Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/CrTFnJcBwl2eiRNJgvdHMcS_k0M.roa
File: CrTFnJcBwl2eiRNJgvdHMcS_k0M.roa (raw, json)
Hash identifier: 4yQZ2bY3kLcnGxULdReV3RelExNSq2f5eqXXPfGrHcc=
Subject key identifier: 0A:B4:C5:9C:97:01:C2:5D:9E:89:13:49:82:F7:47:31:C4:BF:93:43
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0254AB70F821381821D53773196D13BAC
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/CrTFnJcBwl2eiRNJgvdHMcS_k0M.roa
Signing time: Fri 21 Aug 2026 17:07:28 +0000
ROA not before: Fri 21 Aug 2026 17:07:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213905
IP address blocks: 2.27.118.0/24 maxlen: 24
193.23.209.0/24 maxlen: 24
193.23.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:4a:b7:0f:82:13:81:82:1d:53:77:31:96:d1:3b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 21 17:07:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ab4c59c9701c25d9e89134982f74731c4bf9343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:72:15:4b:69:3f:9d:24:6f:7d:fb:9a:a0:20:
90:d1:bd:45:62:af:24:05:70:b9:c8:81:83:a1:8a:
13:89:43:a8:7b:7c:86:3f:33:64:dd:c6:60:e2:9a:
3f:46:0f:8c:b7:6a:1e:97:b8:ad:c2:70:a5:5f:dd:
05:5f:4a:da:fe:32:bd:8b:53:59:dc:45:22:23:3b:
fd:d9:01:74:ae:f7:57:31:02:31:97:a5:7e:3e:4d:
a7:ba:ce:ab:81:53:0a:a5:55:37:de:bf:27:36:41:
44:0d:aa:8f:5e:a5:9f:cc:ee:6a:a4:ee:6f:a8:0f:
52:50:1c:c6:1e:f2:70:a0:66:f8:ef:bf:aa:08:76:
ba:ed:ff:ce:cd:a3:3e:d5:66:27:66:8e:77:16:18:
8a:10:b6:35:2c:10:23:74:89:12:93:12:81:9d:ba:
fa:a0:32:7d:ba:ce:fd:1a:ca:ef:1a:0d:99:d4:f0:
f8:dc:ea:eb:2a:5e:a6:ca:d7:bb:7f:f0:c3:02:ee:
a9:93:3c:2c:28:3b:12:47:44:4f:40:6c:ae:ba:fb:
da:98:d7:56:18:59:82:e4:d5:2f:b2:2d:d1:95:c8:
fe:ce:8f:d1:31:61:c2:20:d7:1c:88:85:e9:f5:d8:
6e:19:ed:db:96:6d:d1:fc:51:e3:25:66:0d:9a:f7:
0c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B4:C5:9C:97:01:C2:5D:9E:89:13:49:82:F7:47:31:C4:BF:93:43
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/CrTFnJcBwl2eiRNJgvdHMcS_k0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.118.0/24
193.23.209.0/24
193.23.221.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:fd:fa:7d:89:41:7a:21:19:be:7a:e1:a0:1e:2b:df:ed:60:
a7:c1:34:c1:a6:c4:1e:00:15:62:28:e7:de:7b:98:1a:61:36:
ef:b4:9a:6b:97:d6:e7:87:2b:bb:e1:6b:eb:88:13:28:aa:b7:
24:fa:72:5d:38:c7:fd:81:d4:ee:b9:e8:e1:46:8a:a5:94:75:
10:6c:73:18:14:e1:fb:f9:20:91:9a:2e:b4:85:73:3f:7b:f8:
51:0b:70:19:9c:e4:5b:91:b1:0f:20:bd:8a:a3:0c:93:05:b6:
91:b3:57:2a:9e:be:ad:44:a4:31:39:8d:88:5a:9c:bc:71:46:
a7:15:f6:fd:e5:a9:3c:ec:aa:73:bc:23:b9:ae:d1:aa:21:66:
06:25:aa:54:8b:b7:32:25:91:ed:a0:a7:c2:4e:1b:46:4d:bd:
12:7c:7c:a1:67:01:9a:89:1c:b5:18:bc:d1:d3:83:57:95:3c:
da:90:b8:77:b3:a2:d9:e6:71:80:8b:30:0c:90:89:bf:37:c7:
77:c7:3f:6f:08:6c:23:ce:32:45:18:57:ba:e1:90:40:f3:9d:
21:cb:61:fb:50:bb:2a:aa:54:41:bf:ff:71:46:63:cd:c7:dd:
a5:31:8b:d8:f7:cf:69:66:0a:64:2a:d7:82:f9:dd:6c:44:e7:
59:f3:89:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:27:13 2026 by rpki-client