Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/fnmmCwsReYk6dY708yZ03C49-jc.roa
File: fnmmCwsReYk6dY708yZ03C49-jc.roa (raw, json)
Hash identifier: 4E2D/veqGqAYXUIgx+mjMXEjLlkHraHuVnKCCIuqh6U=
Subject key identifier: 7E:79:A6:0B:0B:11:79:89:3A:75:8E:F4:F3:26:74:DC:2E:3D:FA:37
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F6C5D1556C2DBD545DFF96E2ECC4A45F5
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/fnmmCwsReYk6dY708yZ03C49-jc.roa
Signing time: Thu 16 Jul 2026 19:17:47 +0000
ROA not before: Thu 16 Jul 2026 19:17:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154132
IP address blocks: 2.27.155.0/24 maxlen: 24
2.27.254.0/24 maxlen: 24
31.77.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6c:5d:15:56:c2:db:d5:45:df:f9:6e:2e:cc:4a:45:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 16 19:17:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e79a60b0b1179893a758ef4f32674dc2e3dfa37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:48:2b:97:9f:da:49:56:a1:95:75:50:56:f3:
79:99:5a:b3:81:0d:4d:22:41:de:8d:5e:09:b3:39:
ea:82:bd:c3:da:a4:99:fe:43:35:20:77:56:3b:13:
78:1c:9d:f3:91:b0:9b:12:39:3e:c1:20:b1:1a:fc:
f6:c7:f7:89:ce:7f:8c:94:71:e4:66:65:4f:da:13:
c4:c0:a2:c1:1d:6d:ee:1c:32:c1:04:09:bd:7d:40:
52:7e:02:c1:76:fa:27:78:99:0a:e7:6f:90:0a:da:
ef:6f:c4:c3:36:07:32:7d:df:2c:96:ea:9e:d7:f6:
be:b7:c6:b5:a1:50:7e:3e:01:78:53:4e:3f:8a:2d:
02:c5:a3:28:08:b6:76:28:b0:f7:e5:ff:b6:67:88:
87:3a:5e:d0:56:b2:25:8a:dc:69:40:02:03:ea:2d:
a5:f6:2f:04:ba:8e:37:27:9c:2e:ed:61:2d:55:b8:
8a:59:74:de:6d:e4:b3:32:a6:04:6a:35:d5:0e:3f:
a3:6c:cd:e0:5d:3b:06:f0:8a:3a:03:cd:1e:8f:64:
a2:31:95:d4:d8:e5:a4:c8:64:7f:27:82:73:67:15:
38:fd:c8:d9:a6:07:38:bf:52:2c:ab:cf:d0:e7:c9:
3a:6c:af:dd:d8:c0:01:47:51:c9:a0:0c:76:6d:76:
32:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:79:A6:0B:0B:11:79:89:3A:75:8E:F4:F3:26:74:DC:2E:3D:FA:37
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/fnmmCwsReYk6dY708yZ03C49-jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.155.0/24
2.27.254.0/24
31.77.229.0/24
Signature Algorithm: sha256WithRSAEncryption
44:1b:aa:ad:dc:74:4e:fb:8e:c2:2a:9d:f3:f0:01:da:cd:0d:
e4:8d:1d:e7:24:ec:1a:98:20:e4:0b:02:a8:6e:6d:68:b2:d1:
ba:04:58:50:a7:28:b9:c2:de:d9:7d:17:7e:12:55:29:bb:de:
35:e4:85:b1:bd:2c:aa:42:39:75:4c:0c:df:07:64:79:7b:ca:
f4:66:dc:b3:b5:2e:46:ef:4b:04:8b:1e:35:5e:96:52:af:4e:
d5:2f:02:cb:cc:6f:04:ea:03:02:3c:a0:cc:e6:c2:4a:5d:8b:
82:57:d3:b8:67:72:f3:bd:52:fd:07:90:eb:2d:9d:b2:e8:6d:
a4:dd:81:41:5e:e6:f9:81:a9:80:64:ab:c1:1f:c8:15:10:3b:
0b:dc:5b:bc:ec:c6:ce:b2:54:cc:8b:9e:36:c9:79:d4:46:83:
7c:1f:ed:69:17:91:32:5b:fc:6b:5e:5c:a2:d4:82:e6:96:b3:
c5:26:e6:eb:03:7f:c7:d4:fd:08:f7:84:c9:79:15:7a:80:bd:
21:cc:70:14:1d:2e:5f:8c:29:e7:fd:46:50:cc:74:3b:21:51:
87:ee:67:09:d3:aa:cf:0d:cd:f7:97:73:e1:3d:d8:79:40:5f:
aa:b6:7b:0c:5f:4c:54:7c:a4:dc:e5:60:26:0b:c8:6d:80:8f:
f2:4b:68:f1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ9sXRVWwtvVRd/5bi7MSkX1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNzE2MTkxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTc5YTYwYjBiMTE3OTg5M2E3NThlZjRmMzI2NzRkYzJlM2RmYTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ugrl5/aSVahlXVQVvN5mVqzgQ1N
IkHejV4Jsznqgr3D2qSZ/kM1IHdWOxN4HJ3zkbCbEjk+wSCxGvz2x/eJzn+MlHHk
ZmVP2hPEwKLBHW3uHDLBBAm9fUBSfgLBdvoneJkK52+QCtrvb8TDNgcyfd8sluqe
1/a+t8a1oVB+PgF4U04/ii0CxaMoCLZ2KLD35f+2Z4iHOl7QVrIlitxpQAID6i2l
9i8Euo43J5wu7WEtVbiKWXTebeSzMqYEajXVDj+jbM3gXTsG8Io6A80ej2SiMZXU
2OWkyGR/J4JzZxU4/cjZpgc4v1Isq8/Q58k6bK/d2MABR1HJoAx2bXYyKQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFH55pgsLEXmJOnWO9PMmdNwuPfo3MB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvZm5tbUN3c1JlWWs2ZFk3MDh5WjAzQzQ5LWpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAAhubAwQA
Ahv+AwQAH03lMA0GCSqGSIb3DQEBCwUAA4IBAQBEG6qt3HRO+47CKp3z8AHazQ3k
jR3nJOwamCDkCwKobm1ostG6BFhQpyi5wt7ZfRd+ElUpu9415IWxvSyqQjl1TAzf
B2R5e8r0ZtyztS5G70sEix41XpZSr07VLwLLzG8E6gMCPKDM5sJKXYuCV9O4Z3Lz
vVL9B5DrLZ2y6G2k3YFBXub5gamAZKvBH8gVEDsL3Fu87MbOslTMi542yXnURoN8
H+1pF5EyW/xrXlyi1ILmlrPFJubrA3/H1P0I94TJeRV6gL0hzHAUHS5fjCnn/UZQ
zHQ7IVGH7mcJ06rPDc33l3PhPdh5QF+qtnsMX0xUfKTc5WAmC8htgI/yS2jx
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:18 2026 by rpki-client