Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/U443-Jxw7VeutfDWKwUpMgnH9Co.roa
File: U443-Jxw7VeutfDWKwUpMgnH9Co.roa (raw, json)
Hash identifier: 5rxm268sWUpDNpr2Meltv+rUUtBIZ933wiZA/hInJx8=
Subject key identifier: 53:8E:37:F8:9C:70:ED:57:AE:B5:F0:D6:2B:05:29:32:09:C7:F4:2A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019CF55F015593C28CEEB6D2645C83230CCD
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/U443-Jxw7VeutfDWKwUpMgnH9Co.roa
Signing time: Mon 16 Mar 2026 06:39:29 +0000
ROA not before: Mon 16 Mar 2026 06:39:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213821
IP address blocks: 2.27.93.0/24 maxlen: 24
2.27.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f5:5f:01:55:93:c2:8c:ee:b6:d2:64:5c:83:23:0c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 16 06:39:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=538e37f89c70ed57aeb5f0d62b05293209c7f42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:26:2b:5a:51:8b:b7:54:a7:d3:5e:01:d5:34:
b3:51:9e:39:6b:3d:c0:bc:bd:b9:b5:8b:e8:85:e9:
0e:20:19:0f:6d:b7:9a:21:98:15:77:06:7e:23:da:
84:f3:c3:7e:97:54:7d:69:3a:f2:4f:0c:b5:ab:a9:
fc:35:00:74:be:bd:36:82:c1:c6:4e:4c:a8:9b:29:
7d:8b:3c:f4:f2:70:a2:7c:4d:0a:08:70:c7:d6:cd:
1a:63:57:20:82:14:c4:42:ad:5d:df:b3:b7:04:6f:
a3:75:69:a3:eb:b4:1a:92:15:90:a5:52:70:2f:cd:
c5:03:ec:f0:6f:6d:22:23:0f:1d:8e:2b:87:ee:e1:
d8:0f:0b:be:0f:20:00:82:71:a6:0a:0f:05:08:7e:
21:64:d1:d6:ef:92:7c:2d:26:80:fe:ff:40:6c:41:
e5:de:b1:44:3d:5e:ca:39:b1:df:6a:d1:5e:ef:ec:
b0:78:67:51:3b:4c:ea:5b:58:d7:66:ba:75:03:16:
f1:90:66:a6:0b:b0:fc:65:9d:13:ab:4f:b3:40:a3:
82:0f:44:aa:54:60:8c:6e:f7:19:b7:bb:00:ae:ea:
c4:12:99:e5:e7:d7:90:ef:1e:23:77:3c:50:a1:6e:
1f:8e:92:2a:5b:70:8e:a0:a9:e1:8e:36:59:35:3d:
a8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8E:37:F8:9C:70:ED:57:AE:B5:F0:D6:2B:05:29:32:09:C7:F4:2A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/U443-Jxw7VeutfDWKwUpMgnH9Co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.93.0/24
2.27.95.0/24
Signature Algorithm: sha256WithRSAEncryption
98:40:3c:48:46:96:c4:98:4b:75:5f:50:f2:1a:48:3a:c0:80:
36:66:81:9b:b4:0a:81:58:56:21:2a:c6:a6:69:b2:44:4b:9c:
87:40:a5:4d:e9:59:bb:c2:c7:03:3f:6a:ce:40:62:72:09:a8:
75:e4:9b:71:94:a3:56:bc:46:68:93:ac:cb:55:f6:3c:16:6a:
6c:82:9d:56:24:c1:02:ad:87:df:a2:58:9c:f9:2c:50:2b:ee:
7d:0f:e8:2c:77:ea:ea:3c:df:9b:2d:eb:24:94:06:0c:48:ff:
75:d9:fd:07:5c:31:c4:98:19:8a:37:ae:e1:ee:87:1c:91:7f:
bb:a6:8d:7d:5d:d2:57:f5:3f:a5:d9:91:73:fe:2f:6c:5f:28:
fa:e9:e1:d3:fd:d2:8c:9f:e4:ee:64:17:d0:ff:f8:28:3a:6a:
b6:2d:2e:7a:ac:9a:3a:75:55:99:2e:1e:5a:bf:c0:14:ff:d0:
5f:7a:94:da:5d:bd:bc:72:4b:1d:03:e7:13:21:d7:38:39:6f:
6d:3a:d5:f4:53:d5:1e:42:46:c0:1c:15:38:70:d3:4a:fc:9d:
04:27:c0:14:3f:9d:53:c9:f0:31:9d:99:b3:8e:29:93:60:f6:
2e:7a:64:aa:a7:ed:9b:09:d3:5a:58:d7:81:02:4a:ff:76:c3:
75:ff:02:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 14:36:26 2026 by rpki-client