Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/kmUGJRxvaBsEgIK-8qDsVaJ2Iac.roa
File: kmUGJRxvaBsEgIK-8qDsVaJ2Iac.roa (raw, json)
Hash identifier: LTCBddw3GEycWUkapVdtFjzXMK2BJ7VWpoJvSliVmOk=
Subject key identifier: 92:65:06:25:1C:6F:68:1B:04:80:82:BE:F2:A0:EC:55:A2:76:21:A7
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D0BDDACDE2E36EFD90C01569850628569
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/kmUGJRxvaBsEgIK-8qDsVaJ2Iac.roa
Signing time: Fri 20 Mar 2026 15:29:30 +0000
ROA not before: Fri 20 Mar 2026 15:29:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34202
IP address blocks: 2.27.114.0/24 maxlen: 24
144.31.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0b:dd:ac:de:2e:36:ef:d9:0c:01:56:98:50:62:85:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 20 15:29:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=926506251c6f681b048082bef2a0ec55a27621a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c7:3a:cc:64:9f:f1:c6:8a:35:5c:83:a3:f6:
b8:75:ef:39:5e:91:bc:28:b7:29:03:b5:1e:32:7f:
d3:f5:5e:eb:4b:73:4c:56:e1:69:7e:ab:4f:dc:94:
de:10:bd:cd:37:26:24:04:08:f7:8d:7d:56:7f:8e:
55:82:ff:75:4e:15:73:09:38:0c:8b:61:34:49:fe:
dd:60:cf:5c:69:85:16:24:43:1b:62:dc:73:64:cd:
31:a4:f7:4b:04:7a:e1:a0:0c:c3:94:22:1c:28:cb:
24:39:19:85:e7:15:fd:19:93:88:0e:fa:5a:a3:3c:
91:14:6e:cc:ed:d1:15:18:3e:00:df:b8:68:59:aa:
8e:6d:59:e4:e2:73:2d:a9:f9:df:1d:43:60:ab:6a:
c6:08:d7:6c:0e:57:16:f7:ed:19:51:61:85:05:ff:
27:3f:38:80:03:91:93:94:ab:30:2f:38:b1:9a:ac:
fe:9b:e7:0f:73:75:82:a1:87:5f:b6:39:5b:26:9c:
1c:95:af:10:5d:98:9d:d8:98:28:29:10:d0:42:49:
1b:a2:e7:8b:53:49:2e:2d:0b:bb:21:e2:50:98:a8:
4d:04:04:19:a8:32:39:2c:0c:e5:81:06:f1:94:cc:
1a:fb:41:46:4e:5a:1b:eb:3c:21:75:7b:6e:2b:0f:
3f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:65:06:25:1C:6F:68:1B:04:80:82:BE:F2:A0:EC:55:A2:76:21:A7
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/kmUGJRxvaBsEgIK-8qDsVaJ2Iac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.114.0/24
144.31.146.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:4e:23:95:eb:7f:6d:94:d0:eb:f8:9c:83:3d:ec:9c:0c:3e:
e5:2b:1d:a6:4c:2f:11:dc:60:8d:19:1a:2f:de:6a:70:5a:bb:
9c:42:80:2f:b6:50:1f:f7:90:63:26:3d:2e:a3:a2:da:dc:46:
50:08:7c:32:6a:33:04:e1:c9:74:5c:2f:59:12:1b:b2:86:11:
41:3f:e8:8e:78:5d:c7:d9:d5:d3:7e:31:0e:c0:c7:0b:09:63:
49:cb:d6:97:d8:12:03:e0:5b:cd:b2:41:ec:88:61:7e:e5:45:
6c:06:16:19:8f:cb:40:e9:78:ac:21:45:bf:72:4c:59:fd:09:
d9:c3:5e:ad:73:3a:e0:d6:d7:4d:f7:d8:44:b4:3e:c1:3b:3c:
dc:df:b6:32:ab:c0:73:18:95:46:10:3a:17:58:ed:ca:12:be:
15:fd:53:ea:8d:69:79:59:4e:18:f1:0d:07:5e:c2:f8:54:b4:
39:02:15:35:1c:99:1e:b7:80:7c:bb:55:d8:b7:3b:63:b0:ce:
02:10:65:34:6c:a0:85:25:cb:b7:24:9e:74:94:34:f8:20:19:
d3:74:f8:6e:18:3a:85:15:03:50:d4:1c:e3:e5:6d:9b:b8:8c:
02:5a:f4:c0:e1:d1:77:9e:53:8b:e4:98:69:99:30:22:be:5d:
e4:e9:19:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 14:36:25 2026 by rpki-client