Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MJRfnGLfO2zHQzwkQk_RurYXDM0.roa
File: MJRfnGLfO2zHQzwkQk_RurYXDM0.roa (raw, json)
Hash identifier: ZompQ8RJXMPQ1spxOcL7fU26OeqJWO6Gs6LLO6mbi04=
Subject key identifier: 30:94:5F:9C:62:DF:3B:6C:C7:43:3C:24:42:4F:D1:BA:B6:17:0C:CD
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DDA3D65E793BBADAF91C96D01C6B5D912
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MJRfnGLfO2zHQzwkQk_RurYXDM0.roa
Signing time: Wed 29 Apr 2026 17:15:50 +0000
ROA not before: Wed 29 Apr 2026 17:15:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215391
IP address blocks: 2.27.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:da:3d:65:e7:93:bb:ad:af:91:c9:6d:01:c6:b5:d9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 29 17:15:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30945f9c62df3b6cc7433c24424fd1bab6170ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7c:bc:70:15:16:cb:31:23:f0:cb:fc:86:87:
00:7a:9e:1e:cf:46:1b:72:4f:f9:ac:00:ba:f6:11:
4d:cd:e6:e1:7b:dd:99:c7:f5:ed:cd:06:18:49:21:
e0:b9:79:18:9c:2d:1a:f5:54:0a:74:5e:2e:54:b4:
c7:df:a5:2c:31:a5:a5:f7:3a:82:ae:8a:b4:43:7e:
ae:8a:e0:62:08:81:0c:c6:69:ca:2e:83:cc:77:fb:
98:55:16:fd:1f:35:b7:fa:85:85:5e:3b:a4:8e:d0:
f6:46:7e:95:fc:f5:2f:5d:f4:25:35:c2:1a:08:41:
c8:48:48:49:85:e4:88:ff:a4:4f:b7:f9:e3:70:cd:
48:51:de:6c:49:7b:6c:f2:c7:32:3e:a5:78:36:98:
16:c3:1a:67:a9:67:76:12:42:eb:21:d8:3e:41:e8:
24:4f:e0:f6:98:73:ce:56:7f:8b:de:b7:a4:5f:25:
83:5d:1a:de:64:40:9d:ea:5a:e4:77:ba:22:5d:bc:
78:08:1a:13:99:b5:a4:c5:fe:90:07:75:8d:67:ad:
4e:9e:2b:67:32:8f:4c:28:39:35:f9:19:06:6c:42:
69:43:9a:5d:fd:54:fe:ea:e6:dd:f3:eb:22:77:b0:
d4:1d:47:b5:12:70:bb:3b:d2:ad:92:b3:8a:91:c9:
b6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:94:5F:9C:62:DF:3B:6C:C7:43:3C:24:42:4F:D1:BA:B6:17:0C:CD
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MJRfnGLfO2zHQzwkQk_RurYXDM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.150.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:2b:4b:18:73:72:2a:e0:e8:29:8e:f7:fe:4d:ae:a0:f7:38:
a3:16:bb:b7:44:77:d5:2e:9e:70:0b:ff:3e:a9:db:02:9d:70:
ee:79:5a:31:5a:9d:f8:f6:8b:e9:d5:7b:b3:e3:e4:93:1e:f6:
84:bf:75:6f:40:44:0a:a0:0b:a7:12:1e:d1:df:92:3a:2a:6c:
2e:c7:2b:ba:45:eb:5d:c4:cc:c3:1e:13:fb:1f:01:af:e1:3a:
53:63:b7:9f:e3:c7:a4:0a:55:3c:81:a5:7f:74:0d:b1:bc:b4:
41:be:33:be:79:5a:03:31:59:6d:32:f7:65:2b:10:c8:2b:88:
a6:43:6b:a1:81:b7:ca:b5:9f:92:1c:1d:1e:0b:30:5b:87:68:
6d:f1:78:8f:c0:b1:0c:ca:6f:6e:8e:af:ce:b2:ed:58:5d:49:
cb:1d:85:03:08:12:e6:60:84:b8:07:2b:df:b0:62:bf:c8:63:
87:af:6e:a2:da:62:1b:c3:bc:f7:d0:20:03:2f:70:1b:bf:dc:
0a:4b:4f:10:9e:ee:65:3e:94:de:12:26:ec:f6:48:c6:cd:63:
45:73:ac:b0:a5:ff:61:a1:98:59:8b:ae:d6:15:35:c3:53:0d:
c0:98:0e:4e:5c:b0:b4:a9:8d:4a:6a:28:c1:3f:f3:d2:c2:9a:
0e:67:10:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:48:29 2026 by rpki-client