Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/iypXBwZ63qwsxbdCAqRtNzQ1_aY.roa
File: iypXBwZ63qwsxbdCAqRtNzQ1_aY.roa (raw, json)
Hash identifier: FvOCh372UTX381WE9Co9FKn5D03vCmn03Na8yQEuNO0=
Subject key identifier: 8B:2A:57:07:06:7A:DE:AC:2C:C5:B7:42:02:A4:6D:37:34:35:FD:A6
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A03EEC4F2F27D6CB7597591C8798182382
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/iypXBwZ63qwsxbdCAqRtNzQ1_aY.roa
Signing time: Wed 26 Aug 2026 16:34:29 +0000
ROA not before: Wed 26 Aug 2026 16:34:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 2.27.115.0/24 maxlen: 24
201.25.182.0/23 maxlen: 24
201.25.186.0/23 maxlen: 24
201.25.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:ec:4f:2f:27:d6:cb:75:97:59:1c:87:98:18:23:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 26 16:34:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b2a5707067adeac2cc5b74202a46d373435fda6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:66:72:49:3a:17:f0:66:a1:8d:59:7b:56:34:
92:fb:50:db:58:98:49:0e:a5:96:d0:b9:de:68:cb:
0f:bb:3b:9f:79:00:ec:2f:d5:9e:43:e9:7e:59:e3:
ed:ff:12:16:8c:1a:f5:e7:9d:3f:0a:71:3e:53:e6:
c2:6b:8b:82:5b:4c:f0:e9:22:b8:7b:ea:4f:5d:c2:
7e:46:c0:cd:41:c7:a8:c7:f5:1f:6d:f2:45:24:79:
b6:1f:b0:d5:0f:14:47:b9:0c:f4:72:72:7b:be:23:
6e:22:e9:c4:b8:21:7d:0e:9c:a7:47:43:77:4f:a9:
94:7d:6e:6a:ad:89:19:1a:f9:5f:f1:5a:67:e7:2a:
d2:d0:e3:38:e8:79:62:d2:c6:42:1e:fb:60:01:a5:
e8:a4:37:71:2b:d5:91:78:3d:6e:ed:d0:9d:f4:7d:
58:9b:dd:3d:e9:f2:45:55:79:69:fb:cc:d5:cb:9e:
b2:99:cf:8b:3f:a5:15:d4:a9:8a:5c:b8:fd:a1:39:
0b:0c:68:e8:4c:f9:b5:d2:0b:dc:89:ef:cd:b0:20:
93:01:8a:4b:9a:b8:53:1e:37:3f:9a:43:bf:7c:d4:
fe:99:aa:fa:32:81:47:a5:5c:ab:72:14:35:b2:05:
3d:e7:02:7a:11:1b:41:5c:b8:6e:80:2f:ae:be:d5:
be:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2A:57:07:06:7A:DE:AC:2C:C5:B7:42:02:A4:6D:37:34:35:FD:A6
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/iypXBwZ63qwsxbdCAqRtNzQ1_aY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.115.0/24
201.25.182.0/23
201.25.186.0/23
201.25.190.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:02:6e:9e:51:1e:11:3b:54:0c:aa:3f:59:9a:82:d7:9e:7d:
88:6d:fc:83:b1:c3:b3:a5:84:47:c1:d8:4c:14:c0:a1:ed:c7:
cd:46:46:58:67:31:14:73:8d:e6:58:e8:40:5f:65:6c:99:f3:
84:eb:61:cb:a0:c2:25:79:60:90:cd:01:de:5e:46:82:1c:2b:
36:b1:ee:f7:fb:e3:66:f3:f9:4a:c5:e7:88:6a:66:bc:c0:8f:
aa:dc:28:df:da:9e:ab:72:98:97:1c:9a:e0:e2:bb:53:02:e7:
10:3b:6a:8f:47:17:71:eb:df:0d:31:fc:09:d9:ac:46:fa:bf:
2f:2d:8b:e0:b4:95:d1:1d:79:7e:a7:ba:7e:ed:19:37:1e:0b:
a7:33:74:7b:d9:b7:01:af:15:c4:f3:ab:f8:b1:f2:4b:d6:f7:
fc:51:5f:5b:01:2c:4d:88:c8:f5:65:17:06:10:55:8a:55:f4:
18:44:0a:ee:e4:9a:04:ac:54:e7:ea:0b:32:b9:1e:12:3a:30:
23:1c:de:35:69:c1:0a:2b:30:1a:ed:db:84:6d:8a:6b:e5:60:
d2:db:eb:e4:11:d7:53:0b:56:3c:2b:d2:4e:ca:28:3a:ec:2d:
35:84:de:df:cc:26:b2:0e:53:1e:b6:87:3f:8c:ad:d4:ed:7f:
f8:8c:0b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:21:43 2026 by rpki-client