Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/gfciumdKsyIrxFcp4q98LqOrdyw.roa
File: gfciumdKsyIrxFcp4q98LqOrdyw.roa (raw, json)
Hash identifier: UxbqfTqWY1gTuBWEvZ0abu3cpKIgONDqCnL89tPpx/c=
Subject key identifier: 81:F7:22:BA:67:4A:B3:22:2B:C4:57:29:E2:AF:7C:2E:A3:AB:77:2C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F00166B202E73F787308D61BAD199D4C2
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/gfciumdKsyIrxFcp4q98LqOrdyw.roa
Signing time: Thu 25 Jun 2026 18:41:36 +0000
ROA not before: Thu 25 Jun 2026 18:41:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199734
IP address blocks: 2.27.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:00:16:6b:20:2e:73:f7:87:30:8d:61:ba:d1:99:d4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 25 18:41:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81f722ba674ab3222bc45729e2af7c2ea3ab772c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:20:74:f6:2b:83:de:3d:ef:33:57:f9:b4:d4:
d1:78:7d:99:50:34:f4:c7:34:50:1f:cd:98:f2:95:
aa:03:56:85:3f:b7:e3:3f:8e:aa:4a:2d:44:07:27:
65:6a:5d:90:ff:84:cb:f1:a5:05:76:b6:ee:54:a6:
72:eb:9b:42:7e:b0:bf:f0:ac:75:a6:0d:18:0c:e9:
5d:40:d5:7c:49:ec:ce:dc:0d:6c:1a:75:f3:5a:e8:
62:d8:93:17:cd:3c:ed:e5:2a:e6:5d:da:05:ee:35:
55:88:59:63:85:8a:0c:a8:fa:fc:4d:c8:c5:6e:06:
9c:54:51:5b:55:ba:9a:fb:9b:fc:10:29:d0:12:a0:
bc:6a:b2:2b:e7:e6:45:18:ab:b8:5e:54:54:66:bb:
18:ed:9d:0c:c1:7f:35:4c:7b:78:bf:2f:f2:0b:8b:
52:10:c5:4d:23:c9:99:b8:b6:df:6e:e6:e3:95:c9:
f6:ce:5a:fa:58:94:fd:a5:8e:ec:7b:97:f9:e4:84:
d8:49:8b:ba:ea:01:b4:ed:f4:c6:40:de:9a:98:5c:
03:fd:27:5e:8c:07:04:5c:ec:ff:42:d1:39:5b:a9:
eb:e1:80:82:7f:a9:30:1c:2a:3a:b4:20:63:4e:da:
84:33:77:81:e3:94:69:3d:78:25:25:4c:e3:d3:01:
77:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F7:22:BA:67:4A:B3:22:2B:C4:57:29:E2:AF:7C:2E:A3:AB:77:2C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/gfciumdKsyIrxFcp4q98LqOrdyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.251.0/24
Signature Algorithm: sha256WithRSAEncryption
09:c3:e5:50:da:47:12:d3:93:72:ca:c8:be:ae:3b:d6:c5:1a:
3c:aa:95:ab:4b:94:cb:04:15:e9:8d:6f:70:11:45:cd:28:d4:
74:49:76:00:b2:1c:32:48:59:5d:0b:47:50:3d:fa:b4:06:22:
29:e6:d0:a0:7e:ed:83:a3:4b:45:75:18:15:2a:7f:95:d6:ae:
15:71:2a:35:09:d0:a4:d0:77:2c:bb:ac:61:56:fd:1e:d4:a2:
6c:84:6c:f2:83:56:e0:4d:0c:a7:1d:55:a3:1e:b4:98:65:a5:
01:ff:44:38:48:8c:32:d8:5f:9a:74:5c:37:84:82:8e:ac:8e:
a9:6f:88:c1:e7:99:35:a5:94:86:dc:d5:ef:ab:9a:05:b3:ad:
b4:66:c8:69:6a:4c:29:55:d6:51:8a:f4:ad:8e:75:1b:20:f0:
c9:d5:25:ee:b1:4b:3a:26:6e:23:1c:32:ba:6d:b6:90:a8:8d:
1d:5b:8a:c3:7a:70:fa:86:37:02:16:f1:ca:34:3f:69:6c:8a:
69:04:a0:92:aa:42:bb:ce:1b:a5:c2:00:3b:4b:8b:9f:bd:fb:
3f:74:6d:52:49:b0:32:f4:3c:67:e5:7e:13:53:e2:4b:01:e5:
2d:43:44:9d:67:0b:6f:75:33:43:66:9e:6b:f5:0f:f6:2f:be:
be:e1:ca:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 23:50:15 2026 by rpki-client