Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JfWdORPpb1iZjiXSnwL5exLy--Y.roa
File: JfWdORPpb1iZjiXSnwL5exLy--Y.roa (raw, json)
Hash identifier: 4sD1mn8EykxdsBqy98kXi0swyjgO3RRzbm3ECfJAep4=
Subject key identifier: 25:F5:9D:39:13:E9:6F:58:99:8E:25:D2:9F:02:F9:7B:12:F2:FB:E6
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A08014C365D84EE43F76D53A52C8733815
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JfWdORPpb1iZjiXSnwL5exLy--Y.roa
Signing time: Tue 08 Sep 2026 08:13:59 +0000
ROA not before: Tue 08 Sep 2026 08:13:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214693
IP address blocks: 2.27.233.0/24 maxlen: 24
2.27.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:14:c3:65:d8:4e:e4:3f:76:d5:3a:52:c8:73:38:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 8 08:13:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25f59d3913e96f58998e25d29f02f97b12f2fbe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:05:7f:63:72:f5:94:dc:0f:5c:5b:a4:e9:df:
c8:80:29:04:58:67:d6:bb:b3:ae:29:2c:1c:58:73:
8e:a9:cd:63:e0:f2:24:24:c7:84:5e:2f:21:58:e5:
01:c8:7c:7f:c9:1a:f2:c9:24:6d:38:c1:a2:d4:88:
bf:00:26:85:79:87:07:8d:f0:79:db:ad:29:e8:16:
52:13:7b:1d:ed:28:81:69:f8:f2:07:c4:19:93:92:
db:39:47:9f:17:59:8c:c4:b8:d6:e6:c9:7d:a2:de:
45:d7:56:5e:b4:29:65:35:d0:53:57:b9:63:18:1f:
98:90:69:f8:e8:ef:e8:18:61:66:38:ca:aa:e6:09:
1a:f7:31:39:a1:76:4b:dc:ad:89:22:01:dd:cd:88:
35:65:c5:44:dd:13:a4:23:c4:07:6d:2d:0d:db:6d:
31:b8:e5:00:19:63:c3:56:7a:5e:e3:39:13:6f:b7:
13:bf:1d:cc:a9:18:bf:32:0e:36:03:56:9e:19:75:
c9:a1:54:9c:e6:95:79:94:f6:e7:bd:29:fb:8c:fe:
6e:17:0d:58:13:14:a3:a0:7b:1d:65:75:90:02:67:
38:83:6d:bd:02:2c:1b:7e:b2:d8:0f:17:61:d1:73:
3a:9d:e1:5f:4d:46:9c:89:6d:b9:4c:86:95:76:54:
b9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F5:9D:39:13:E9:6F:58:99:8E:25:D2:9F:02:F9:7B:12:F2:FB:E6
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JfWdORPpb1iZjiXSnwL5exLy--Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.233.0-2.27.234.255
Signature Algorithm: sha256WithRSAEncryption
10:6c:82:e3:2b:21:6c:4a:ca:ba:fe:cd:fa:ef:76:d5:6d:19:
ad:58:4b:83:0b:15:39:ad:c5:0b:f0:39:c8:7d:34:1a:79:5a:
bc:ea:9c:e5:b1:09:f5:80:29:c9:5c:0e:9c:31:c1:2e:5c:ba:
fe:3a:d1:54:71:34:49:92:24:f3:af:87:5c:1b:d3:97:54:14:
8b:44:2d:92:5d:9a:35:0a:03:b4:6f:85:ed:ca:b6:e5:ca:6f:
dd:e3:9e:31:08:12:e9:2e:3e:6a:8a:6c:79:34:cc:c8:89:d6:
4c:2c:20:58:32:9d:51:c9:db:7f:22:4a:31:2c:39:37:a4:5c:
e7:39:9a:e7:ad:95:b3:d2:de:f8:09:f9:ca:6e:5b:79:df:cf:
ff:0a:0e:2e:03:fe:29:b9:34:42:12:bb:48:2a:ca:35:8f:a8:
1d:3b:70:3e:4b:f3:3e:d0:bc:c6:61:e1:b4:33:20:e9:77:1e:
75:04:6e:bf:e3:01:0d:1a:8e:47:88:6e:3d:fb:43:6b:fe:6c:
31:64:72:85:c6:5d:e4:40:30:38:6e:a6:f0:18:2a:b8:cc:f2:
d0:30:a6:fc:5b:c1:50:c4:0d:b2:52:4d:53:48:66:6d:23:c9:
fa:c0:bd:6b:26:6a:04:ab:3c:4d:4c:5a:fe:37:4c:d2:55:86:
49:5b:9e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:08 2026 by rpki-client