Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/V5RdmXsKQ75wMVzIj1XzCDOvY_8.roa
File: V5RdmXsKQ75wMVzIj1XzCDOvY_8.roa (raw, json)
Hash identifier: 24mZDH/CSF/uVaL/i6lFn9O8QoLnfUxIsw9Bz8vU4BM=
Subject key identifier: 57:94:5D:99:7B:0A:43:BE:70:31:5C:C8:8F:55:F3:08:33:AF:63:FF
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0B030922C1591E26A35FB105E24B362D5
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/V5RdmXsKQ75wMVzIj1XzCDOvY_8.roa
Signing time: Thu 17 Sep 2026 16:26:08 +0000
ROA not before: Thu 17 Sep 2026 16:26:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219337
IP address blocks: 2.27.136.0/24 maxlen: 24
2.27.200.0/24 maxlen: 24
2.27.201.0/24 maxlen: 24
2.27.202.0/24 maxlen: 24
2.27.203.0/24 maxlen: 24
2.27.204.0/24 maxlen: 24
2.27.205.0/24 maxlen: 24
2.27.206.0/24 maxlen: 24
2.27.207.0/24 maxlen: 24
13.143.160.0/24 maxlen: 24
13.143.161.0/24 maxlen: 24
13.143.162.0/24 maxlen: 24
13.143.163.0/24 maxlen: 24
31.77.8.0/24 maxlen: 24
31.77.9.0/24 maxlen: 24
31.77.10.0/24 maxlen: 24
31.77.11.0/24 maxlen: 24
31.77.12.0/24 maxlen: 24
31.77.13.0/24 maxlen: 24
31.77.14.0/24 maxlen: 24
31.77.15.0/24 maxlen: 24
31.77.16.0/24 maxlen: 24
31.77.17.0/24 maxlen: 24
31.77.18.0/24 maxlen: 24
31.77.19.0/24 maxlen: 24
177.3.208.0/24 maxlen: 24
177.3.209.0/24 maxlen: 24
177.3.212.0/24 maxlen: 24
177.3.213.0/24 maxlen: 24
177.3.214.0/24 maxlen: 24
177.3.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:30:92:2c:15:91:e2:6a:35:fb:10:5e:24:b3:62:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 17 16:26:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57945d997b0a43be70315cc88f55f30833af63ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3f:71:ac:82:c8:87:12:82:9d:90:af:4f:7c:
ff:b2:1a:8f:c4:ec:79:94:57:de:02:84:52:38:88:
9c:58:6a:e2:29:6b:50:03:00:34:a9:5d:f8:87:1d:
dc:20:d7:a2:3e:11:a1:d9:25:b6:4e:f9:53:93:18:
bf:8e:c4:08:4e:c2:a3:f8:33:6e:22:73:7d:e4:d3:
d2:eb:2b:76:db:16:92:36:b9:fb:21:12:4b:ea:a9:
87:de:8d:0f:3e:33:32:17:15:95:e4:07:a0:a6:05:
95:a1:3b:06:83:4c:3f:2f:ef:37:6a:b3:b9:ff:1e:
f4:28:d8:fe:d0:fc:1d:8c:ea:f6:c4:8a:6b:8e:74:
7f:53:30:45:5c:79:18:97:78:35:6e:a4:8f:74:df:
73:bd:fd:1d:cf:6e:1f:69:d3:dd:bd:21:a1:2d:7d:
e3:ed:3d:c9:ae:0d:70:ef:17:86:3c:7f:84:bc:9a:
7b:83:56:ca:65:5e:23:71:5c:a5:b9:28:a8:d0:c4:
8b:d9:d0:df:4b:61:74:c8:95:c0:9c:9f:36:0c:e3:
a7:50:7f:3c:58:ca:9d:a0:81:55:fb:16:ac:84:c2:
96:b7:8e:a5:09:04:18:a4:09:12:2a:37:00:f0:0e:
4d:8d:b8:ae:ab:e5:6d:b2:af:46:15:24:94:6c:d7:
d0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:94:5D:99:7B:0A:43:BE:70:31:5C:C8:8F:55:F3:08:33:AF:63:FF
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/V5RdmXsKQ75wMVzIj1XzCDOvY_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.136.0/24
2.27.200.0/21
13.143.160.0/22
31.77.8.0-31.77.19.255
177.3.208.0/23
177.3.212.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:3c:68:b1:16:7e:6c:e8:f6:15:1b:77:94:fe:1d:e5:c7:50:
dc:58:cb:6e:6f:2a:ad:fe:d1:43:b5:a8:8e:96:05:1b:47:f8:
e0:dc:bb:c7:fd:35:35:f3:92:39:95:2b:43:20:e1:b8:aa:8d:
76:42:3f:20:00:c7:bd:5e:ad:b9:c6:ff:64:8b:b7:de:9e:45:
90:8c:16:75:29:f1:2c:61:28:fd:dd:39:6d:d9:ed:cf:3b:8f:
91:11:65:bf:a1:e3:df:ef:02:6a:16:e5:40:96:e8:19:a1:4a:
f1:51:30:af:c4:82:c2:da:ce:ac:dc:ff:a4:a5:de:45:46:fd:
59:e0:f8:58:a3:b6:a2:34:46:da:c2:0c:3c:7b:ff:8a:af:33:
28:42:16:9d:50:2f:46:6a:aa:6b:fd:7f:5d:e1:5c:4b:8e:4a:
0f:bc:82:ca:a7:9e:07:45:06:7c:91:28:cd:c7:62:a2:69:bb:
0b:7a:6e:67:b2:eb:2e:ca:c1:23:28:c6:ae:9e:40:b1:04:86:
14:66:bc:7c:0f:1d:4f:04:b5:f8:2c:a7:67:89:e1:c7:f5:15:
81:dc:82:55:d3:81:01:d7:34:24:f9:ab:d9:5c:7a:56:97:fc:
9c:9f:77:e0:ec:31:bc:61:02:24:74:f3:16:4a:4f:6e:22:7b:
d9:a5:a4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:27:11 2026 by rpki-client