Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/LPjniH_wnQ2y4MgY0FItGs5d2Sw.roa
File: LPjniH_wnQ2y4MgY0FItGs5d2Sw.roa (raw, json)
Hash identifier: Wvs38lsSzaYx/fEWVqb5hcUeL8N1z9epkUhRdqfI7fc=
Subject key identifier: 2C:F8:E7:88:7F:F0:9D:0D:B2:E0:C8:18:D0:52:2D:1A:CE:5D:D9:2C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F0FBAF2023503E68F909A7198A17714CC
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/LPjniH_wnQ2y4MgY0FItGs5d2Sw.roa
Signing time: Sun 28 Jun 2026 19:35:37 +0000
ROA not before: Sun 28 Jun 2026 19:35:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 2.27.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0f:ba:f2:02:35:03:e6:8f:90:9a:71:98:a1:77:14:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 28 19:35:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2cf8e7887ff09d0db2e0c818d0522d1ace5dd92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:19:b1:9f:7a:0b:b1:86:f8:e9:17:d1:e5:4b:
dd:65:2f:dd:01:db:ce:69:d4:14:bf:5f:ba:eb:01:
9f:cb:12:5d:e2:63:5b:31:d6:dd:6d:ef:30:fa:c2:
83:42:b6:40:b6:72:07:9f:33:21:f0:28:d0:0d:93:
58:27:c9:4d:58:7b:02:89:9f:9d:6b:6b:f3:ee:ff:
5f:83:a4:68:7a:bd:6c:f9:fa:93:75:9e:ae:8f:e1:
69:34:eb:d6:fc:fd:27:10:0c:cf:2d:9e:bb:4f:fc:
59:d1:ab:e5:8e:7f:8b:ad:63:2d:47:e2:0f:40:c1:
63:7b:9c:03:e4:b9:16:5b:dc:32:3a:5a:04:6a:6f:
c4:41:64:aa:34:db:39:70:31:83:f8:fb:07:1c:62:
4d:70:96:70:a3:eb:6d:78:a0:2a:92:cf:5e:d2:39:
b1:81:cd:e3:4a:c0:d3:35:7f:7c:61:79:ef:eb:b9:
80:f1:71:a4:31:dd:7f:02:54:15:22:f6:fc:93:d5:
b2:5f:fd:ec:06:da:9b:51:f6:67:c1:72:69:77:4f:
ea:59:e3:a3:c9:db:ff:b1:ba:43:44:e5:72:b4:fe:
12:d8:b2:9f:48:0f:c9:42:95:ea:50:64:47:9a:24:
34:6e:04:a2:17:23:5c:df:23:c0:39:c5:cb:0c:1f:
38:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F8:E7:88:7F:F0:9D:0D:B2:E0:C8:18:D0:52:2D:1A:CE:5D:D9:2C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/LPjniH_wnQ2y4MgY0FItGs5d2Sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.115.0/24
Signature Algorithm: sha256WithRSAEncryption
78:54:5d:79:03:3c:63:58:c1:c4:a1:f0:16:7e:5d:36:f2:4e:
03:8e:fe:56:80:62:6e:b7:84:ce:02:12:d3:72:2f:37:fe:c2:
85:eb:35:57:78:fc:d0:bb:b5:06:a7:fc:65:13:ff:19:ff:34:
59:cd:5e:c6:0b:66:23:aa:2b:64:5e:40:aa:4a:2c:15:ce:b1:
63:af:fe:5c:c1:de:41:2c:e7:ee:83:a9:d0:aa:19:f6:f4:d4:
a9:a5:58:de:1f:03:43:ee:6c:fe:5b:7b:99:b7:a6:af:40:3e:
ec:55:50:8b:83:cb:a5:2b:83:74:5d:45:40:34:78:e4:1e:c0:
53:8a:27:b0:12:45:5a:76:e1:28:56:e6:08:1d:f3:aa:9d:31:
af:6a:ec:ae:2e:91:aa:30:35:30:63:2b:7c:fb:a9:40:54:7e:
a8:7d:01:c1:66:7a:9d:e0:ad:b8:85:01:b8:25:75:27:af:d2:
0a:ed:ec:5b:e2:58:78:fd:d1:42:10:e1:33:bd:32:88:37:c9:
50:80:ad:34:a3:22:0c:ed:e0:17:ed:19:a8:d1:1f:b6:a9:93:
97:ed:42:e3:ed:ec:22:a4:d6:b0:0a:60:0e:5a:1f:9a:7c:84:
58:99:55:c7:a3:ee:1f:84:58:69:55:a5:04:90:4b:22:7e:9d:
ef:d3:59:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 14:53:16 2026 by rpki-client