Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/PTP3pxssCeYw76Q1haO6Kodiy1Y.roa
File: PTP3pxssCeYw76Q1haO6Kodiy1Y.roa (raw, json)
Hash identifier: 7WBxDHygXIsnz5/E76Z91lkSqqIZM6ACxEasN1tm4K4=
Subject key identifier: 3D:33:F7:A7:1B:2C:09:E6:30:EF:A4:35:85:A3:BA:2A:87:62:CB:56
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DE5488B4F48F40D45D782797EFB279818
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/PTP3pxssCeYw76Q1haO6Kodiy1Y.roa
Signing time: Fri 01 May 2026 20:43:49 +0000
ROA not before: Fri 01 May 2026 20:43:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 2.27.214.0/23 maxlen: 24
2.27.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e5:48:8b:4f:48:f4:0d:45:d7:82:79:7e:fb:27:98:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 1 20:43:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d33f7a71b2c09e630efa43585a3ba2a8762cb56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b3:16:99:d9:4f:c1:2c:33:ac:ab:18:0e:86:
ec:54:92:34:f3:06:46:3d:d0:bb:54:05:18:b6:27:
d6:97:a9:9f:24:20:6f:17:d6:54:b1:42:8a:ca:af:
34:35:54:23:25:69:90:2a:50:39:77:be:a1:2f:3f:
71:b1:c0:8d:10:96:6f:90:b7:a4:3b:12:68:82:17:
6c:84:c6:3b:35:5b:b3:e7:ce:1b:cc:dd:83:e4:db:
16:85:35:3e:69:59:3e:c2:32:18:2a:1c:c4:65:db:
35:1c:7f:31:be:d9:a5:71:50:0a:c2:a6:7c:81:1e:
d0:cb:7f:48:e0:ed:2a:e6:12:23:70:15:70:51:83:
29:a4:cb:36:d6:08:c8:0e:5d:6e:c7:f3:23:16:6a:
ea:7c:c3:7d:af:2c:62:13:43:3c:ab:6c:a9:05:4b:
84:44:08:64:f0:5a:e7:20:9c:49:0e:bb:67:73:74:
5c:74:14:6d:66:fe:f2:39:e0:8f:7d:89:b7:3e:c9:
94:e2:d4:15:77:d7:56:cf:e8:81:24:df:bd:43:4f:
ca:4f:d9:6a:23:68:b2:51:4a:81:22:6d:47:bc:c2:
f4:de:af:54:8d:19:68:1b:93:60:8c:46:b9:8c:f0:
9f:35:52:b2:8a:84:af:c9:4d:e3:9e:d2:7f:36:19:
19:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:33:F7:A7:1B:2C:09:E6:30:EF:A4:35:85:A3:BA:2A:87:62:CB:56
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/PTP3pxssCeYw76Q1haO6Kodiy1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.214.0/23
2.27.241.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:30:b7:29:cf:a6:fe:ab:9a:0d:2f:62:7d:08:40:5b:1c:de:
87:f8:00:6b:3d:4e:66:19:f8:68:a2:64:71:10:2b:43:9a:7b:
8b:6c:0f:89:4d:c8:03:28:3a:a2:1a:5c:89:1a:f7:06:69:71:
ae:7e:ad:38:b9:4a:13:26:ef:6e:d7:f0:c1:35:eb:11:f1:08:
3f:84:c9:35:33:0f:ab:6b:58:11:c1:12:b8:d8:cc:52:03:c6:
51:fc:1a:c3:b1:b3:0b:cd:28:c1:f2:97:b8:f9:28:ee:73:28:
86:63:a7:f8:ce:d2:00:b2:1e:fb:8d:f1:8c:47:e4:0d:7c:fb:
34:8c:1d:5b:ac:41:31:be:fb:4d:ac:9e:77:a6:66:0f:08:2a:
20:5d:8b:21:ea:40:fa:11:a5:97:08:b0:df:22:47:4f:f9:45:
62:0b:56:49:c9:c2:5e:7e:e1:79:55:b5:24:f1:82:09:78:b2:
5d:de:95:5c:a5:be:89:85:80:49:08:5a:99:b9:df:7b:7f:35:
0c:82:1e:75:f6:64:2b:ed:68:aa:d3:8d:08:37:c7:66:a8:04:
91:3d:3a:a0:74:92:37:c6:5b:e6:3d:fc:15:f8:a8:39:95:0a:
c8:03:c1:42:01:bf:97:ce:e9:b5:c3:f7:a7:f0:68:88:3c:7d:
ef:ff:8c:24
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ3lSItPSPQNRdeCeX77J5gYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNTAxMjA0MzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDMzZjdhNzFiMmMwOWU2MzBlZmE0MzU4NWEzYmEyYTg3NjJjYjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rMWmdlPwSwzrKsYDobsVJI08wZG
PdC7VAUYtifWl6mfJCBvF9ZUsUKKyq80NVQjJWmQKlA5d76hLz9xscCNEJZvkLek
OxJoghdshMY7NVuz584bzN2D5NsWhTU+aVk+wjIYKhzEZds1HH8xvtmlcVAKwqZ8
gR7Qy39I4O0q5hIjcBVwUYMppMs21gjIDl1ux/MjFmrqfMN9ryxiE0M8q2ypBUuE
RAhk8FrnIJxJDrtnc3RcdBRtZv7yOeCPfYm3PsmU4tQVd9dWz+iBJN+9Q0/KT9lq
I2iyUUqBIm1HvML03q9UjRloG5NgjEa5jPCfNVKyioSvyU3jntJ/NhkZHwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFD0z96cbLAnmMO+kNYWjuiqHYstWMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvUFRQM3B4c3NDZVl3NzZRMWhhTzZLb2RpeTFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBAhvWAwQA
AhvxMA0GCSqGSIb3DQEBCwUAA4IBAQAeMLcpz6b+q5oNL2J9CEBbHN6H+ABrPU5m
GfhoomRxECtDmnuLbA+JTcgDKDqiGlyJGvcGaXGufq04uUoTJu9u1/DBNesR8Qg/
hMk1Mw+ra1gRwRK42MxSA8ZR/BrDsbMLzSjB8pe4+SjucyiGY6f4ztIAsh77jfGM
R+QNfPs0jB1brEExvvtNrJ53pmYPCCogXYsh6kD6EaWXCLDfIkdP+UViC1ZJycJe
fuF5VbUk8YIJeLJd3pVcpb6JhYBJCFqZud97fzUMgh519mQr7Wiq040IN8dmqASR
PTqgdJI3xlvmPfwV+Kg5lQrIA8FCAb+Xzum1w/en8GiIPH3v/4wk
-----END CERTIFICATE-----
Generated at Tue May 5 16:49:27 2026 by rpki-client