Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/iPGBYjAqeDZIzgcqCnhr3hkvRcU.roa
File: iPGBYjAqeDZIzgcqCnhr3hkvRcU.roa (raw, json)
Hash identifier: v5bLuIPwyjy1FUAOibwTUEWhf5VgEe9ylY1OUHfIuRA=
Subject key identifier: 88:F1:81:62:30:2A:78:36:48:CE:07:2A:0A:78:6B:DE:19:2F:45:C5
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019CFC6C6CD319D64491A90432C5FDD0F731
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/iPGBYjAqeDZIzgcqCnhr3hkvRcU.roa
Signing time: Tue 17 Mar 2026 15:31:30 +0000
ROA not before: Tue 17 Mar 2026 15:31:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402186
IP address blocks: 2.27.239.0/24 maxlen: 24
2.27.240.0/24 maxlen: 24
2.27.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fc:6c:6c:d3:19:d6:44:91:a9:04:32:c5:fd:d0:f7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 17 15:31:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88f18162302a783648ce072a0a786bde192f45c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:51:6c:7e:e5:74:d1:f7:50:61:08:6c:47:b6:
b5:9f:84:ce:ce:98:a5:09:6d:ce:c1:0e:fb:50:41:
69:f4:ad:6b:5d:ff:7a:ff:49:02:2b:12:3d:59:b8:
d1:c7:72:f2:ae:12:16:94:ed:87:ae:2b:23:11:15:
63:5a:94:60:de:5e:c1:f8:07:05:55:c1:bd:47:86:
b9:bc:82:10:6c:26:a4:34:37:7f:31:41:cb:7b:d9:
5b:47:b2:ee:74:53:e0:ef:92:8f:7f:0c:14:eb:bf:
d1:e4:76:a0:21:ca:22:37:29:c0:d7:2b:7f:76:b1:
4b:e0:32:87:ac:62:bf:fd:50:3d:24:74:bf:81:f0:
8c:f4:6f:35:c7:7e:0f:b5:70:ba:d7:8a:db:fa:d5:
ef:b8:3e:e8:8c:ed:00:cf:e7:4b:cc:83:57:51:73:
57:da:2d:4a:b3:e8:a6:7d:ae:c7:19:4c:d6:2a:7d:
90:e3:dc:de:19:b2:e5:f0:59:9b:12:bc:57:62:34:
a8:d0:2c:24:b8:73:9c:19:73:b8:93:32:5b:27:29:
50:58:37:b3:29:74:e5:d4:7b:34:3f:3f:5c:66:1f:
6f:e6:7a:52:37:c1:2c:36:d7:ad:a4:bf:05:a3:d5:
96:1d:3d:43:f6:f3:83:48:86:f4:fd:6d:1a:f1:45:
c6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F1:81:62:30:2A:78:36:48:CE:07:2A:0A:78:6B:DE:19:2F:45:C5
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/iPGBYjAqeDZIzgcqCnhr3hkvRcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.239.0-2.27.240.255
2.27.254.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:55:1b:73:93:06:36:d2:7a:5d:3d:26:c3:2c:fd:5b:aa:09:
4e:6e:99:bf:2a:c9:89:66:83:f1:29:b3:c0:61:85:21:5b:f6:
f1:1f:75:be:0c:13:a3:17:4a:38:bc:44:db:4c:a1:1e:d6:49:
41:1d:42:09:46:3a:ed:66:5b:97:4a:37:06:9c:d3:14:97:27:
16:62:07:4b:c2:78:fb:92:8b:8a:63:9a:9b:a2:0d:7e:73:d9:
6d:3f:df:34:27:75:6d:7d:94:65:f0:7d:cb:11:bb:5d:95:5c:
18:a0:1f:14:b8:bd:59:b8:6a:06:2e:11:03:64:6d:f4:e7:f3:
4e:fa:79:35:ac:c0:a9:c5:f8:07:1f:92:b9:c8:a0:b1:95:29:
f2:cf:17:4c:55:ca:25:00:33:b3:ec:a9:eb:5d:86:1d:c7:1e:
40:ef:dd:01:9e:3f:04:bc:f7:c5:d1:15:74:73:49:45:46:3e:
86:21:ba:ec:af:86:02:89:8b:a9:35:38:f9:61:36:da:0a:d0:
6a:b2:41:10:7b:64:8e:7d:eb:00:a9:e5:14:77:ac:36:86:07:
25:ff:53:d0:60:8a:af:04:10:3b:14:0b:1c:f9:d2:66:c3:df:
5c:0d:8a:08:ed:de:82:0e:86:0b:3f:00:4b:4a:77:43:19:03:
4b:19:f8:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Mar 21 14:31:04 2026 by rpki-client