Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lbQAteo6F9rhSeidx6S3SRAALcE.roa
File: lbQAteo6F9rhSeidx6S3SRAALcE.roa (raw, json)
Hash identifier: 9o0PsB+wCkPTNMrayyU6DCYnB1f1sf3f+A5YcMSBCus=
Subject key identifier: 95:B4:00:B5:EA:3A:17:DA:E1:49:E8:9D:C7:A4:B7:49:10:00:2D:C1
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019CF27882F3BD9C24CB76E8AECEA9EA29FE
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lbQAteo6F9rhSeidx6S3SRAALcE.roa
Signing time: Sun 15 Mar 2026 17:08:29 +0000
ROA not before: Sun 15 Mar 2026 17:08:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207043
IP address blocks: 2.27.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f2:78:82:f3:bd:9c:24:cb:76:e8:ae:ce:a9:ea:29:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 15 17:08:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95b400b5ea3a17dae149e89dc7a4b74910002dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:cc:18:dd:a8:3d:91:d2:10:30:cc:22:69:
05:53:81:b4:9e:81:00:99:e7:55:84:51:81:34:b5:
20:eb:fb:a5:6e:f1:44:87:d4:29:26:58:37:3d:0e:
69:89:95:a5:c7:78:a3:ef:ab:63:2d:2a:44:ca:d3:
33:f1:ba:3d:c4:95:87:32:d6:b7:77:db:5b:5c:f2:
cb:bd:93:fb:d9:d9:df:20:c2:3b:70:4c:af:95:13:
4f:c8:42:6e:67:3f:2d:5d:90:b6:44:dc:1e:b5:af:
14:d3:85:52:b2:8c:70:38:45:d9:09:9a:0a:8e:16:
75:ff:0f:d9:74:dc:30:c8:71:97:b0:9c:28:37:48:
b1:75:76:1a:03:76:d3:cd:48:d8:f3:ee:dd:95:89:
18:ca:da:0c:6b:bd:70:e3:a2:85:0f:5d:bc:5b:c7:
58:c8:84:12:ef:88:c6:0c:54:d8:90:a3:e0:2a:f4:
1d:65:c0:a4:ec:2a:bd:4d:fe:1d:9b:6f:b5:8d:ad:
2b:82:a9:fa:08:db:af:ef:c9:a1:32:06:15:88:8e:
62:c3:95:97:2c:a7:ce:af:1f:56:93:95:33:7b:09:
8a:74:45:3e:20:54:2a:ca:be:16:ed:e5:03:4d:9b:
67:ed:52:25:ac:78:f5:40:7b:6b:34:d1:b8:37:cc:
39:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B4:00:B5:EA:3A:17:DA:E1:49:E8:9D:C7:A4:B7:49:10:00:2D:C1
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lbQAteo6F9rhSeidx6S3SRAALcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.248.0/24
Signature Algorithm: sha256WithRSAEncryption
45:f9:0f:00:98:95:ce:fc:c8:ab:2f:23:7e:f9:4d:6a:1b:69:
00:b1:d0:34:04:47:df:30:84:c0:e8:5a:7b:f5:83:82:3c:4e:
17:a0:59:80:6e:5c:80:f5:ef:b8:08:8a:70:80:05:e8:f4:35:
f3:46:f6:0a:ec:21:5c:8e:b9:4b:d7:81:2b:e1:d8:e0:a9:2e:
af:fe:09:ac:49:31:26:5f:99:b1:7b:a8:92:67:79:ea:ba:2f:
6b:66:45:bb:d7:70:63:f7:9e:84:30:a7:36:0a:7e:95:ca:b5:
71:69:d4:95:86:be:dd:a8:cb:4b:d4:49:45:91:8c:51:bf:41:
61:90:83:25:33:1b:71:fa:85:79:af:67:37:f3:7a:95:59:5c:
5c:02:a0:18:fc:96:14:3f:11:c5:11:3a:d6:5a:c8:b8:88:c1:
0c:70:19:e0:72:ca:54:96:e7:35:c7:d8:e2:0e:fb:e7:11:8f:
c1:f0:dc:8a:92:d6:10:72:59:af:4c:f3:5a:d2:33:00:e7:5f:
3c:ca:90:64:88:89:fb:50:db:67:6e:dd:ee:c9:73:e0:18:d2:
53:a2:1d:d0:93:b3:7d:bd:20:5b:53:cb:90:f7:af:c9:d9:0c:
c0:56:8b:86:df:0c:e5:68:d7:32:79:4f:bd:c6:68:28:05:ef:
2e:fe:f9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 14:31:00 2026 by rpki-client