Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OD35Ez7HUhPgWQwtBkw2s0BFY4c.roa
File: OD35Ez7HUhPgWQwtBkw2s0BFY4c.roa (raw, json)
Hash identifier: i/ZxH1Z6BCOPg1JcmMkIcAK4mUQlpHPaVXCi+sOSOfI=
Subject key identifier: 38:3D:F9:13:3E:C7:52:13:E0:59:0C:2D:06:4C:36:B3:40:45:63:87
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019CF7FE15B76CC620FAB4B7753F4C55CA92
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OD35Ez7HUhPgWQwtBkw2s0BFY4c.roa
Signing time: Mon 16 Mar 2026 18:52:29 +0000
ROA not before: Mon 16 Mar 2026 18:52:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200051
IP address blocks: 2.27.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f7:fe:15:b7:6c:c6:20:fa:b4:b7:75:3f:4c:55:ca:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 16 18:52:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=383df9133ec75213e0590c2d064c36b340456387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:41:0b:ed:db:56:42:da:2b:3d:d4:1c:b8:13:
95:9b:cd:96:81:1f:96:47:79:f0:47:51:6f:6a:bf:
39:98:d9:8e:8f:66:f6:bb:9c:3e:71:7d:c2:3d:ba:
68:a9:87:f6:06:25:1c:1c:4a:2b:e0:2c:81:28:e7:
43:8e:16:d7:fe:8c:7b:82:bd:4b:32:cb:b8:e9:5d:
a3:d4:8b:00:d2:14:98:83:a7:6e:d1:cb:eb:c7:76:
8a:4b:50:91:ed:e4:6b:5f:70:e1:c4:fe:f1:8a:bc:
40:70:8b:cb:3e:a5:54:62:7f:29:70:ca:5a:55:ea:
a5:d4:c8:cd:91:e4:52:53:4b:f4:51:9f:7f:b7:c6:
6a:b2:7a:1b:8a:36:f1:50:b9:3c:9a:2d:f0:a5:db:
4d:88:fa:93:da:03:a7:3e:b1:0f:07:c3:ef:ed:88:
c1:d8:88:d0:d8:83:19:76:d7:6e:af:d2:cc:8a:2e:
6e:74:1e:9c:59:e3:e1:2a:cf:26:dc:fc:55:66:29:
f8:6e:ff:75:1c:b0:36:cb:23:1b:1a:fe:60:9c:77:
a2:f8:fd:11:60:cf:71:96:e0:55:f2:92:8d:13:2c:
f1:57:28:c1:02:2f:de:5f:dd:35:ff:0d:99:a3:00:
e3:21:b0:04:35:37:f2:c1:5b:ab:be:af:05:66:a2:
75:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3D:F9:13:3E:C7:52:13:E0:59:0C:2D:06:4C:36:B3:40:45:63:87
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OD35Ez7HUhPgWQwtBkw2s0BFY4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.62.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:ac:e8:26:25:b4:05:27:00:f8:e0:ce:19:84:7e:3e:e9:5d:
0e:ee:5e:41:45:6e:b9:c3:94:79:eb:ca:77:fe:db:d4:aa:19:
9a:18:70:ab:6d:f6:aa:f4:c5:9b:fe:7c:0f:9c:a6:55:f8:6a:
7c:2f:cd:8c:26:b0:6b:cc:81:f4:e9:4b:c8:08:7c:6b:89:e6:
85:bc:c4:3c:a1:c9:df:04:cd:38:5c:de:c3:11:b1:be:1d:aa:
f8:d5:f1:fe:d0:34:d2:87:e8:ad:f7:10:d2:82:2b:1c:03:8a:
ad:08:c6:75:30:98:56:1d:f8:16:a4:33:8a:b5:61:40:9f:6f:
bf:31:89:cd:60:f8:66:9a:04:d7:72:d8:1b:10:48:34:dd:76:
66:d0:c3:83:f0:dc:42:2f:88:55:48:5d:0f:0b:fa:85:30:43:
3a:81:d7:10:20:88:59:1b:57:bd:f4:f5:0b:9e:40:b4:1f:fb:
e2:11:5b:21:22:b6:ba:c4:56:05:cf:ba:a5:d0:e7:eb:6a:0b:
b5:df:9e:be:74:8c:ad:f5:dd:5e:6c:90:58:1f:b9:ca:13:c6:
ed:99:c8:54:38:37:64:46:dd:0d:e2:d1:a1:da:6e:95:f4:70:
88:53:d0:15:57:f9:60:a8:8c:50:3f:c5:86:9d:04:61:16:2e:
c5:fa:4c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 14:30:39 2026 by rpki-client