Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/km0Htb9IpmUvCasHg0chRHwoT38.roa
File: km0Htb9IpmUvCasHg0chRHwoT38.roa (raw, json)
Hash identifier: eG3NMVtKTvuaLuTVylacLANB05clH1UlcTrqp8ACuuA=
Subject key identifier: 92:6D:07:B5:BF:48:A6:65:2F:09:AB:07:83:47:21:44:7C:28:4F:7F
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A077F1A9D82FFD55926047B9E7300ECE30
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/km0Htb9IpmUvCasHg0chRHwoT38.roa
Signing time: Sun 06 Sep 2026 18:18:41 +0000
ROA not before: Sun 06 Sep 2026 18:18:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 2.27.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:77:f1:a9:d8:2f:fd:55:92:60:47:b9:e7:30:0e:ce:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 6 18:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=926d07b5bf48a6652f09ab07834721447c284f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8b:88:a0:fb:77:67:ec:03:52:fd:9d:51:78:
b6:80:9b:cc:e2:45:73:58:d6:26:23:52:2d:94:2c:
bc:15:98:ea:e5:87:89:dc:66:bb:f2:ad:54:c8:fd:
0f:6d:ee:66:b1:36:f8:fb:5d:2d:8b:74:93:9f:df:
29:ce:51:00:46:c5:f6:de:b3:f2:41:d6:39:ef:6d:
f4:f0:eb:67:d9:49:dc:fc:a1:5b:50:0d:d1:2b:01:
51:0c:14:2e:a9:1b:3c:dc:f8:5d:fd:46:ed:37:f5:
41:70:56:b1:25:29:b5:6f:e8:93:e6:d0:a4:0a:18:
86:bb:31:52:d5:c3:5b:c7:55:7d:65:72:d0:d2:5d:
4c:57:fe:7c:1b:7d:63:e6:0f:10:5a:95:0b:a0:fb:
3a:4c:47:4f:8c:0c:7e:f6:ac:52:d5:48:e2:f7:d4:
6f:ec:22:82:e0:ae:65:32:d7:36:cd:00:65:ae:24:
7c:4b:67:a8:69:88:cb:19:89:9e:c4:15:80:d4:42:
72:e4:ce:c8:b8:46:db:6c:60:23:49:c2:2a:12:64:
f2:7b:48:7b:6f:84:e4:a7:91:9e:1f:51:97:98:3e:
e6:f7:40:91:fe:e5:13:bc:52:fe:b9:51:0d:ea:86:
c3:6b:6a:53:c8:b1:16:c2:ac:0d:6f:e7:1b:d8:7f:
c0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:6D:07:B5:BF:48:A6:65:2F:09:AB:07:83:47:21:44:7C:28:4F:7F
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/km0Htb9IpmUvCasHg0chRHwoT38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.99.0/24
Signature Algorithm: sha256WithRSAEncryption
50:6e:3d:6d:54:4b:f9:c3:6f:8c:bb:45:7a:52:df:8f:74:9c:
87:8b:70:03:f2:52:eb:bd:74:9b:fe:da:56:53:51:64:c3:f2:
7e:0c:7a:d1:81:b8:dd:74:a8:de:27:f6:f8:7a:dd:c5:24:12:
fd:f9:cc:0f:b6:13:26:90:fa:72:44:37:aa:63:f0:39:36:76:
ee:93:ef:33:8f:4a:df:2e:f4:84:7a:f6:b2:a1:71:ea:78:71:
59:21:e5:10:9c:b5:54:b2:44:a2:52:1f:07:4d:4a:e6:8f:64:
b0:2d:02:0e:c5:95:90:53:ce:ab:b2:b2:f3:b7:4d:53:c0:19:
7e:e2:ef:7c:a5:bb:8f:c2:8c:cc:39:1f:e1:90:54:60:b1:5f:
c7:a1:b9:2c:ec:a3:03:c5:8e:93:cb:75:7a:59:94:43:d6:b1:
b2:dd:67:ed:7b:7f:c9:df:81:a5:9d:38:1f:30:03:31:de:a9:
a8:13:29:5a:c4:37:a0:90:fe:00:75:94:86:bd:8f:9f:ab:2d:
b8:76:77:d7:4d:3f:1d:55:2e:43:ae:11:48:f4:72:d8:94:fa:
27:ec:f1:3c:e2:7c:84:39:b8:fb:32:c8:bd:d5:3b:09:c5:55:
f0:57:a3:29:cc:ee:16:b2:27:e3:e5:31:80:8b:92:bf:f3:7c:
7d:78:df:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:27:09 2026 by rpki-client