Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/YQINj0kaas7jn1wuhNcOgdWHNCY.roa
File: YQINj0kaas7jn1wuhNcOgdWHNCY.roa (raw, json)
Hash identifier: GLQRNKay5gLFr8j2b/24dqzDN4mZ+36PzsA3/vbH2cc=
Subject key identifier: 61:02:0D:8F:49:1A:6A:CE:E3:9F:5C:2E:84:D7:0E:81:D5:87:34:26
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D07B6BE736D9E9759B9A4944D3EA8D5C0
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/YQINj0kaas7jn1wuhNcOgdWHNCY.roa
Signing time: Thu 19 Mar 2026 20:08:29 +0000
ROA not before: Thu 19 Mar 2026 20:08:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211826
IP address blocks: 2.27.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:07:b6:be:73:6d:9e:97:59:b9:a4:94:4d:3e:a8:d5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 19 20:08:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61020d8f491a6acee39f5c2e84d70e81d5873426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:74:f5:7d:74:84:e2:dc:5f:3e:02:6c:5f:de:
f9:d4:fd:d7:b5:3a:94:0f:1f:60:d4:25:86:c1:04:
7d:35:cb:16:b7:b3:8f:93:7d:bb:a2:4b:a0:5f:59:
bf:47:58:f2:8b:1e:68:36:da:7a:fe:43:91:4c:30:
cb:cd:3e:d9:55:e1:da:20:c4:96:22:3f:e4:ea:3e:
f2:e1:90:fa:05:eb:ce:dc:e5:94:d2:de:bc:7e:d2:
35:6e:fe:09:80:fc:a5:52:de:47:65:96:73:b7:3b:
33:88:2f:d1:84:bc:6b:e9:89:0e:8f:8c:b2:89:32:
09:5c:05:7c:37:e0:e9:2f:84:36:e4:99:c5:53:3a:
e1:9d:1d:28:19:79:14:16:4d:37:de:cd:95:32:b8:
e1:34:b3:07:76:08:d2:d1:83:28:56:48:25:94:ba:
9a:7d:76:6a:fc:86:ed:80:91:e2:72:30:b0:97:4d:
08:5c:4d:93:7a:0f:e5:d3:87:ce:7e:c5:a0:7a:b0:
30:e9:bb:af:89:84:93:4e:30:aa:d7:d8:99:cc:77:
05:2a:22:dd:8d:06:09:e1:0c:af:c5:6f:4a:e6:1c:
60:41:64:4f:1e:af:c8:d7:da:cb:40:5a:6c:83:ba:
c7:09:1f:d2:ec:22:6f:7c:a3:bb:63:90:c5:ef:66:
8a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:02:0D:8F:49:1A:6A:CE:E3:9F:5C:2E:84:D7:0E:81:D5:87:34:26
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/YQINj0kaas7jn1wuhNcOgdWHNCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.102.0/24
Signature Algorithm: sha256WithRSAEncryption
88:3d:05:fd:01:30:c0:9d:16:15:c7:df:3c:0b:16:f8:22:22:
55:1d:55:b7:8b:87:50:ee:7a:dc:1f:a6:20:b4:c4:26:b4:1b:
a9:fd:54:61:aa:97:97:9b:c0:3d:89:d6:52:f7:c9:96:96:d7:
30:d1:c9:f2:63:b1:03:23:10:5e:07:86:81:58:66:87:61:4f:
33:61:52:14:83:82:b8:d3:e7:b4:53:53:da:31:5f:e9:1e:e1:
11:2a:70:93:1c:e3:b3:4c:ac:38:93:2b:29:18:19:f5:5a:34:
fb:f5:ca:68:2d:b1:e2:d6:bd:bf:86:b3:37:79:d4:67:06:18:
b8:44:a4:cd:72:7b:91:6f:35:8f:1e:89:8a:cd:77:09:24:b9:
68:6e:1b:ac:05:66:fa:a3:df:ec:02:c2:15:fa:3b:84:b1:16:
13:9c:06:a6:93:12:89:cd:17:e6:be:a6:b8:6f:a9:fd:6e:2a:
db:55:ee:71:b2:8e:10:94:14:d3:a2:09:7f:16:d8:c3:96:ff:
e3:0d:b3:5b:66:7e:8d:d8:4c:e3:36:4b:de:6d:58:62:2b:91:
0e:4a:14:5a:81:7e:30:6c:b1:c0:04:da:02:71:ad:65:f4:72:
b6:46:82:22:b4:7c:bb:9b:8b:2d:5e:93:19:b8:72:23:57:9e:
95:39:2b:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0Htr5zbZ6XWbmklE0+qNXAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwMzE5MjAwODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTAyMGQ4ZjQ5MWE2YWNlZTM5ZjVjMmU4NGQ3MGU4MWQ1ODczNDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HT1fXSE4txfPgJsX9751P3XtTqU
Dx9g1CWGwQR9NcsWt7OPk327okugX1m/R1jyix5oNtp6/kORTDDLzT7ZVeHaIMSW
Ij/k6j7y4ZD6BevO3OWU0t68ftI1bv4JgPylUt5HZZZztzsziC/RhLxr6YkOj4yy
iTIJXAV8N+DpL4Q25JnFUzrhnR0oGXkUFk033s2VMrjhNLMHdgjS0YMoVkgllLqa
fXZq/IbtgJHicjCwl00IXE2Teg/l04fOfsWgerAw6buviYSTTjCq19iZzHcFKiLd
jQYJ4QyvxW9K5hxgQWRPHq/I19rLQFpsg7rHCR/S7CJvfKO7Y5DF72aKVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGECDY9JGmrO459cLoTXDoHVhzQmMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvWVFJTmowa2FhczdqbjF3dWhOY09nZFdITkNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAhtmMA0G
CSqGSIb3DQEBCwUAA4IBAQCIPQX9ATDAnRYVx988Cxb4IiJVHVW3i4dQ7nrcH6Yg
tMQmtBup/VRhqpeXm8A9idZS98mWltcw0cnyY7EDIxBeB4aBWGaHYU8zYVIUg4K4
0+e0U1PaMV/pHuERKnCTHOOzTKw4kyspGBn1WjT79cpoLbHi1r2/hrM3edRnBhi4
RKTNcnuRbzWPHomKzXcJJLlobhusBWb6o9/sAsIV+juEsRYTnAamkxKJzRfmvqa4
b6n9birbVe5xso4QlBTTogl/FtjDlv/jDbNbZn6N2EzjNkvebVhiK5EOShRagX4w
bLHABNoCca1l9HK2RoIitHy7m4stXpMZuHIjV56VOStr
-----END CERTIFICATE-----
Generated at Sat Mar 21 14:31:05 2026 by rpki-client