Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/m1nkhKN1uWOfQUoEvETmyRB214Y.roa
File: m1nkhKN1uWOfQUoEvETmyRB214Y.roa (raw, json)
Hash identifier: wsIFgurywje6kjtyJEc3Ezo96p3MK4ro7KSviU8G6Os=
Subject key identifier: 9B:59:E4:84:A3:75:B9:63:9F:41:4A:04:BC:44:E6:C9:10:76:D7:86
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A19EB4151CE0AE63006360FD0A0235E87B
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/m1nkhKN1uWOfQUoEvETmyRB214Y.roa
Signing time: Mon 02 Nov 2026 23:59:24 +0000
ROA not before: Mon 02 Nov 2026 23:59:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400402
IP address blocks: 2.27.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9e:b4:15:1c:e0:ae:63:00:63:60:fd:0a:02:35:e8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 2 23:59:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b59e484a375b9639f414a04bc44e6c91076d786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:9c:b0:35:b7:cb:5b:b2:58:42:04:48:9a:
dc:00:48:89:b6:53:95:56:86:b5:8e:38:e3:5d:b6:
0c:88:00:27:33:d1:dc:04:73:80:dd:36:0c:81:35:
44:cd:e5:a3:d9:10:08:cb:d4:5a:b0:20:aa:63:f4:
e4:7f:b8:44:64:17:16:d3:e1:7b:71:c1:2d:f4:4f:
51:b5:aa:31:df:11:97:61:c1:90:51:b5:c1:db:fd:
94:35:72:74:73:99:ed:00:26:93:42:b4:fa:4e:1d:
6e:32:75:90:78:a9:4d:38:70:16:97:ca:36:90:bc:
fb:55:24:3b:b8:6e:2b:c1:5b:37:f2:83:46:f4:17:
e6:02:d2:11:3b:aa:92:39:66:0d:2a:cd:cc:2e:06:
dc:d7:7e:7d:7e:5b:39:0b:7c:93:cf:7a:e7:75:13:
5f:ec:9a:a4:d3:85:9d:07:f4:0a:08:57:d4:33:eb:
4b:21:fb:f8:0b:4c:c0:00:15:c8:24:88:27:28:72:
19:be:ee:f7:3a:98:d5:f0:c2:ea:9c:15:60:c0:7c:
4d:d4:ca:ed:1b:66:cd:73:d3:4e:74:a3:24:94:8e:
c7:49:5e:0f:10:54:4e:ce:b1:2d:ab:f7:78:0e:bd:
e6:75:34:4e:89:ba:d8:37:2d:60:74:d5:76:5f:56:
6c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:59:E4:84:A3:75:B9:63:9F:41:4A:04:BC:44:E6:C9:10:76:D7:86
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/m1nkhKN1uWOfQUoEvETmyRB214Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.140.0/23
Signature Algorithm: sha256WithRSAEncryption
12:16:b8:70:7b:62:1f:74:65:af:b7:0c:6e:0b:66:23:d8:b9:
f6:41:3e:5f:3f:01:30:47:23:63:c0:a9:0d:d7:b4:27:f8:3b:
dc:84:d7:db:ea:4c:50:71:a7:a0:12:1d:26:4a:a3:75:b9:3b:
6e:a6:71:aa:db:4f:eb:1c:2c:f5:d9:9f:24:f7:56:fd:1f:c6:
33:a5:09:d9:0f:ac:ad:85:41:8f:eb:29:19:69:e2:b2:1c:f0:
05:05:7f:85:05:a3:28:76:90:d5:7d:4e:dc:b2:77:50:9d:4e:
71:26:46:bf:db:9e:cb:0d:71:a4:51:95:76:4a:cd:3a:12:04:
d0:c6:2d:d5:06:63:32:42:a0:12:17:d8:89:53:05:1c:ad:a0:
fd:ad:7a:34:5d:14:11:e5:08:37:11:26:43:73:5e:4a:54:05:
62:0c:52:5a:b9:60:a1:d4:75:70:6a:c0:79:9d:68:8d:c4:cf:
87:ea:47:d7:3c:d3:e3:da:1d:62:6d:ec:e7:c1:a5:62:39:bb:
07:9a:b1:5f:d3:c5:cc:62:5a:79:76:dc:bd:9b:00:39:9d:5d:
7a:48:bc:86:e9:6e:8a:21:8f:b1:d5:1c:d0:0c:fd:9a:d9:62:
63:ea:5d:1f:a4:a3:86:ec:9d:c0:cf:bb:71:79:46:2f:a5:60:
92:2f:a9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:44:00 2026 by rpki-client