Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/L6LRzOF-Y9zv5sZCz9uLkuuNj6A.roa
File: L6LRzOF-Y9zv5sZCz9uLkuuNj6A.roa (raw, json)
Hash identifier: vgfWTANvFAaBTD4X0GKXlo/Wt4rkHHi9t1tzQr13X0A=
Subject key identifier: 2F:A2:D1:CC:E1:7E:63:DC:EF:E6:C6:42:CF:DB:8B:92:EB:8D:8F:A0
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FBA183660D1FB1325B7D9D00AD66735F6
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/L6LRzOF-Y9zv5sZCz9uLkuuNj6A.roa
Signing time: Fri 31 Jul 2026 21:32:56 +0000
ROA not before: Fri 31 Jul 2026 21:32:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 2.27.98.0/24 maxlen: 24
31.77.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ba:18:36:60:d1:fb:13:25:b7:d9:d0:0a:d6:67:35:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 31 21:32:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fa2d1cce17e63dcefe6c642cfdb8b92eb8d8fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:55:17:fb:2f:98:26:7e:dc:3e:c3:42:4e:8f:
d5:83:6f:6e:ef:f7:e5:4b:af:d6:76:bb:05:8a:0e:
c8:6d:bc:ad:71:00:be:e5:3c:f3:79:17:d0:c4:2a:
5c:80:f3:4a:1a:31:52:e2:28:c8:87:55:b6:80:92:
fa:35:38:a8:fa:13:22:24:82:68:42:37:27:6d:05:
1b:16:67:c0:f0:a4:58:14:63:8d:05:5d:54:fc:bf:
6a:0c:6f:37:cd:0e:f2:b7:dc:9c:75:21:a2:f3:db:
ba:1c:96:43:e1:e6:d2:9a:5a:86:fa:59:11:28:82:
bc:89:12:e6:d4:8d:f5:a1:39:f2:62:c0:a3:a3:dc:
28:51:02:9b:2f:87:14:af:3b:c5:c5:6e:37:5b:43:
0e:82:ab:82:e0:9e:50:35:a8:70:10:87:71:78:a7:
18:ce:6d:49:3b:2d:59:04:5d:85:92:df:c0:8a:fb:
d8:f2:6c:57:90:3b:40:42:b2:3b:bf:8c:77:4d:3c:
d4:e1:c7:5c:aa:59:79:93:1e:b9:11:42:4d:66:6a:
bc:85:06:f5:bf:26:69:7c:75:2f:06:0d:82:06:49:
54:c5:b5:fa:1f:54:ed:3d:f8:c5:bd:47:f6:a2:96:
6e:a4:1c:6e:ed:69:d6:76:6f:ad:e5:b7:60:31:97:
fe:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A2:D1:CC:E1:7E:63:DC:EF:E6:C6:42:CF:DB:8B:92:EB:8D:8F:A0
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/L6LRzOF-Y9zv5sZCz9uLkuuNj6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.98.0/24
31.77.217.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:df:13:fd:8d:da:00:0f:31:1e:fa:24:dd:b1:f2:67:3e:0d:
4c:a4:9f:c8:87:96:57:71:c8:4d:b3:85:db:62:44:3a:c9:6d:
3b:e9:f0:07:f7:5f:fa:e9:3b:e8:ef:76:86:8e:d4:72:3f:0d:
20:b6:87:cd:85:27:2e:b5:54:c1:61:c7:7e:b1:09:b3:70:63:
52:41:13:e8:fb:ca:cb:25:03:4a:f9:98:30:30:3c:21:3b:12:
4f:65:84:2c:da:aa:28:b0:fd:32:1d:f2:3e:65:93:3d:fe:20:
95:50:70:72:af:11:bc:33:02:16:0a:f4:e8:c5:3c:30:21:08:
40:d8:fa:09:d8:50:89:0f:88:82:6e:3d:26:d4:9c:9f:1a:bc:
82:fc:19:72:91:76:65:a6:8a:5d:93:b0:98:e3:ea:f2:11:a7:
94:43:b8:fc:fb:64:c9:72:e2:05:33:61:01:65:5c:b0:fd:77:
8d:7f:41:ee:e5:99:d0:a6:6e:9b:02:91:cb:d3:6c:c8:27:a3:
5c:22:6c:c8:ed:8a:dc:64:2b:f6:50:2f:51:b1:18:88:47:7b:
da:b0:6a:51:1d:fc:9a:d2:97:2b:68:06:58:95:46:40:9f:6c:
e2:a8:df:c9:5e:a5:1d:d1:17:51:52:95:d9:3e:87:d9:30:43:
17:02:29:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:51:40 2026 by rpki-client