Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/DtybZxNIR29mWI0gLpYntXSNY3g.roa
File: DtybZxNIR29mWI0gLpYntXSNY3g.roa (raw, json)
Hash identifier: 5tcO9kCurP4tOjlffKPVLXUE52uZXrQ/nFNUpAFqr5g=
Subject key identifier: 0E:DC:9B:67:13:48:47:6F:66:58:8D:20:2E:96:27:B5:74:8D:63:78
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1794F0A0618EEA7142041320166AE5EB7
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/DtybZxNIR29mWI0gLpYntXSNY3g.roa
Signing time: Mon 26 Oct 2026 17:43:05 +0000
ROA not before: Mon 26 Oct 2026 17:43:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152491
IP address blocks: 2.27.144.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:4f:0a:06:18:ee:a7:14:20:41:32:01:66:ae:5e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 26 17:43:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0edc9b671348476f66588d202e9627b5748d6378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b4:13:dc:b8:71:d3:54:00:69:e8:03:8b:9e:
5b:3f:ea:b0:36:e2:b0:62:aa:4b:af:bf:3a:46:ce:
e1:b9:a2:95:fb:bb:e8:d8:64:b1:22:12:a2:83:67:
bd:77:49:75:0c:7a:54:4a:ac:fe:6c:c6:4c:cd:7c:
6d:3d:4c:d0:2c:66:9a:b4:35:9b:20:b8:67:0c:0e:
bc:5c:b8:00:63:df:93:09:cb:bd:b6:8e:b1:2a:36:
8b:c8:56:f1:c0:1a:db:3b:df:8b:5b:de:49:d4:ea:
85:48:0e:52:5d:c1:a0:80:16:7e:bc:78:3a:4b:1e:
81:0d:34:1d:ee:e5:d9:6c:e4:a9:e1:0f:b0:ee:91:
69:53:fc:58:64:cd:58:c3:f6:ca:c8:19:7a:9a:3e:
29:b2:d1:41:e4:31:73:0b:7b:57:8c:40:7a:40:26:
6a:6b:d1:bd:e8:e8:d3:b6:49:50:73:68:03:fd:cd:
3a:6b:5e:eb:ea:dd:1a:18:b7:13:05:b8:f0:f9:8b:
fa:80:99:40:65:15:62:2d:f3:2f:2f:11:d2:c0:8b:
38:fb:e2:c1:45:e0:6f:52:65:62:6f:ab:87:6e:98:
2f:9f:75:08:24:e4:3c:f4:38:88:54:67:eb:70:c3:
b1:18:e3:e7:09:cd:19:b2:a5:b7:a1:ea:2a:00:e3:
e4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DC:9B:67:13:48:47:6F:66:58:8D:20:2E:96:27:B5:74:8D:63:78
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/DtybZxNIR29mWI0gLpYntXSNY3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.144.0/23
Signature Algorithm: sha256WithRSAEncryption
33:85:46:89:46:0c:16:47:5c:5c:3b:a0:80:5a:08:25:6d:9e:
81:44:68:e2:fd:09:32:3f:0f:9c:66:8a:16:20:13:5b:dd:13:
36:d7:96:d5:56:06:71:e6:90:b2:fe:19:36:ca:82:13:a0:fc:
d8:5e:b1:19:c5:2c:4f:53:58:4f:16:4a:09:bd:6c:4a:c7:4a:
98:42:f2:86:27:8b:c5:eb:d1:16:92:92:06:ae:b7:94:32:57:
c1:a3:00:74:28:d1:3d:f6:0c:3c:a2:d1:b1:3e:72:d5:79:a9:
d9:64:f1:2a:93:64:1e:bf:77:1c:07:2c:9e:74:e5:4d:a2:9f:
cc:94:3e:f2:fa:ef:27:66:53:c7:71:60:80:6f:9f:86:58:38:
1d:55:6f:0f:16:a4:ae:9a:31:6a:d7:67:49:f0:68:3d:b7:e5:
07:59:0c:39:f2:12:c5:21:f1:99:7a:89:33:a4:9c:4f:41:32:
65:67:ac:59:21:d5:71:55:5e:1a:0b:30:3a:be:6c:ff:fc:5c:
dd:53:6d:50:ec:c5:94:0b:9c:b9:37:0e:88:36:e1:5e:6c:65:
95:87:ee:59:1d:4d:ee:7e:6d:f6:ec:9f:d5:87:f4:23:08:e7:
97:74:38:39:ca:0b:7f:05:88:3b:8a:ac:24:7e:5e:e2:73:1c:
a9:58:e1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:42:48 2026 by rpki-client