Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/H5jE27AuKgcGfOmPlAhTvw1i6_c.roa
File: H5jE27AuKgcGfOmPlAhTvw1i6_c.roa (raw, json)
Hash identifier: fTm6uwnG0j85uP5gPAaP7O4Qdl6w66+422i6n/7Vax8=
Subject key identifier: 1F:98:C4:DB:B0:2E:2A:07:06:7C:E9:8F:94:08:53:BF:0D:62:EB:F7
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D0BDDAC176ACD61F8B5598497FB85163A
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/H5jE27AuKgcGfOmPlAhTvw1i6_c.roa
Signing time: Fri 20 Mar 2026 15:29:30 +0000
ROA not before: Fri 20 Mar 2026 15:29:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17404
IP address blocks: 2.27.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0b:dd:ac:17:6a:cd:61:f8:b5:59:84:97:fb:85:16:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 20 15:29:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f98c4dbb02e2a07067ce98f940853bf0d62ebf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:11:12:6f:82:fb:55:60:57:dc:21:a7:45:8e:
94:eb:6c:1d:ed:94:a6:1d:46:66:11:43:a7:ad:28:
1a:08:57:d3:70:73:99:60:59:1c:a2:14:ce:83:15:
4c:97:48:61:94:26:38:d9:e4:58:b2:33:de:30:6b:
12:57:06:c5:1c:4a:c8:96:4d:cd:b7:5d:5d:b0:57:
21:3e:ed:68:96:22:cf:b7:9d:0d:98:6b:98:a0:b3:
1d:b7:ac:d9:a1:bb:ce:7a:f5:8c:47:3c:79:2a:b9:
24:40:eb:18:a3:73:51:80:96:09:ab:09:bf:bb:66:
a3:bd:35:b5:89:86:d8:98:2c:8e:67:71:32:bd:53:
09:72:ea:05:c2:95:0d:59:2c:17:a8:b5:ca:a1:9f:
e9:c3:e3:22:84:fc:01:2c:f1:f6:67:bc:f6:bc:39:
5b:46:99:1c:f6:c7:6f:39:be:7f:1b:01:8a:e4:4f:
82:9e:bf:f0:7b:05:69:aa:de:32:2a:2f:30:51:4f:
49:5b:bd:0f:cd:3f:70:8d:36:52:59:62:c4:05:c7:
ba:61:e3:fa:28:9c:48:24:13:e3:30:46:12:62:8a:
74:13:ac:27:3c:c7:96:96:25:b3:4b:2a:8f:c5:7e:
c4:a3:e4:28:de:ea:2b:75:82:b4:d1:be:72:24:67:
1b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:98:C4:DB:B0:2E:2A:07:06:7C:E9:8F:94:08:53:BF:0D:62:EB:F7
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/H5jE27AuKgcGfOmPlAhTvw1i6_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.192.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:7e:f9:c6:95:ac:f2:cd:f7:85:5a:9b:2f:aa:9f:fd:a2:66:
81:e1:8b:53:69:bc:b2:c9:b4:87:94:bb:aa:67:1f:d2:18:8a:
92:80:e2:64:fc:e2:55:af:28:55:58:d4:e1:06:81:14:ae:d8:
62:e1:bd:31:79:d4:41:1d:79:12:16:e2:a1:40:ed:fe:c3:03:
0b:0a:50:ae:0d:9c:b9:2a:c9:65:19:80:d9:5b:cd:b8:da:62:
03:dc:d0:4a:6d:9b:52:99:53:68:b9:83:4a:e4:66:76:7a:15:
c5:d2:03:63:78:e9:fd:23:e7:a4:0c:aa:f2:a8:6b:84:d1:4b:
c4:98:8c:bd:67:24:0d:d4:7c:98:87:39:f5:e8:ee:d4:7c:0b:
b2:28:b9:9f:91:09:85:c1:89:48:72:1f:0e:f7:e5:06:9c:47:
27:21:ff:45:27:1e:61:93:c6:5e:b9:79:e8:a2:87:ed:93:6c:
6e:da:8b:fd:f1:b6:72:21:2b:72:60:06:2c:57:6c:08:fe:11:
b5:33:0d:6f:87:4e:c2:4f:0d:42:75:47:59:42:d0:21:bb:b6:
bf:6a:4b:d2:bb:5c:7f:26:e3:80:b4:09:6b:f3:3d:fa:f5:f0:
c1:10:0c:6e:e6:7f:8a:d9:ee:b0:16:d6:e7:6f:a5:7d:e4:36:
7c:eb:17:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0L3awXas1h+LVZhJf7hRY6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwMzIwMTUyOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjk4YzRkYmIwMmUyYTA3MDY3Y2U5OGY5NDA4NTNiZjBkNjJlYmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/BESb4L7VWBX3CGnRY6U62wd7ZSm
HUZmEUOnrSgaCFfTcHOZYFkcohTOgxVMl0hhlCY42eRYsjPeMGsSVwbFHErIlk3N
t11dsFchPu1oliLPt50NmGuYoLMdt6zZobvOevWMRzx5KrkkQOsYo3NRgJYJqwm/
u2ajvTW1iYbYmCyOZ3EyvVMJcuoFwpUNWSwXqLXKoZ/pw+MihPwBLPH2Z7z2vDlb
Rpkc9sdvOb5/GwGK5E+Cnr/wewVpqt4yKi8wUU9JW70PzT9wjTZSWWLEBce6YeP6
KJxIJBPjMEYSYop0E6wnPMeWliWzSyqPxX7Eo+Qo3uordYK00b5yJGcb9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB+YxNuwLioHBnzpj5QIU78NYuv3MB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvSDVqRTI3QXVLZ2NHZk9tUGxBaFR2dzFpNl9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCAhvAMA0G
CSqGSIb3DQEBCwUAA4IBAQA+fvnGlazyzfeFWpsvqp/9omaB4YtTabyyybSHlLuq
Zx/SGIqSgOJk/OJVryhVWNThBoEUrthi4b0xedRBHXkSFuKhQO3+wwMLClCuDZy5
KsllGYDZW8242mID3NBKbZtSmVNouYNK5GZ2ehXF0gNjeOn9I+ekDKryqGuE0UvE
mIy9ZyQN1HyYhzn16O7UfAuyKLmfkQmFwYlIch8O9+UGnEcnIf9FJx5hk8ZeuXno
ooftk2xu2ov98bZyIStyYAYsV2wI/hG1Mw1vh07CTw1CdUdZQtAhu7a/akvSu1x/
JuOAtAlr8z369fDBEAxu5n+K2e6wFtbnb6V95DZ86xc8
-----END CERTIFICATE-----
Generated at Sat Mar 21 14:31:30 2026 by rpki-client