Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Zz-oyduaZf-caTITn2wi2W3KCAE.roa
File: Zz-oyduaZf-caTITn2wi2W3KCAE.roa (raw, json)
Hash identifier: kvdj1KgSO1eeBNJ2hUKS0RcjODu7Q4W9VXVxoRb/Q9Y=
Subject key identifier: 67:3F:A8:C9:DB:9A:65:FF:9C:69:32:13:9F:6C:22:D9:6D:CA:08:01
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A00D54AE3302E76C713AFB27A75EA0EC7F
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Zz-oyduaZf-caTITn2wi2W3KCAE.roa
Signing time: Mon 17 Aug 2026 01:27:28 +0000
ROA not before: Mon 17 Aug 2026 01:27:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198585
IP address blocks: 2.27.92.0/24 maxlen: 24
13.143.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 19:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0d:54:ae:33:02:e7:6c:71:3a:fb:27:a7:5e:a0:ec:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 17 01:27:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=673fa8c9db9a65ff9c6932139f6c22d96dca0801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:64:5c:8d:c1:62:7f:dd:0f:dc:0d:a2:7a:df:
1d:dd:b1:b9:49:db:7c:2c:f8:c5:18:e2:a8:28:91:
d6:96:16:1a:ce:93:52:ad:d5:29:87:b5:f2:8b:54:
2b:9f:da:0d:e0:54:7d:a1:00:9b:fc:5e:92:44:7d:
de:72:3a:b9:a4:d6:12:b2:95:5b:0b:cb:fe:b6:ac:
0b:3a:5a:79:74:86:06:c4:91:48:24:eb:3d:a3:bd:
cc:b1:57:17:3b:bf:be:45:7f:44:10:1c:ad:1e:09:
28:b1:82:6e:2e:fe:da:e7:dc:e0:73:73:29:9b:9d:
68:6b:86:92:c7:9a:fd:d6:ce:17:cd:70:e5:60:45:
4d:20:03:f0:5c:f9:07:06:87:4b:ef:57:cb:44:a9:
6d:58:61:7a:80:86:66:76:6a:15:54:1d:fb:43:36:
b2:9d:34:04:58:61:05:ed:ec:b4:1e:f6:47:00:c9:
dc:81:27:b7:75:47:45:3e:52:d0:d1:1d:f1:f5:7c:
be:71:c7:71:c1:2b:65:b1:1b:c2:39:6a:7f:5e:d4:
1d:ec:b2:98:42:19:8c:9e:64:83:ca:53:78:e5:c3:
51:09:79:51:24:32:ea:5a:f4:cc:df:e0:fd:cb:fa:
b1:2a:87:22:a8:37:b8:2a:c0:e7:f3:63:86:19:b3:
33:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3F:A8:C9:DB:9A:65:FF:9C:69:32:13:9F:6C:22:D9:6D:CA:08:01
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Zz-oyduaZf-caTITn2wi2W3KCAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.92.0/24
13.143.255.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:5a:06:99:7e:0f:70:ba:bd:01:9b:66:37:e8:2d:a0:89:f0:
14:75:54:9a:32:34:78:74:3b:f3:68:8e:08:e7:2d:29:80:0d:
e1:f7:ec:58:dc:84:3c:3f:1a:86:77:ab:5c:7e:84:03:34:70:
b4:75:89:47:0b:9e:b6:07:01:4c:fc:fb:5c:fb:9d:55:fc:bd:
2f:f8:0c:40:d7:78:d5:75:bb:b2:e2:ae:02:90:70:c1:f9:15:
19:80:b7:f9:26:3f:83:ea:50:8f:7b:2f:4b:e8:f1:16:39:d8:
7a:03:21:4d:88:9e:c0:d3:5f:28:18:1c:3f:51:b0:e1:54:9f:
9c:08:64:54:90:52:5e:ed:a2:f3:1e:5e:1d:cb:3d:ec:54:86:
f9:e8:93:82:28:4d:c5:3c:4a:5e:a0:57:d2:28:25:87:a3:df:
b4:fd:de:82:eb:76:62:b5:b0:3b:92:2d:9d:d4:35:f1:4a:11:
47:05:6b:f8:70:b4:92:5f:b3:53:d4:51:e8:7d:1c:a9:ab:23:
47:14:9e:6b:b8:e9:ba:74:8e:d9:a5:63:f5:a4:a9:9d:2a:31:
56:12:d6:3f:a0:54:66:fd:c0:09:82:22:4c:40:43:2c:df:ba:
05:61:9e:27:aa:a2:e0:29:8b:17:67:e4:a3:8f:31:85:4f:74:
15:fe:80:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 04:08:58 2026 by rpki-client