Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MseK5LUDo-Y1RE6CO8b5CC4boXY.roa
File: MseK5LUDo-Y1RE6CO8b5CC4boXY.roa (raw, json)
Hash identifier: c0J1luRmSoQz0XZBwrwJI46OBtlyUTemZaNnnTneQPM=
Subject key identifier: 32:C7:8A:E4:B5:03:A3:E6:35:44:4E:82:3B:C6:F9:08:2E:1B:A1:76
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0B028553DBDD95E9D397C23C20C6E3730
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MseK5LUDo-Y1RE6CO8b5CC4boXY.roa
Signing time: Thu 17 Sep 2026 16:17:08 +0000
ROA not before: Thu 17 Sep 2026 16:17:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219543
IP address blocks: 2.27.153.0/24 maxlen: 24
2.27.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:28:55:3d:bd:d9:5e:9d:39:7c:23:c2:0c:6e:37:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 17 16:17:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32c78ae4b503a3e635444e823bc6f9082e1ba176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c0:dc:45:74:e0:28:ef:fc:b3:39:54:b9:47:
94:9b:1a:a9:dd:e6:30:67:4f:35:8a:0b:7c:2d:06:
e8:d1:87:9d:a8:4d:0e:da:37:f7:dc:8d:4a:83:51:
b8:e4:45:b2:18:ca:9c:6f:e6:42:c9:52:06:8b:9d:
bd:74:35:77:89:c8:20:bd:96:0d:1b:c5:f9:c4:84:
6d:78:2b:16:02:0d:e6:ea:c4:2c:6f:47:1a:8b:96:
f2:5e:b3:a4:b1:c2:ea:7b:e6:07:5c:6e:f1:21:f3:
bf:7d:48:54:59:02:a7:1f:a4:0e:a2:eb:20:90:64:
d2:74:66:91:a1:4b:44:a0:cf:61:e8:ad:ba:b4:1b:
29:a0:da:74:21:8d:24:67:56:a8:02:0a:b2:eb:27:
7d:d8:d6:aa:54:ca:14:d6:e7:43:c6:a5:76:59:ab:
ca:ea:1c:4b:7f:1e:1c:e6:4d:11:42:3a:c6:39:ff:
6f:ec:c4:49:21:92:35:ce:2e:d6:ba:9b:39:7f:24:
b0:fa:c1:d2:9e:45:f7:63:68:1e:4f:fb:59:8d:8a:
e5:e2:ab:28:61:1e:85:26:46:68:06:7f:0b:05:f0:
8f:ae:1e:81:83:05:a7:11:08:22:14:5e:85:f6:33:
cc:ca:3d:bf:a9:c9:72:2f:a1:c6:f0:87:8f:65:12:
9c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C7:8A:E4:B5:03:A3:E6:35:44:4E:82:3B:C6:F9:08:2E:1B:A1:76
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MseK5LUDo-Y1RE6CO8b5CC4boXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.153.0/24
2.27.155.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ac:51:2e:67:1a:62:a5:86:e7:87:df:d5:98:40:97:2e:8f:
6d:8a:00:4d:06:b6:4d:cd:54:4e:0a:f0:ce:70:2e:36:a8:bf:
3b:ba:87:8d:6b:54:2c:7a:9d:a8:f6:9e:9c:74:99:2e:ae:70:
17:af:dc:21:7e:df:1c:d4:c7:14:dd:90:80:9d:40:ed:29:44:
94:8e:1e:41:62:d8:e6:a7:0f:eb:48:d9:b2:9c:0a:f7:48:81:
92:86:73:a4:79:f6:09:ff:c6:79:7d:4e:fc:dd:d2:1b:3b:e4:
e6:1c:f4:85:b8:9a:2f:97:7f:dc:63:f5:0a:3a:3e:5d:a0:6e:
9f:74:25:9a:44:d5:21:6c:4c:68:bd:27:2e:ab:10:72:d8:47:
80:4b:79:22:ba:9a:b3:92:4c:e0:f2:d6:ad:41:83:04:c8:15:
c8:85:c3:a3:9d:1b:dd:fb:46:8d:b6:b0:ba:9b:8d:bf:7e:0e:
ee:ca:e3:83:9e:84:f2:ac:99:c4:37:69:e0:da:cc:e0:7c:c3:
8d:5a:ec:34:19:a5:3e:ab:39:15:b6:b6:f0:07:86:31:3a:bd:
75:cf:98:7a:ec:2e:fb:f7:7e:20:c1:e6:bc:fe:52:bd:79:23:
d7:ad:ec:11:8d:24:ca:ed:35:73:c0:13:0a:aa:fc:0e:18:47:
b5:69:24:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:13 2026 by rpki-client