Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/KCsyfHXpb9T8OZCt6_uMaHbOvPQ.roa
File: KCsyfHXpb9T8OZCt6_uMaHbOvPQ.roa (raw, json)
Hash identifier: A1gFl99ci0nsV0c4FKCalANVPaWnWHgZhVqTkSUbuns=
Subject key identifier: 28:2B:32:7C:75:E9:6F:D4:FC:39:90:AD:EB:FB:8C:68:76:CE:BC:F4
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A03EEC4DD296262D4DC76458D57E0DC5A9
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/KCsyfHXpb9T8OZCt6_uMaHbOvPQ.roa
Signing time: Wed 26 Aug 2026 16:34:28 +0000
ROA not before: Wed 26 Aug 2026 16:34:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 2.27.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:ec:4d:d2:96:26:2d:4d:c7:64:58:d5:7e:0d:c5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 26 16:34:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=282b327c75e96fd4fc3990adebfb8c6876cebcf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b2:0d:b7:ba:ef:71:2c:f8:15:b9:2d:f1:d3:
8c:77:8a:df:82:0b:39:bf:7b:a8:da:74:b6:e3:d4:
e6:7a:ba:7c:3a:56:6e:13:68:94:5d:b5:e2:61:e4:
a8:3e:e8:b5:30:92:e2:e8:88:ce:40:ff:17:aa:14:
56:17:bd:30:3d:1b:93:c4:aa:62:27:97:18:ff:f3:
ff:48:11:64:f3:2a:fb:64:f8:1d:8a:de:d3:8f:10:
82:41:4d:9c:34:09:3b:3e:2b:c6:e4:3f:23:a5:e4:
f4:a1:2d:2c:8c:20:ca:09:b3:cc:79:f1:31:64:60:
1e:34:24:b5:12:6c:c3:6f:8e:3a:bc:5c:86:83:de:
3c:c9:d3:e6:71:42:bc:ed:ae:09:fb:b8:a3:8d:17:
11:81:86:06:05:27:aa:6d:21:10:66:f3:06:6a:81:
53:96:bc:d6:0a:32:a7:ac:38:ca:bc:3a:61:18:a2:
5e:7f:ab:c1:b8:9b:b7:a6:8a:28:e6:bd:44:70:cb:
ef:4d:b2:f8:0f:f6:bf:13:35:86:42:5d:2d:e7:f3:
78:11:fa:aa:a5:9f:ce:da:e4:95:33:a3:cb:a4:f8:
fd:4a:c3:df:d2:75:9c:b5:77:e3:33:8f:bb:b9:7b:
65:04:49:e0:fe:a8:25:bc:7a:ba:7b:9e:c2:0c:84:
d6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2B:32:7C:75:E9:6F:D4:FC:39:90:AD:EB:FB:8C:68:76:CE:BC:F4
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/KCsyfHXpb9T8OZCt6_uMaHbOvPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.158.0/24
Signature Algorithm: sha256WithRSAEncryption
13:e2:be:26:3a:cc:70:25:fd:ad:44:ac:ff:a4:f0:58:07:6d:
bb:f7:f4:1f:cc:ca:8d:c1:59:4b:e3:25:2d:dc:47:e4:0f:e2:
29:54:70:5e:31:f6:34:c5:8e:3b:91:36:96:19:b4:2a:44:b7:
e9:da:af:23:2f:b2:a2:c1:8e:c7:4e:7c:fd:2e:4c:e9:3f:e7:
f2:f4:5e:10:cc:2d:29:a0:e0:48:38:b9:54:bb:7e:f6:24:b9:
d5:78:24:86:61:5d:74:b1:15:96:18:3a:9b:7a:2f:a5:cc:56:
5f:c3:0f:28:0e:46:8f:4b:4b:57:64:38:e8:90:25:1b:d3:1b:
ba:eb:75:b8:b1:93:a3:50:de:6f:d9:40:40:92:ec:2b:11:a2:
83:76:65:11:64:6f:33:3a:fa:4d:20:ac:f3:8a:21:28:20:6b:
d1:b4:37:16:67:25:30:57:d2:a5:4c:a8:85:0b:36:3b:6a:52:
ef:2e:b7:89:81:ee:48:4c:59:b2:87:f8:c9:27:32:11:7a:2d:
67:b7:04:bd:63:ff:dc:3f:c9:ae:b6:07:b5:43:57:2c:32:6c:
60:b0:9d:93:54:68:41:a2:de:8a:c2:a5:f2:59:9b:2c:da:ba:
45:35:63:ee:5a:03:8c:a5:a2:c6:0a:4b:68:e2:5c:5e:ce:05:
e9:02:fb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:27:14 2026 by rpki-client