Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hH4reybhYIkNMxAW-MFebDzn-Y8.roa
File: hH4reybhYIkNMxAW-MFebDzn-Y8.roa (raw, json)
Hash identifier: vWWxmOtlAaqXT7J7KVEPFGhYnZ6h3K4GK6YyXHZA2+Y=
Subject key identifier: 84:7E:2B:7B:26:E1:60:89:0D:33:10:16:F8:C1:5E:6C:3C:E7:F9:8F
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A086E9DD7BF5F5E128BF891C4585DDE5E9
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hH4reybhYIkNMxAW-MFebDzn-Y8.roa
Signing time: Wed 09 Sep 2026 16:04:28 +0000
ROA not before: Wed 09 Sep 2026 16:04:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 2.27.86.0/24 maxlen: 24
2.27.127.0/24 maxlen: 24
144.31.55.0/24 maxlen: 24
144.31.56.0/24 maxlen: 24
144.31.58.0/24 maxlen: 24
144.31.60.0/24 maxlen: 24
179.254.73.0/24 maxlen: 24
179.254.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:e9:dd:7b:f5:f5:e1:28:bf:89:1c:45:85:dd:e5:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 9 16:04:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=847e2b7b26e160890d331016f8c15e6c3ce7f98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3e:54:02:83:79:2c:ac:12:1b:93:3b:e4:11:
58:97:fe:37:b0:5f:8f:61:9c:f2:9e:c0:a9:27:47:
b3:0c:11:dd:c9:35:e6:c9:9b:06:da:26:e5:b7:9e:
89:60:60:83:16:56:27:54:78:18:5e:06:21:9e:1e:
65:13:95:d4:14:31:90:96:fd:e7:87:34:f8:f3:7a:
b1:ce:7a:78:81:8d:fb:53:95:31:df:e9:05:27:5c:
d7:f8:80:a2:0c:2a:43:c8:c8:4f:26:bb:a8:8a:1d:
42:94:9e:d2:a3:6a:ba:8f:c5:c7:6e:63:0e:88:1a:
91:2a:af:1c:a9:d7:16:6f:9a:d1:a9:02:d5:65:97:
6f:51:ca:e3:0d:e8:e9:2c:ba:9f:90:af:af:51:ab:
a7:7c:74:42:a1:37:38:01:72:6c:6e:91:0c:c3:44:
8d:cb:14:a9:76:93:54:58:40:f3:78:d1:d4:e5:9b:
da:42:89:46:32:2c:17:c3:58:1a:56:f5:e6:ad:f1:
2b:ef:53:9f:57:c3:32:e2:30:ab:45:b1:bb:2e:db:
5f:b6:68:95:53:26:67:34:ac:12:33:18:17:05:64:
4c:b0:c1:71:ba:0d:b8:72:e0:04:b8:e2:73:25:de:
d6:64:96:25:f4:5e:08:5f:17:0a:97:e3:38:ae:6e:
99:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7E:2B:7B:26:E1:60:89:0D:33:10:16:F8:C1:5E:6C:3C:E7:F9:8F
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hH4reybhYIkNMxAW-MFebDzn-Y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.86.0/24
2.27.127.0/24
144.31.55.0-144.31.56.255
144.31.58.0/24
144.31.60.0/24
179.254.73.0/24
179.254.75.0/24
Signature Algorithm: sha256WithRSAEncryption
51:91:e0:6c:99:0c:f9:00:4c:d0:d3:84:f1:7c:6d:88:57:92:
e6:39:5e:a6:82:b2:59:a6:a8:98:16:bd:f5:cb:12:ee:02:bf:
3e:54:02:ee:e5:20:57:d3:7e:e4:7c:5a:61:ca:f4:32:2c:89:
a4:2e:cc:1b:e0:d6:4b:9c:22:43:64:49:e9:cc:b5:71:2b:89:
59:f1:e5:42:f2:08:bd:b1:4a:6a:89:94:72:1b:42:65:23:8d:
bd:31:99:1f:ae:61:ef:e6:87:1c:0c:02:cd:6e:8b:7c:b4:f6:
9b:88:73:15:67:b0:ac:d5:9d:4c:53:bf:2f:5a:15:82:3c:3f:
75:c3:e2:5f:55:bb:3a:d4:35:c3:b1:47:8c:9f:b8:65:09:1a:
9b:6c:bf:50:a3:2d:ff:2a:cf:82:80:49:a9:64:3f:28:74:23:
41:c8:47:d3:71:be:31:16:0f:cc:b8:01:45:bd:fb:7e:59:87:
66:99:cb:2b:c4:f2:ea:47:7a:aa:7f:6a:a2:9a:62:45:30:fd:
da:67:39:ce:f8:95:67:53:8f:cb:6a:a2:fc:f7:b6:ea:c5:56:
ed:7c:96:51:38:4b:47:02:b5:5d:ce:98:dd:f5:e8:1b:48:20:
da:c9:c6:8f:3d:ef:fd:e2:e1:e5:24:07:53:13:3e:2f:6c:50:
25:33:a6:48
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAaCG6d179fXhKL+JHEWF3eXpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwOTA5MTYwNDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDdlMmI3YjI2ZTE2MDg5MGQzMzEwMTZmOGMxNWU2YzNjZTdmOThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6j5UAoN5LKwSG5M75BFYl/43sF+P
YZzynsCpJ0ezDBHdyTXmyZsG2iblt56JYGCDFlYnVHgYXgYhnh5lE5XUFDGQlv3n
hzT483qxznp4gY37U5Ux3+kFJ1zX+ICiDCpDyMhPJruoih1ClJ7So2q6j8XHbmMO
iBqRKq8cqdcWb5rRqQLVZZdvUcrjDejpLLqfkK+vUaunfHRCoTc4AXJsbpEMw0SN
yxSpdpNUWEDzeNHU5ZvaQolGMiwXw1gaVvXmrfEr71OfV8My4jCrRbG7LttftmiV
UyZnNKwSMxgXBWRMsMFxug24cuAEuOJzJd7WZJYl9F4IXxcKl+M4rm6ZswIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFIR+K3sm4WCJDTMQFvjBXmw85/mPMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvaEg0cmV5YmhZSWtOTXhBVy1NRmViRHpuLVk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAAhtWAwQA
Aht/MAwDBACQHzcDBACQHzgDBACQHzoDBACQHzwDBACz/kkDBACz/kswDQYJKoZI
hvcNAQELBQADggEBAFGR4GyZDPkATNDThPF8bYhXkuY5XqaCslmmqJgWvfXLEu4C
vz5UAu7lIFfTfuR8WmHK9DIsiaQuzBvg1kucIkNkSenMtXEriVnx5ULyCL2xSmqJ
lHIbQmUjjb0xmR+uYe/mhxwMAs1ui3y09puIcxVnsKzVnUxTvy9aFYI8P3XD4l9V
uzrUNcOxR4yfuGUJGptsv1CjLf8qz4KASalkPyh0I0HIR9NxvjEWD8y4AUW9+35Z
h2aZyyvE8upHeqp/aqKaYkUw/dpnOc74lWdTj8tqovz3turFVu18llE4S0cCtV3O
mN316BtIINrJxo897/3i4eUkB1MTPi9sUCUzpkg=
-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:08 2026 by rpki-client