Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/nJP_oAMqbgUsCGD6qGPDJmKg490.roa
File: nJP_oAMqbgUsCGD6qGPDJmKg490.roa (raw, json)
Hash identifier: M6KwOQSwEZD6da4wzQFukN4pjKeknDgMXczTQG6nqAM=
Subject key identifier: 9C:93:FF:A0:03:2A:6E:05:2C:08:60:FA:A8:63:C3:26:62:A0:E3:DD
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F4DE77FF00DBEC6FD3C58BA2704888450
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/nJP_oAMqbgUsCGD6qGPDJmKg490.roa
Signing time: Fri 10 Jul 2026 21:20:44 +0000
ROA not before: Fri 10 Jul 2026 21:20:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12083
IP address blocks: 2.27.176.0/21 maxlen: 24
2.27.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4d:e7:7f:f0:0d:be:c6:fd:3c:58:ba:27:04:88:84:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 10 21:20:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c93ffa0032a6e052c0860faa863c32662a0e3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:dd:b4:fd:bf:86:b2:df:ba:d7:ca:a5:2d:
a6:94:da:e6:20:c5:10:d0:aa:b4:f3:8a:75:f5:36:
51:38:b2:fb:04:38:38:1e:29:64:7c:22:c0:45:10:
5d:43:33:28:36:6d:d1:0c:2f:e2:2e:33:22:f2:27:
a3:a7:c5:af:1a:2e:7c:e7:ed:37:47:50:92:2e:e2:
eb:1b:1a:92:ba:88:1c:3e:e7:e2:1b:6d:d8:83:30:
d8:6c:e1:00:ae:5a:0f:1f:82:8d:12:09:33:79:bb:
c3:e3:48:b3:56:c4:a0:63:e9:05:fb:73:82:da:b4:
96:72:eb:42:45:5d:ec:5e:f1:01:38:88:f8:b3:47:
7a:68:5a:5a:d7:7a:68:74:eb:c8:eb:7d:f7:01:48:
60:42:52:ea:a8:ca:ec:f6:4b:d9:ab:0e:d1:41:9e:
36:40:d1:7a:19:ec:c9:d0:7b:38:85:23:31:2f:1a:
4f:92:64:37:c1:d3:40:0b:49:ea:10:38:11:59:1a:
59:7a:f3:43:f5:28:4f:1a:3e:8e:22:9d:70:a1:6b:
82:b8:42:42:1e:0d:a0:7e:3f:18:12:b3:d9:3f:24:
a2:4a:68:d7:8d:05:dc:fd:0e:94:80:f7:aa:25:dc:
f6:16:5f:c2:87:53:32:8c:37:7c:97:ea:18:bc:58:
82:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:93:FF:A0:03:2A:6E:05:2C:08:60:FA:A8:63:C3:26:62:A0:E3:DD
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/nJP_oAMqbgUsCGD6qGPDJmKg490.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.176.0/20
Signature Algorithm: sha256WithRSAEncryption
60:d2:f9:14:31:d6:3a:34:29:c5:44:c5:13:c1:bf:5d:85:2b:
f4:61:0f:f6:4a:35:df:c6:dc:9d:43:55:0e:23:49:04:90:53:
eb:54:ba:46:e7:93:7b:16:29:ea:2d:73:69:08:35:74:f0:31:
8d:fa:ef:6f:56:85:24:03:ec:61:ac:e3:e4:37:02:89:cb:89:
eb:66:4e:74:43:13:82:09:8c:ea:af:07:ad:a1:86:3f:7a:d4:
68:ef:af:99:50:52:7f:34:e3:a1:72:c1:34:c1:20:44:1b:de:
5f:e8:ef:72:e9:f7:c6:76:88:0c:55:42:b0:9c:20:25:75:91:
73:60:c1:f2:75:ac:39:a3:bf:14:5a:63:f4:b6:a7:04:8c:f5:
98:9e:2b:8a:e5:8a:1e:e7:8a:ee:d9:fd:26:cc:7a:15:4b:6d:
f0:c6:c4:58:35:81:b4:57:82:de:08:49:77:1c:da:08:27:24:
34:7e:51:83:ea:9c:0c:e1:31:51:72:c2:5e:70:22:12:a4:7f:
27:c6:f2:88:9e:4b:f7:8a:fa:d9:b8:8d:6c:72:74:01:ed:ee:
17:40:a6:6f:4a:28:2a:e9:ac:ae:cb:01:22:29:39:67:2a:15:
ce:eb:25:07:11:23:a6:38:e1:dc:38:77:be:5b:e0:3b:3b:94:
1c:90:85:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:10 2026 by rpki-client