Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/klrnjoM_c7S1bSIqL5w78V2QY7M.roa
File: klrnjoM_c7S1bSIqL5w78V2QY7M.roa (raw, json)
Hash identifier: gz/n1Ckz4R+/cW3N50kGeoDJ0fKuLLFJg3e7Mr4VGoE=
Subject key identifier: 92:5A:E7:8E:83:3F:73:B4:B5:6D:22:2A:2F:9C:3B:F1:5D:90:63:B3
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DFE5123A2F1F5795AA075548B0AD7BF18
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/klrnjoM_c7S1bSIqL5w78V2QY7M.roa
Signing time: Wed 06 May 2026 17:23:43 +0000
ROA not before: Wed 06 May 2026 17:23:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10753
IP address blocks: 2.27.134.0/23 maxlen: 24
31.76.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 May 2026 14:03:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fe:51:23:a2:f1:f5:79:5a:a0:75:54:8b:0a:d7:bf:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 6 17:23:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=925ae78e833f73b4b56d222a2f9c3bf15d9063b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:de:73:f7:84:ee:41:ba:fd:d7:b9:0d:eb:5a:
fa:cc:ce:a2:37:21:f6:44:26:df:29:c4:3b:73:35:
58:46:35:da:cf:5d:ff:39:89:8b:f7:c0:8e:96:93:
99:5d:10:22:3b:15:c6:05:e6:8a:e6:59:03:77:72:
7f:b3:d5:12:8a:42:50:ee:f0:00:20:05:58:a6:1a:
17:e6:0e:19:63:6d:30:fe:76:88:53:4c:e7:94:b9:
f1:89:4f:43:86:92:7a:e7:99:74:6d:60:db:ec:0e:
ba:ca:08:b9:ba:78:34:bf:98:87:d9:34:e8:f5:00:
98:42:1e:73:b2:7d:a3:da:54:5f:93:de:f6:b5:90:
9c:dc:c3:af:e2:29:cc:7b:be:bf:20:e5:d6:22:00:
6c:23:8a:bd:b5:fd:4c:22:0d:65:da:24:ef:67:4d:
96:73:7c:ce:c9:26:07:48:1c:b0:26:82:90:52:32:
64:a5:13:4b:4a:0f:b3:06:f1:17:ee:75:d3:a1:94:
b9:f3:40:02:49:c8:32:8a:25:63:29:df:a7:1b:39:
6b:8c:19:2f:48:c8:8a:44:4e:e7:e6:97:b2:30:12:
b0:fb:14:0e:d9:15:2e:62:80:42:32:0b:60:a7:dc:
dd:b8:d3:f5:6c:ea:38:da:c4:dc:f4:d1:04:01:4b:
0f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5A:E7:8E:83:3F:73:B4:B5:6D:22:2A:2F:9C:3B:F1:5D:90:63:B3
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/klrnjoM_c7S1bSIqL5w78V2QY7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.134.0/23
31.76.190.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:f0:90:5a:67:de:b8:24:10:7f:81:6f:88:fb:e7:b1:29:61:
a0:27:4f:8e:88:47:f8:16:19:23:c8:4c:3c:da:2a:d0:60:17:
75:86:9e:11:36:63:92:8d:02:ff:37:3b:c5:ed:f3:81:7b:46:
a1:ac:9f:4c:7f:df:ba:5e:31:25:ae:da:f7:50:22:14:fa:f6:
a0:65:c2:fd:bf:91:4a:94:69:7c:0c:ee:5a:a8:8f:fc:f2:be:
d8:27:4a:ad:1d:58:33:55:73:07:80:2f:e9:29:80:db:6c:06:
d1:93:f6:17:17:ff:4a:eb:81:55:68:4c:90:24:2a:01:52:93:
51:5d:93:f1:11:31:53:62:91:55:33:9b:e1:be:1f:46:73:eb:
32:1b:3d:6f:53:da:d4:df:25:60:58:0e:09:38:5a:98:10:a0:
7f:f9:54:29:66:1d:d0:a4:6a:d9:d5:aa:d0:1a:77:5f:b4:bb:
7c:45:0b:55:38:a8:d9:85:49:8f:6d:65:d8:13:3f:f3:42:da:
f2:dd:1d:89:ee:2f:39:d4:4f:75:19:01:bf:89:ee:cd:18:2a:
6f:a1:0a:5b:0e:3e:ca:55:18:b0:3b:50:2e:b3:a7:a8:ab:31:
ba:fa:53:c9:9b:98:25:00:5a:59:f9:4b:24:55:fb:19:e9:fe:
04:27:7e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 11 19:13:46 2026 by rpki-client