Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jFpw-jCz7DcsPtGCAf9NTQu2Xfc.roa
File: jFpw-jCz7DcsPtGCAf9NTQu2Xfc.roa (raw, json)
Hash identifier: 6bjksCC4oY8Atf1x4N6tAH2qV4iBilCdOL6Fb1kpDX0=
Subject key identifier: 8C:5A:70:FA:30:B3:EC:37:2C:3E:D1:82:01:FF:4D:4D:0B:B6:5D:F7
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FE2E564755AA61B61DE6ECB0C284B10B5
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jFpw-jCz7DcsPtGCAf9NTQu2Xfc.roa
Signing time: Sat 08 Aug 2026 19:41:52 +0000
ROA not before: Sat 08 Aug 2026 19:41:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202831
IP address blocks: 2.27.98.0/24 maxlen: 24
13.143.134.0/24 maxlen: 24
31.77.232.0/24 maxlen: 24
144.31.222.0/24 maxlen: 24
150.241.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e2:e5:64:75:5a:a6:1b:61:de:6e:cb:0c:28:4b:10:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 8 19:41:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c5a70fa30b3ec372c3ed18201ff4d4d0bb65df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d6:45:ab:35:16:ca:2e:fe:83:ad:23:47:1a:
1e:57:1f:c1:e6:c8:3a:17:59:17:d1:8c:d5:c1:29:
70:30:96:99:6c:ec:1e:e5:1b:5f:a8:80:5c:a2:03:
50:7f:f5:65:b7:29:2c:17:2c:8f:4a:37:1e:6f:6c:
f0:60:d9:d4:90:3f:2f:58:11:bb:5b:0f:e2:c6:5f:
7b:ef:5d:b3:4e:9f:df:a1:2a:fd:93:54:87:9c:25:
29:db:ad:9a:77:9f:fb:c4:35:ca:59:3d:54:bb:46:
cd:11:e8:d0:42:7c:46:30:fb:ac:82:63:b4:e8:2f:
27:e2:8e:be:98:5f:43:18:3d:8d:bd:62:0a:22:82:
5b:d2:e2:f4:46:18:de:19:b8:2f:2e:2b:0f:31:fb:
9c:5a:5d:69:d3:f8:61:60:c4:9c:f0:e6:1c:03:dd:
31:e0:28:33:90:04:a7:a5:01:e0:38:e8:76:98:b8:
23:3d:4a:f1:29:2b:f8:aa:09:12:82:c7:b4:53:a0:
f2:b0:b1:6b:28:50:1d:25:2f:e7:95:e0:97:2d:a1:
7d:32:3a:c9:ec:12:69:1b:32:23:42:c8:ca:85:a9:
ed:ba:7c:e4:47:f2:eb:03:d3:12:75:58:65:e4:52:
af:8f:db:26:72:79:f4:cb:39:98:e8:18:ca:03:5d:
2e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5A:70:FA:30:B3:EC:37:2C:3E:D1:82:01:FF:4D:4D:0B:B6:5D:F7
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jFpw-jCz7DcsPtGCAf9NTQu2Xfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.98.0/24
13.143.134.0/24
31.77.232.0/24
144.31.222.0/24
150.241.85.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:4f:ff:74:d1:cb:40:ec:c3:d6:82:3d:42:c2:bf:93:30:94:
55:0c:89:9c:60:cd:e6:41:28:67:8b:fd:84:5a:f9:d5:3a:3c:
28:75:84:ed:fa:31:4e:98:a2:74:60:99:14:b0:00:19:90:e3:
7d:65:01:10:0a:ac:66:31:6a:4b:22:05:8b:4e:b8:69:b7:99:
cf:c2:31:bd:28:e3:d5:e3:85:27:b4:4c:79:ea:10:b7:34:17:
e4:4b:23:99:ff:60:d1:b6:b2:af:f8:3c:1a:4d:fa:1f:dc:b3:
82:b0:31:cc:07:9b:8c:48:e8:1f:b2:ee:52:f4:cf:61:23:39:
64:fc:01:19:c9:16:50:15:be:56:ad:3f:81:34:cf:db:8f:e0:
dc:a5:0e:39:94:46:84:2c:d0:f2:cf:2c:cd:87:94:3a:f2:36:
e3:7f:05:c8:3a:ee:68:c4:ca:cc:f7:95:30:1e:6b:e3:5d:2b:
05:e4:ae:98:03:1d:77:6c:18:f8:d6:33:f0:eb:dd:1c:4d:23:
ac:71:93:66:a1:c5:82:b9:bc:95:17:68:e6:ab:5a:5c:95:79:
ba:5a:f3:01:87:a7:b6:b3:1b:82:65:6e:f0:a0:45:48:cc:8b:
7e:d9:d3:d4:ed:94:e8:fc:0d:80:b5:9e:86:95:a0:81:99:c6:
5d:2b:5b:8f
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ/i5WR1WqYbYd5uywwoSxC1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwODA4MTk0MTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzVhNzBmYTMwYjNlYzM3MmMzZWQxODIwMWZmNGQ0ZDBiYjY1ZGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstZFqzUWyi7+g60jRxoeVx/B5sg6
F1kX0YzVwSlwMJaZbOwe5RtfqIBcogNQf/VltyksFyyPSjceb2zwYNnUkD8vWBG7
Ww/ixl97712zTp/foSr9k1SHnCUp262ad5/7xDXKWT1Uu0bNEejQQnxGMPusgmO0
6C8n4o6+mF9DGD2NvWIKIoJb0uL0RhjeGbgvLisPMfucWl1p0/hhYMSc8OYcA90x
4CgzkASnpQHgOOh2mLgjPUrxKSv4qgkSgse0U6DysLFrKFAdJS/nleCXLaF9MjrJ
7BJpGzIjQsjKhantunzkR/LrA9MSdVhl5FKvj9smcnn0yzmY6BjKA10uOQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFIxacPows+w3LD7RggH/TU0Ltl33MB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvakZwdy1qQ3o3RGNzUHRHQ0FmOU5UUXUyWGZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAAhtiAwQA
DY+GAwQAH03oAwQAkB/eAwQAlvFVMA0GCSqGSIb3DQEBCwUAA4IBAQCLT/900ctA
7MPWgj1Cwr+TMJRVDImcYM3mQShni/2EWvnVOjwodYTt+jFOmKJ0YJkUsAAZkON9
ZQEQCqxmMWpLIgWLTrhpt5nPwjG9KOPV44UntEx56hC3NBfkSyOZ/2DRtrKv+Dwa
Tfof3LOCsDHMB5uMSOgfsu5S9M9hIzlk/AEZyRZQFb5WrT+BNM/bj+DcpQ45lEaE
LNDyzyzNh5Q68jbjfwXIOu5oxMrM95UwHmvjXSsF5K6YAx13bBj41jPw690cTSOs
cZNmocWCubyVF2jmq1pclXm6WvMBh6e2sxuCZW7woEVIzIt+2dPU7ZTo/A2AtZ6G
laCBmcZdK1uP
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:43:55 2026 by rpki-client