Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lfISskr3iYms1cmBoCDWJdFyQUI.roa
File: lfISskr3iYms1cmBoCDWJdFyQUI.roa (raw, json)
Hash identifier: wPuq17brqmm2+mth+faECmNAUyO5029g4yeUOkGAtfY=
Subject key identifier: 95:F2:12:B2:4A:F7:89:89:AC:D5:C9:81:A0:20:D6:25:D1:72:41:42
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A18887998A5A1B1C7069DE804DB34508C8
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lfISskr3iYms1cmBoCDWJdFyQUI.roa
Signing time: Thu 29 Oct 2026 16:39:10 +0000
ROA not before: Thu 29 Oct 2026 16:39:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 2.27.75.0/24 maxlen: 24
13.143.104.0/23 maxlen: 24
177.202.112.0/24 maxlen: 24
201.24.166.0/23 maxlen: 24
201.24.172.0/23 maxlen: 24
201.24.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:87:99:8a:5a:1b:1c:70:69:de:80:4d:b3:45:08:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 29 16:39:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95f212b24af78989acd5c981a020d625d1724142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:a4:a0:b0:15:80:65:b2:ab:6f:43:56:27:
16:9f:52:3b:14:74:ab:0a:82:a4:81:d3:ce:a0:48:
57:89:49:40:66:6f:ef:95:a5:1b:bc:90:48:70:a8:
7e:28:35:1e:73:7c:70:99:3c:a4:3e:f8:82:7e:1e:
58:6e:69:6b:dd:8f:e1:e9:56:56:c1:bb:de:b8:3c:
3a:73:88:9a:b3:f4:11:4c:5c:98:8c:f9:fa:6b:26:
27:83:1a:ab:8f:74:ee:ac:a6:9a:a8:81:d6:c1:fe:
f7:3d:c3:1b:e4:5a:a2:35:7a:d2:6a:af:ff:4c:0a:
ff:91:5e:44:e8:5e:1b:1f:4e:ba:5b:ac:47:1d:0b:
b5:2d:82:79:fb:42:49:a2:40:ff:8b:76:15:72:33:
15:e2:4c:cb:4e:45:56:13:4b:6d:b2:12:52:5f:84:
10:dd:c5:7b:d6:f8:68:f6:02:b7:df:f1:78:65:7e:
4e:c5:a5:82:b5:c8:ed:ea:18:b7:84:0e:38:96:85:
7c:84:e3:4f:88:7f:05:e3:62:96:ea:66:3d:54:e1:
18:b1:3d:62:27:ad:bc:ec:7b:33:fd:8a:cb:47:cb:
c1:d7:ce:33:cc:08:75:e1:a7:92:76:a6:6a:44:cc:
24:0e:ea:c0:86:29:d0:03:96:f6:a7:68:82:0f:7d:
8d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F2:12:B2:4A:F7:89:89:AC:D5:C9:81:A0:20:D6:25:D1:72:41:42
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lfISskr3iYms1cmBoCDWJdFyQUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.75.0/24
13.143.104.0/23
177.202.112.0/24
201.24.166.0/23
201.24.172.0/23
201.24.190.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:1c:11:56:5c:01:0f:47:98:aa:6d:b7:fc:bf:e2:6d:63:8e:
a7:3f:88:65:83:3a:7a:5e:36:94:ae:00:10:d3:07:df:ea:e5:
06:d1:48:43:b6:a9:cd:68:6b:0e:f1:a0:e1:53:60:58:a3:b1:
c7:1a:34:e6:09:ff:af:2f:6a:72:e4:de:b8:f3:89:ab:42:b6:
26:6f:69:53:80:1b:0e:f6:ca:f5:db:68:e5:79:9d:30:07:60:
86:4c:c3:e1:f8:fb:cb:90:fb:3e:5d:54:63:2d:2f:75:a7:be:
f3:31:52:c0:69:a4:79:0f:75:24:79:71:2f:db:52:33:b2:8d:
be:3f:48:dd:3b:e3:90:76:6d:c1:67:68:13:d9:48:a2:61:dc:
fa:6d:e9:26:19:72:6d:95:26:8c:0d:ee:a6:f0:f3:11:3b:b9:
1a:a9:33:28:77:e6:46:b9:24:aa:20:10:c9:a7:27:4d:d4:13:
c3:c4:65:5d:af:16:f5:db:50:e6:5c:7f:13:52:3c:21:6f:aa:
fa:80:ad:ca:af:cd:fc:58:1d:86:bf:c5:5b:ee:59:ea:f2:31:
c1:01:38:f8:00:fd:46:7b:7b:1f:01:ae:1f:33:da:95:fa:10:
65:ed:10:03:f4:38:58:d5:b3:a0:29:98:31:8d:1b:c8:59:28:
5f:a4:94:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:42:00 2026 by rpki-client