Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/DlVEmN86QrMNI6rqVCrD-LoOGug.roa
File: DlVEmN86QrMNI6rqVCrD-LoOGug.roa (raw, json)
Hash identifier: CVfnrF+KAHePT6/S+VTFz7q8N9ZqZutQ7fUY49wPJgw=
Subject key identifier: 0E:55:44:98:DF:3A:42:B3:0D:23:AA:EA:54:2A:C3:F8:BA:0E:1A:E8
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A05E768A278E6F2F74A317B650421397C7
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/DlVEmN86QrMNI6rqVCrD-LoOGug.roa
Signing time: Tue 01 Sep 2026 19:33:41 +0000
ROA not before: Tue 01 Sep 2026 19:33:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151407
IP address blocks: 2.27.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5e:76:8a:27:8e:6f:2f:74:a3:17:b6:50:42:13:97:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 1 19:33:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e554498df3a42b30d23aaea542ac3f8ba0e1ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:ac:72:1e:ff:d0:46:95:ba:d3:f3:64:88:
80:0f:e1:eb:73:7f:b0:87:00:95:54:b9:44:91:d3:
a6:1f:fe:73:66:2c:f3:77:3e:2b:9d:52:e2:0e:26:
f1:97:3b:8f:7d:8b:f9:4a:00:a5:8f:0b:c1:9c:12:
1c:21:ba:18:33:5e:f8:75:9f:22:6c:81:2f:d0:73:
70:a9:74:d8:6b:15:98:18:73:6d:0b:eb:83:d5:65:
38:a8:d1:e3:11:97:b6:ac:45:5e:d0:49:5e:7d:72:
ba:ee:ab:8b:e2:33:81:bb:aa:a8:5e:da:ec:b8:dd:
d1:ac:bf:4d:e7:4c:1b:f3:b0:61:5b:47:fc:da:73:
a8:71:bb:ee:6e:f3:29:6a:30:d8:e1:11:04:eb:a9:
c7:29:92:08:58:2a:d9:a1:ef:28:6c:6f:5d:a3:62:
c5:d3:5c:75:5d:aa:82:de:32:0d:1d:bf:d3:eb:9b:
b6:be:02:ae:ac:09:ef:3a:83:ec:a6:1f:14:60:2a:
88:40:0c:f0:af:7d:16:d3:55:3c:2d:45:96:74:23:
7f:85:11:06:b1:03:c0:10:cc:d4:75:fd:c2:85:25:
d0:ea:be:b8:d2:7b:62:06:c3:a5:b8:0f:ba:3e:36:
7a:cb:af:d6:4a:2e:5a:65:83:d7:33:ee:92:c7:e9:
15:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:55:44:98:DF:3A:42:B3:0D:23:AA:EA:54:2A:C3:F8:BA:0E:1A:E8
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/DlVEmN86QrMNI6rqVCrD-LoOGug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.148.0/24
Signature Algorithm: sha256WithRSAEncryption
43:c1:07:75:32:0e:74:5e:4f:09:44:a8:cb:f3:f2:e3:46:d4:
af:60:cc:28:9b:0b:1f:4f:03:42:17:67:fb:0f:2d:f0:fd:a7:
94:ac:08:be:c6:73:88:45:20:74:0e:20:22:4e:7a:26:1c:14:
fe:48:32:c5:a7:17:4d:88:3c:80:3d:43:03:4f:17:40:f6:43:
2f:25:1c:a4:cf:3d:af:25:87:c2:5d:74:68:f0:00:da:5a:39:
b7:37:ff:94:57:3b:8e:0c:aa:cb:d6:6a:0c:20:60:b6:84:97:
98:d0:c1:72:c2:3e:e7:38:89:db:8c:77:b9:09:2d:7c:2b:d0:
bc:17:ef:ce:e5:29:b7:a9:e3:4a:48:dd:bd:80:ff:42:cc:cf:
8c:af:12:da:b8:cc:6b:da:08:b8:3a:09:1c:6d:d5:85:cf:fe:
62:d6:28:7a:42:a2:44:59:d9:bc:58:87:1c:42:14:7f:97:db:
fc:a8:38:d8:0f:cf:98:05:26:a2:fe:e3:61:b3:ec:e0:fc:d1:
6a:20:8a:e9:1b:6e:d2:80:4b:6a:97:8c:4a:c2:64:12:f3:a2:
5a:04:3d:d1:06:da:93:5e:66:57:08:ec:67:82:df:47:8c:4e:
c4:fa:6a:d7:02:3f:99:0d:e4:e2:b7:2a:e9:7d:85:5c:d6:72:
05:8f:8d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:58:43 2026 by rpki-client