Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/g7ZHcR70dwPW2uE77g1boR4I1HI.roa
File: g7ZHcR70dwPW2uE77g1boR4I1HI.roa (raw, json)
Hash identifier: bTyG/RyaN8LOH8BSSgYqZOiOA0gIsB+diWjjMnRrGX0=
Subject key identifier: 83:B6:47:71:1E:F4:77:03:D6:DA:E1:3B:EE:0D:5B:A1:1E:08:D4:72
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F4DE780E6662B04D467FBB0CFE4E6C3B6
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/g7ZHcR70dwPW2uE77g1boR4I1HI.roa
Signing time: Fri 10 Jul 2026 21:20:45 +0000
ROA not before: Fri 10 Jul 2026 21:20:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13347
IP address blocks: 2.27.176.0/21 maxlen: 24
2.27.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4d:e7:80:e6:66:2b:04:d4:67:fb:b0:cf:e4:e6:c3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 10 21:20:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83b647711ef47703d6dae13bee0d5ba11e08d472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:56:75:53:7a:a5:66:71:2e:a0:0e:65:da:5e:
6e:4e:26:12:48:36:e1:64:b0:5d:0c:b6:00:c7:91:
df:a3:94:62:e1:e1:bb:ab:5b:e7:65:26:ca:fe:6e:
65:5f:10:76:1d:11:e8:1b:48:2f:5f:c8:a1:97:89:
94:66:5c:bf:fb:fc:76:db:1f:38:c7:49:84:d6:14:
0f:85:a9:b1:05:7c:d6:ca:c6:a4:c8:66:2e:20:ce:
40:c3:04:d7:1f:0d:c0:56:48:cd:7f:ed:7c:9d:5e:
b1:2e:4e:fa:ef:8e:b0:c0:57:1a:d9:81:74:e3:d7:
5b:34:2e:6d:ae:0d:f8:69:80:43:95:05:5f:0c:38:
11:dd:a9:5f:b6:09:8d:03:eb:52:af:1e:4d:66:b5:
0d:0e:39:35:c4:1d:54:ec:84:af:dd:e4:73:d6:33:
3a:37:15:d9:5a:d0:5b:00:ac:8c:cc:4e:1c:ae:10:
05:b0:27:97:6f:bf:e3:17:b9:b7:b1:3c:8c:c2:04:
b5:dd:7d:5e:8a:19:a1:c4:10:93:ec:5e:eb:b8:9f:
43:cf:a1:48:0f:3f:43:1a:9e:57:31:cd:5e:ee:d7:
7f:b5:3d:96:fe:12:17:03:e9:7b:0b:f1:84:0c:ed:
1d:96:3c:f4:15:10:20:75:b3:93:f6:f7:f0:b0:d7:
ee:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B6:47:71:1E:F4:77:03:D6:DA:E1:3B:EE:0D:5B:A1:1E:08:D4:72
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/g7ZHcR70dwPW2uE77g1boR4I1HI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.176.0/20
Signature Algorithm: sha256WithRSAEncryption
50:a1:a1:fe:a1:b2:c9:c1:59:b6:3d:8a:8d:61:ad:3c:f9:e8:
c4:1a:76:cb:67:28:29:00:50:2e:76:be:24:f0:ea:5d:63:f4:
27:44:fb:ea:8a:ed:00:11:fd:11:51:ba:39:8f:6c:c6:d1:6a:
87:06:0e:09:80:e0:ed:25:31:3d:8a:b9:f7:f9:ff:e2:a5:a3:
e4:16:88:83:fd:ef:08:ef:a2:ff:7e:dd:8c:eb:ec:f1:72:35:
26:50:79:6e:59:8b:19:55:2d:01:87:80:99:6f:2d:41:41:f7:
42:21:3f:de:ea:34:88:30:57:00:a9:be:f5:7a:31:60:c7:9a:
7f:5a:35:dd:e0:39:65:dd:38:6b:1c:42:9c:ff:7d:dd:f3:5a:
3b:0b:ff:97:67:f6:bf:97:46:63:42:a3:ab:a0:00:79:5f:98:
89:b1:c5:ff:9f:65:c3:20:0c:be:84:4d:bb:ff:4f:b3:16:02:
df:8a:6f:8a:95:2f:bc:35:a7:c0:e9:47:da:d1:0a:ef:48:d5:
e4:a1:8b:0b:40:09:d0:b7:67:29:80:ba:ad:63:b4:cc:16:6d:
9d:b3:2c:d7:be:c5:f9:11:0f:d1:a9:64:ef:80:1e:27:64:84:
d9:14:8b:50:65:0c:99:19:4f:94:92:cb:5b:4f:90:88:5e:32:
11:c2:32:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:35:01 2026 by rpki-client