Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lsKZ3yd048fU1qt8kDb4KZ3dzsw.roa
File: lsKZ3yd048fU1qt8kDb4KZ3dzsw.roa (raw, json)
Hash identifier: xlFTo+ZtegLwlaT1+3vCuVc+ovU3Z3SGbQRR4VK13mw=
Subject key identifier: 96:C2:99:DF:27:74:E3:C7:D4:D6:AB:7C:90:36:F8:29:9D:DD:CE:CC
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A19DBCE386DF262F3905569F7C9EB5FC7E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lsKZ3yd048fU1qt8kDb4KZ3dzsw.roa
Signing time: Mon 02 Nov 2026 19:29:24 +0000
ROA not before: Mon 02 Nov 2026 19:29:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199742
IP address blocks: 2.27.58.0/24 maxlen: 24
13.143.138.0/24 maxlen: 24
31.76.250.0/24 maxlen: 24
31.77.155.0/24 maxlen: 24
179.253.106.0/24 maxlen: 24
179.253.107.0/24 maxlen: 24
191.217.196.0/24 maxlen: 24
191.217.197.0/24 maxlen: 24
191.217.198.0/24 maxlen: 24
191.217.199.0/24 maxlen: 24
191.217.200.0/24 maxlen: 24
191.217.201.0/24 maxlen: 24
191.217.220.0/24 maxlen: 24
191.217.221.0/24 maxlen: 24
191.217.222.0/24 maxlen: 24
191.217.223.0/24 maxlen: 24
191.217.237.0/24 maxlen: 24
191.217.240.0/24 maxlen: 24
201.58.174.0/24 maxlen: 24
201.58.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:bc:e3:86:df:26:2f:39:05:56:9f:7c:9e:b5:fc:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 2 19:29:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96c299df2774e3c7d4d6ab7c9036f8299dddcecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:19:a9:4d:79:f0:ca:91:82:a9:53:1a:cf:8c:
33:61:ff:1f:d4:39:56:86:0c:56:ef:77:c9:54:60:
b5:07:22:28:e0:5e:44:39:d8:93:8d:b6:27:43:99:
81:00:d1:9c:6c:2e:6a:e8:cc:ec:f2:43:f3:2c:6b:
b4:6c:5e:1f:d2:fe:1e:70:51:12:38:de:5d:16:45:
14:0b:40:cb:71:dc:9f:01:70:ec:1e:14:f1:48:02:
9c:77:4e:7c:0e:2e:51:19:eb:3e:51:9f:d2:ac:e9:
bd:1b:15:26:77:f8:c5:c5:bb:f7:ba:d4:54:d4:8b:
ca:a4:62:7a:f8:ab:6a:fe:75:ec:6f:5d:2a:e5:2b:
07:d3:1d:b8:7b:0c:80:d1:98:f8:a0:d1:87:59:4c:
5e:11:6a:78:47:b7:8b:6f:f1:0e:8f:b1:f2:9c:42:
31:2d:58:92:a7:97:a3:c7:69:ba:61:df:df:d1:ba:
23:41:b4:47:e6:e2:d0:1c:49:e8:35:42:9f:e9:a5:
05:90:56:83:d0:89:f9:75:97:c9:3f:d4:b8:c2:3a:
1b:c2:fb:d0:7a:27:7f:96:27:94:c0:87:f6:20:b3:
36:5b:b0:70:65:18:f4:9e:06:16:01:76:6d:67:23:
0d:06:a2:68:fd:24:8a:4e:21:e1:6a:36:2a:f4:58:
4d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C2:99:DF:27:74:E3:C7:D4:D6:AB:7C:90:36:F8:29:9D:DD:CE:CC
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lsKZ3yd048fU1qt8kDb4KZ3dzsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.58.0/24
13.143.138.0/24
31.76.250.0/24
31.77.155.0/24
179.253.106.0/23
191.217.196.0-191.217.201.255
191.217.220.0/22
191.217.237.0/24
191.217.240.0/24
201.58.174.0/23
Signature Algorithm: sha256WithRSAEncryption
34:4a:d4:ad:64:cc:6b:4f:29:6d:cc:fc:6f:14:36:02:bd:6c:
1c:38:cf:37:05:9e:c2:0c:49:1e:c1:00:44:93:d3:bb:9a:06:
e9:28:17:78:88:b5:2c:4e:f3:85:5c:39:03:2f:38:fd:38:61:
68:e7:f9:c4:29:f0:95:a0:be:75:f0:05:a2:89:7c:ff:9d:72:
15:a8:0a:33:18:2a:53:7f:36:ef:76:53:d2:a3:86:ad:3b:9d:
0e:19:6a:48:89:80:d0:d9:61:de:11:33:95:10:dd:d2:89:88:
bd:ae:e0:5a:dc:30:80:04:6e:a7:ba:08:57:c4:8c:47:90:4f:
1b:76:47:c8:ad:c8:0f:6f:c3:f6:a2:d0:cd:33:9d:1e:1f:47:
b9:9e:7b:b7:7a:39:20:cc:28:9c:a6:fc:d4:27:58:31:34:c7:
76:44:b3:d9:43:1b:e8:9b:20:60:dc:34:80:24:f4:ef:93:c6:
e0:14:49:5b:3e:3d:c6:e8:0d:84:6e:31:07:9c:86:08:10:d4:
c2:ec:70:bb:19:1a:55:81:36:4a:22:d0:bb:a6:f5:84:fc:90:
2b:88:aa:e1:3d:43:ee:6a:26:e9:27:11:16:b5:fa:58:08:85:
d6:c0:66:5d:70:8d:02:2e:06:4d:c6:b9:47:2a:30:a5:9f:ad:
8d:63:97:c6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 4 14:26:05 2026 by rpki-client