Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/cSfXjmHQbZ_qxqTHgGRXXfcf_eU.roa
File: cSfXjmHQbZ_qxqTHgGRXXfcf_eU.roa (raw, json)
Hash identifier: J+8PsK+nPoFmXlP3Cv6L2+jiToKJc6ieui81MWPqXC0=
Subject key identifier: 71:27:D7:8E:61:D0:6D:9F:EA:C6:A4:C7:80:64:57:5D:F7:1F:FD:E5
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DCCF95D4D1AED9EC6666FF3BB93DC18E8
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/cSfXjmHQbZ_qxqTHgGRXXfcf_eU.roa
Signing time: Mon 27 Apr 2026 03:26:27 +0000
ROA not before: Mon 27 Apr 2026 03:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9318
IP address blocks: 2.27.115.0/24 maxlen: 24
31.77.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:f9:5d:4d:1a:ed:9e:c6:66:6f:f3:bb:93:dc:18:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 27 03:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7127d78e61d06d9feac6a4c78064575df71ffde5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:38:88:b3:10:e3:c7:f4:7b:71:88:6e:de:8c:
1a:ba:8f:d3:f9:a7:cc:7d:bb:7d:92:93:c7:ba:e5:
a5:dc:7b:36:13:e1:07:44:09:1a:79:cb:71:e2:a7:
37:db:c8:31:48:a9:35:4c:d5:eb:41:11:62:75:19:
74:4e:2e:3d:9f:2c:ff:52:a7:9c:09:25:58:d0:c4:
07:44:8d:9d:dc:7a:6a:ab:f6:6c:39:5c:1b:9c:15:
79:1c:2b:4c:b7:b0:9c:c7:97:6a:e7:b4:7a:bf:15:
5a:02:1a:c9:ab:95:3a:42:0b:e0:d4:23:c7:dd:74:
3b:ee:07:b4:ce:52:9e:81:c4:e9:8d:c9:53:86:dc:
19:b3:76:d3:0b:04:32:fe:3a:d9:b3:d1:9d:7e:7f:
75:4b:7d:3b:28:1d:b9:c7:c6:f9:c4:47:4b:3f:be:
6b:63:07:82:6c:c4:1c:c4:06:29:66:34:b3:c2:91:
85:eb:fd:45:42:32:e5:70:6d:6a:05:d8:6f:e5:97:
bb:e2:49:62:a9:7b:4b:8d:ea:59:62:87:25:b6:7d:
e6:c2:e6:34:d6:a6:d4:0f:d9:20:52:be:02:ea:0b:
d2:21:f5:38:07:b2:7f:c5:dc:fd:ac:fc:18:e1:f0:
a3:d6:a4:e2:ee:8a:94:a1:54:db:7b:19:40:17:31:
6b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:27:D7:8E:61:D0:6D:9F:EA:C6:A4:C7:80:64:57:5D:F7:1F:FD:E5
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/cSfXjmHQbZ_qxqTHgGRXXfcf_eU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.115.0/24
31.77.253.0/24
Signature Algorithm: sha256WithRSAEncryption
40:d6:5a:9a:36:c2:e2:b3:bf:05:95:36:6f:b8:88:28:9c:9c:
a2:0f:5e:b7:6e:dc:3f:f2:b2:66:46:72:bf:c9:61:08:51:e0:
8d:8f:79:03:0b:9e:df:a1:d8:75:4c:3f:90:a4:d1:3a:f4:29:
78:7e:cf:c8:e6:b1:25:c4:a6:37:c0:f1:05:44:68:9a:8d:56:
8f:02:f5:99:7c:3e:f4:c8:ea:a0:59:c1:eb:6a:70:73:54:f9:
72:d1:66:40:49:87:72:3a:38:b4:29:de:ca:d8:17:0c:7f:b4:
ed:41:db:56:e5:6a:83:e3:cf:99:31:b7:44:c3:d4:79:c7:4c:
98:bc:c1:17:03:57:91:52:79:79:b2:9f:f2:be:7e:8b:2e:4f:
2c:ea:5f:9b:8a:a1:f0:f1:7b:f2:ef:85:56:b5:d7:bb:2a:4b:
f2:ad:cf:57:57:25:88:85:14:3f:2e:07:86:63:50:12:0b:f6:
b5:7f:2a:6c:5b:05:3b:67:9c:7d:11:f1:43:ce:a4:8d:63:4e:
e5:56:d7:6c:16:48:bc:52:20:9b:b1:4f:e6:d1:27:df:ad:fc:
0e:e1:4d:a4:f9:ce:58:19:4d:ca:dc:ba:02:07:69:06:03:74:
5e:c5:37:81:0d:85:a8:ac:d0:2e:c7:cf:f9:e0:cc:96:b2:ef:
bd:a1:94:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:49:26 2026 by rpki-client