Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/aHFMnzktv9yDH7tHhSVH91p0zko.roa
File: aHFMnzktv9yDH7tHhSVH91p0zko.roa (raw, json)
Hash identifier: gDIshkhqexwhCgzjenVxcIoVLi9K2yElGX6dUi5f0oA=
Subject key identifier: 68:71:4C:9F:39:2D:BF:DC:83:1F:BB:47:85:25:47:F7:5A:74:CE:4A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D2AEA1ACCB3A226D8F1E5E89AFD581F74
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/aHFMnzktv9yDH7tHhSVH91p0zko.roa
Signing time: Thu 26 Mar 2026 16:11:18 +0000
ROA not before: Thu 26 Mar 2026 16:11:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203057
IP address blocks: 2.27.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Apr 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:ea:1a:cc:b3:a2:26:d8:f1:e5:e8:9a:fd:58:1f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 26 16:11:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68714c9f392dbfdc831fbb47852547f75a74ce4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:33:44:9a:3b:d1:31:c9:9f:8d:79:d8:9c:0f:
44:71:85:75:1a:43:0d:47:61:bf:18:16:b8:15:14:
fc:cc:13:a6:1d:1a:70:68:17:26:03:64:ec:52:f2:
23:4e:0f:9b:81:e2:6b:8e:76:f9:9e:1a:80:4d:97:
08:1a:40:49:41:2c:12:b4:a9:cb:25:c9:f7:1f:b6:
be:e3:18:4e:60:66:6b:82:46:7c:3d:50:0c:97:8a:
22:8b:13:57:c8:0f:3f:1d:57:d8:d0:c1:a6:c0:1c:
3a:21:f2:b8:c2:c9:6c:8f:05:36:3f:ea:4b:52:ce:
27:66:70:0c:30:fd:a0:eb:65:ed:8b:33:c6:86:9b:
3e:ab:4a:70:69:48:0a:ce:63:e6:cf:38:60:03:2b:
8c:0b:45:c4:57:f7:2a:eb:ed:2b:68:02:b3:1e:be:
6c:70:4a:92:c6:9c:81:2d:e3:cf:82:a3:61:b4:33:
ca:40:8d:31:34:4c:f7:f3:18:cb:e7:c4:70:8d:68:
16:1c:ee:21:29:af:ba:9d:8a:ab:9d:fb:0d:7f:f9:
c3:20:5c:c5:f3:db:86:6d:ac:70:f5:d9:04:a7:6d:
e3:1c:ad:44:2a:08:c1:48:84:3a:af:4a:eb:de:3e:
2b:aa:eb:fc:c5:87:c3:25:35:fe:a0:0f:11:68:97:
4e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:71:4C:9F:39:2D:BF:DC:83:1F:BB:47:85:25:47:F7:5A:74:CE:4A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/aHFMnzktv9yDH7tHhSVH91p0zko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.232.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:14:be:f4:2b:63:45:6b:7b:1a:2b:8d:5b:55:ec:2b:23:69:
05:8c:b4:da:5e:63:05:37:81:db:65:4f:4b:bc:da:81:68:5d:
93:6c:13:2f:9c:72:23:72:2b:e7:8a:9d:ac:fa:1b:f3:32:45:
d7:44:4d:83:a7:44:d7:be:94:d5:c1:00:f7:d0:f2:ea:a2:55:
10:96:10:d5:71:28:02:f1:0d:2f:46:e9:34:e4:97:38:0c:27:
2e:08:82:44:4e:4c:f1:4c:fd:09:56:39:00:d2:f5:54:68:ba:
73:34:50:e2:10:8b:28:44:1d:73:d2:3e:ec:e1:a2:88:82:be:
5d:d2:21:23:91:03:c5:d0:fc:5e:66:2b:ef:1c:32:e2:88:ed:
57:af:9d:08:d5:15:4b:f9:21:22:68:eb:8c:13:08:67:6d:5b:
95:82:8c:c1:56:93:93:d3:5f:92:b9:0a:5e:57:29:79:6b:3b:
a2:21:be:9a:c5:e5:c4:e0:d1:60:bf:8c:94:a1:c9:dd:ea:30:
e7:05:48:52:9a:04:ef:64:4b:af:e6:84:70:d0:47:c3:9c:76:
a1:cb:38:67:d8:69:69:d9:81:36:aa:db:01:4f:22:9b:59:68:
94:9d:a4:49:78:74:db:ad:9e:52:50:01:d9:19:d7:6f:1b:7b:
53:00:1b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 14:57:25 2026 by rpki-client