4NhkN1aJSOJIDjUfR+kwjuZL0eciJXsss=
Subject key identifier: 0B:A4:2A:83:7C:7F:5A:A0:DD:AE:93:3A:0B:7C:9D:2F:81:A2:C2:17
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D0BDDAE87A29135546B63F4022D66F149
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/C6Qqg3x_WqDdrpM6C3ydL4Giwhc.roa
Signing time: Fri 20 Mar 2026 15:29:30 +0000
ROA not before: Fri 20 Mar 2026 15:29:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206136
IP address blocks: 2.27.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0b:dd:ae:87:a2:91:35:54:6b:63:f4:02:2d:66:f1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 20 15:29:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ba42a837c7f5aa0ddae933a0b7c9d2f81a2c217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:37:a5:83:02:69:0f:24:b2:7a:62:e6:a3:
0d:14:e9:f4:6c:f9:29:ca:36:cc:f5:42:3d:d5:45:
1f:36:ae:11:9a:fa:4b:52:71:bb:97:a8:6e:aa:74:
43:35:0e:35:78:23:dc:b2:2d:a1:60:ea:0f:6e:f9:
a3:33:e1:72:10:da:e8:3d:31:fc:de:6c:e0:c2:26:
83:c9:56:cc:4a:50:89:44:ca:5a:b0:b6:51:d0:58:
27:f8:39:5b:0c:88:f8:83:97:73:a9:17:6f:4f:91:
3b:45:17:85:a8:0f:be:e5:6b:b8:96:81:80:fb:85:
2a:88:73:61:e5:7f:46:66:54:6d:57:79:ef:04:26:
a7:5b:bf:8c:37:2b:bc:67:4b:cb:92:68:cb:9f:3c:
14:77:06:78:91:97:68:8c:07:0f:26:b4:15:cc:e8:
f3:a6:57:db:7f:d8:dd:68:69:fb:1c:86:af:4f:32:
ed:f4:80:84:e9:29:81:a4:64:f8:d4:4f:0e:5b:48:
d4:bd:aa:bb:c4:77:d0:05:de:f2:01:e8:00:6b:27:
83:42:6b:a8:33:6b:28:89:5c:ff:a7:29:ca:0d:3b:
a7:39:12:dc:3f:ff:02:bf:58:40:c4:52:61:40:79:
fd:54:23:93:49:34:34:07:12:b5:ee:9f:5e:07:7d:
63:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A4:2A:83:7C:7F:5A:A0:DD:AE:93:3A:0B:7C:9D:2F:81:A2:C2:17
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/C6Qqg3x_WqDdrpM6C3ydL4Giwhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.117.0/24
Signature Algorithm: sha256WithRSAEncryption
13:f0:66:d3:11:fc:ed:64:61:ef:7f:34:fa:d3:8b:bd:9e:85:
98:4c:1f:3f:9b:78:dc:94:39:c1:1d:f0:ba:01:84:c6:0e:8e:
8b:79:2e:fb:f1:e7:6f:68:50:42:78:a6:39:c5:e1:c9:21:48:
02:c9:d6:6d:94:ea:1a:84:34:56:14:c1:fd:6e:21:67:d1:48:
2c:8c:d5:1e:70:c4:7e:83:91:cb:c7:97:4f:f8:73:76:5f:67:
48:67:cd:10:37:bb:9c:ec:f2:66:da:54:93:54:37:5d:b6:94:
19:19:57:89:01:a1:0b:75:f0:d1:65:cb:d2:01:25:ce:95:f8:
f3:dd:6f:9f:2c:f6:42:9d:38:eb:bd:8a:e7:ce:bf:7e:89:d9:
ef:a2:62:68:a3:7c:43:55:8f:3c:0e:ed:82:a5:b7:4a:71:7f:
84:fd:63:9a:7a:d5:41:eb:ef:d9:4e:ca:4a:3a:e4:6b:b3:38:
39:bf:91:40:3d:e7:b7:c8:ef:8e:94:80:62:d1:7f:a1:e5:3a:
38:69:05:a4:f6:b6:74:da:9c:f6:51:4b:93:2f:ca:6e:77:8b:
1c:4d:ee:fa:41:59:a6:37:56:04:77:47:f4:93:30:d9:67:88:
74:64:5f:9d:3e:3a:8c:14:8c:95:70:d6:da:e1:33:3d:23:b7:
05:88:a7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 14:36:25 2026 by rpki-client