Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OBRLp-jT0PQ3ZV1paIlaJqouhPQ.roa
File: OBRLp-jT0PQ3ZV1paIlaJqouhPQ.roa (raw, json)
Hash identifier: 23DoHol7zdd16lkZP/GN+nInt99rEIBK3BChaI89ukg=
Subject key identifier: 38:14:4B:A7:E8:D3:D0:F4:37:65:5D:69:68:89:5A:26:AA:2E:84:F4
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0AB3DC9F75D07D03E2BA603B1612D2B76
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OBRLp-jT0PQ3ZV1paIlaJqouhPQ.roa
Signing time: Wed 16 Sep 2026 17:22:28 +0000
ROA not before: Wed 16 Sep 2026 17:22:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207461
IP address blocks: 2.27.64.0/22 maxlen: 24
2.27.72.0/23 maxlen: 24
2.27.74.0/23 maxlen: 24
2.27.76.0/24 maxlen: 24
2.27.77.0/24 maxlen: 24
2.27.80.0/24 maxlen: 24
2.27.81.0/24 maxlen: 24
31.77.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ab:3d:c9:f7:5d:07:d0:3e:2b:a6:03:b1:61:2d:2b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 16 17:22:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38144ba7e8d3d0f437655d6968895a26aa2e84f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:a8:ed:3a:d7:4e:66:a3:d9:cc:b6:99:79:
91:cd:2d:9b:8d:44:99:c2:f7:cb:68:a2:37:00:29:
d2:a0:f8:4c:76:1c:f0:32:61:8c:ba:e7:69:e3:a2:
20:7f:85:23:80:28:73:40:37:b9:03:e0:df:d2:64:
eb:ce:5f:71:cd:25:00:0f:c4:9b:ac:60:d1:bc:ed:
34:44:ce:59:02:f5:91:ac:40:c6:07:39:d1:37:65:
e3:2d:33:62:a6:13:87:08:e3:1b:31:2a:b2:a8:0a:
cf:8d:56:7b:ba:67:14:c7:56:51:14:e8:67:48:a0:
17:8d:a7:27:76:e0:e9:aa:0c:96:c2:cc:19:b6:fe:
37:86:9b:a2:b5:8b:0d:b0:0f:c0:47:32:71:fc:f9:
98:2e:80:7a:52:88:b1:fc:2b:41:f9:5f:83:f6:6e:
f8:60:1a:86:9a:41:58:10:13:40:7c:4e:07:8d:50:
2b:12:b4:b6:3e:9e:d5:f7:eb:be:2e:31:93:df:e3:
7f:bb:fd:ef:7e:65:9e:fd:6e:1f:0f:8d:00:72:e2:
0e:f0:e7:72:e0:bf:26:c0:8f:10:3a:12:eb:7d:3d:
e9:8a:34:d5:90:f5:6a:77:0e:e0:b5:98:35:c7:c8:
e5:56:e4:dc:94:17:16:f8:c1:2c:33:14:ef:99:17:
07:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:14:4B:A7:E8:D3:D0:F4:37:65:5D:69:68:89:5A:26:AA:2E:84:F4
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OBRLp-jT0PQ3ZV1paIlaJqouhPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.64.0/22
2.27.72.0-2.27.77.255
2.27.80.0/23
31.77.70.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:16:d7:25:ae:a5:c4:a3:19:ff:c0:a1:83:02:c6:eb:40:c4:
7f:06:5f:13:34:bf:1d:cd:0b:3b:1c:14:93:9a:e5:4d:a4:60:
77:64:1b:34:d6:7a:6f:bd:53:43:94:f4:87:dc:cc:e4:a4:bd:
58:9f:b0:bb:cd:bb:9f:2f:03:57:d1:cb:5b:f7:f2:53:c6:aa:
7b:77:0a:19:0f:64:5f:6b:a1:15:28:1f:1a:51:90:23:67:0f:
e7:fd:cd:3b:fc:89:f5:17:b6:59:c6:40:ce:9e:61:64:54:29:
81:d6:c7:fd:9a:c0:fe:fc:7f:0f:56:2a:8b:c2:22:2e:7f:a7:
00:5e:62:7d:e0:b8:df:98:14:d5:9d:3d:24:00:03:97:93:d5:
0e:24:b0:f0:68:08:98:71:79:b4:58:fc:5e:54:96:7f:1b:42:
e1:51:3c:16:53:c1:67:7d:6d:bc:79:03:cf:21:d7:87:b2:2f:
b3:7f:4a:1a:51:38:21:c0:78:a2:53:9a:41:03:fa:d9:7d:c7:
b4:5b:11:99:97:52:18:14:50:79:b9:4b:9d:7d:3e:c1:7c:a9:
28:6a:92:e5:37:aa:76:45:3f:dc:a8:7b:61:c1:4f:db:9c:b1:
86:a2:06:4d:d7:61:56:0f:2b:de:eb:70:4f:a3:30:7d:61:56:
fa:d4:59:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:27:07 2026 by rpki-client