Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_dDTjOcDxn7ISbZpgY102iAsfcw.roa
File: _dDTjOcDxn7ISbZpgY102iAsfcw.roa (raw, json)
Hash identifier: GvyYYYxNh28v+oitk3bEzNy2I8tloaQUdtZTYCt8O3U=
Subject key identifier: FD:D0:D3:8C:E7:03:C6:7E:C8:49:B6:69:81:8D:74:DA:20:2C:7D:CC
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F1BCB20C931C2B23A34A6ED653370B969
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_dDTjOcDxn7ISbZpgY102iAsfcw.roa
Signing time: Wed 01 Jul 2026 03:48:44 +0000
ROA not before: Wed 01 Jul 2026 03:48:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 2.27.103.0/24 maxlen: 24
31.77.101.0/24 maxlen: 24
31.77.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1b:cb:20:c9:31:c2:b2:3a:34:a6:ed:65:33:70:b9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 1 03:48:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fdd0d38ce703c67ec849b669818d74da202c7dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:82:5d:7e:67:03:67:f4:07:e7:51:5f:ee:08:
44:0a:97:ed:13:da:69:aa:70:ef:ab:de:6f:fe:8c:
e7:68:21:e9:d1:bd:8a:5f:ec:01:f4:40:60:60:bf:
03:5d:5c:08:27:a7:b4:b9:7c:32:4f:8f:23:33:22:
20:b0:bb:38:1d:e1:d9:ac:36:8c:83:84:9c:fc:e1:
b7:50:65:84:80:24:b8:41:a8:fe:db:d9:ed:b0:87:
d9:bb:2e:6e:f9:65:58:b1:78:03:2c:15:c2:d5:60:
4a:97:f6:f9:4f:e6:04:a3:5b:7d:fe:90:96:c8:cb:
4a:c9:7e:21:b1:aa:63:74:08:d9:8f:85:17:7a:46:
ef:6d:fc:50:15:79:f3:53:ad:61:1e:49:e4:3f:91:
6f:55:78:5a:e9:b0:8f:e7:0d:78:75:a8:d2:29:4c:
be:66:e9:6b:10:27:03:04:98:81:e2:8d:46:69:52:
1e:53:77:4d:df:22:97:0f:34:eb:d3:59:fa:5b:a9:
08:7e:c8:bd:d3:ea:99:21:25:a3:1c:37:e6:a7:fb:
fa:83:47:dd:21:2f:2c:7b:ae:6e:4c:ea:2a:cb:bb:
da:e2:d5:7a:66:5b:23:48:3b:ed:dd:35:11:ec:97:
6c:6f:90:05:4e:39:39:2b:f3:0f:4b:f2:d3:8f:df:
9d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D0:D3:8C:E7:03:C6:7E:C8:49:B6:69:81:8D:74:DA:20:2C:7D:CC
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_dDTjOcDxn7ISbZpgY102iAsfcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.103.0/24
31.77.101.0/24
31.77.252.0/24
Signature Algorithm: sha256WithRSAEncryption
55:31:db:b2:55:d7:f1:94:80:75:d9:3d:ee:06:f4:9a:3a:86:
0c:ed:40:af:87:be:e5:06:85:bc:a8:2a:97:cd:ff:30:1b:cb:
39:01:14:15:b9:33:67:3f:8c:5f:b3:64:80:34:9b:0a:c0:a0:
2c:91:75:f6:cc:dc:61:48:3f:5b:56:57:d6:31:be:4e:6a:53:
32:80:5f:bb:47:ac:d2:2a:7e:7f:db:51:7a:36:3b:87:a3:4a:
9a:22:3a:b3:9f:46:68:4d:8f:c2:eb:ac:e2:22:f9:17:61:13:
d0:f1:50:e0:7d:71:06:cf:fd:0c:ee:d9:96:69:b3:0c:ef:a0:
df:6c:2a:54:90:5b:9d:f7:b6:d6:a0:71:94:ef:51:8a:1a:ee:
52:ee:0c:91:0f:1b:c1:76:be:05:a1:b5:97:1f:3f:44:43:be:
5d:b9:26:54:94:1e:13:b7:c2:cc:cb:27:e3:71:b7:41:56:73:
9a:63:1a:5b:c4:56:d0:10:35:0e:ba:a6:01:52:3c:03:e0:b1:
35:a7:d5:8b:a2:13:b0:c4:29:ca:82:e5:ff:1e:f2:96:5c:a7:
df:6d:04:23:f0:94:7d:ae:43:fe:76:02:b6:5d:2f:d8:8f:96:
66:76:97:c5:69:b6:2b:f9:c8:4a:92:dd:1b:9e:22:d7:48:38:
0f:da:71:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:02:50 2026 by rpki-client