Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/nKR8qRxG1tAxA0ErzzuwTTZYziU.roa
File: nKR8qRxG1tAxA0ErzzuwTTZYziU.roa (raw, json)
Hash identifier: CMQbZlnLL8cr5CLIu1SD71XZMXc38iCh93qKZrIbvoQ=
Subject key identifier: 9C:A4:7C:A9:1C:46:D6:D0:31:03:41:2B:CF:3B:B0:4D:36:58:CE:25
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0AB1BEC910B3C67308F520CD884C31C28
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/nKR8qRxG1tAxA0ErzzuwTTZYziU.roa
Signing time: Wed 16 Sep 2026 16:45:29 +0000
ROA not before: Wed 16 Sep 2026 16:45:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211557
IP address blocks: 2.27.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ab:1b:ec:91:0b:3c:67:30:8f:52:0c:d8:84:c3:1c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 16 16:45:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ca47ca91c46d6d03103412bcf3bb04d3658ce25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:19:46:a4:a0:80:e8:da:f2:68:50:c6:71:d0:
47:ba:d2:57:47:8d:15:20:4a:21:56:42:5a:af:f7:
0d:87:8c:c6:26:95:1e:c8:28:98:2d:83:ab:9f:d8:
51:b8:64:bc:b7:8d:e2:71:b4:f9:7e:3b:a3:bc:a0:
df:2c:31:c8:b6:c7:a8:13:9c:78:60:d1:52:26:25:
80:ee:f2:a7:84:f6:1c:9d:c5:29:54:1d:cc:15:b5:
8a:4d:33:9a:f0:cd:03:d2:8e:c9:86:77:f0:a9:01:
a4:e6:f9:3b:f5:ba:55:87:37:53:8b:3f:23:ea:4e:
c0:67:17:5a:90:f7:91:9d:d4:0f:62:7e:8d:3d:92:
74:6f:a5:2b:cc:3c:a3:56:c0:98:71:0f:8c:c9:81:
23:f4:14:a8:e2:b5:df:be:86:aa:38:88:e8:38:ef:
10:32:df:3e:d7:7f:5d:d0:10:d0:ab:2c:51:dc:b3:
f2:4d:db:ec:4c:c4:38:92:af:49:dd:c3:e9:42:89:
71:14:02:0e:ce:2e:93:63:5b:e3:1f:56:6c:9a:75:
00:8d:a6:ac:ae:8b:18:82:4d:d2:46:fc:c7:0d:af:
2f:58:43:99:58:b3:6b:ff:6e:b5:a8:f6:e7:67:b5:
56:39:a8:08:61:0e:2b:94:24:1e:f0:46:db:fb:e7:
61:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A4:7C:A9:1C:46:D6:D0:31:03:41:2B:CF:3B:B0:4D:36:58:CE:25
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/nKR8qRxG1tAxA0ErzzuwTTZYziU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.91.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:9c:7b:6e:ad:91:43:bf:24:70:49:cd:0e:cc:3e:06:be:61:
d3:3e:59:4e:8c:79:84:ac:bb:c7:1a:8d:c1:f6:3c:26:59:ce:
66:5f:84:ae:de:96:87:22:d2:d9:6c:e5:70:8e:39:df:e7:ec:
89:f3:84:06:3a:b0:50:1f:dc:d0:58:65:55:b7:15:b5:35:e3:
da:c4:9f:62:f8:bc:54:aa:24:91:3e:b7:15:20:22:4e:97:37:
07:10:6b:b0:d0:88:ff:e6:10:36:bd:94:a9:8c:3b:f3:24:6c:
9e:6f:41:6e:a8:29:51:f0:67:31:c8:3f:64:68:53:d4:4f:d7:
fe:df:ba:c4:de:dc:59:e7:91:5e:20:be:18:70:94:3f:7a:f9:
83:16:29:60:11:2d:32:3f:96:ef:b7:82:0f:8d:9b:a2:ac:cf:
5f:ee:f5:26:ad:67:44:b8:88:09:70:51:e0:b4:0a:f6:13:1e:
e5:2a:aa:cd:48:89:6b:06:b6:dd:f7:a4:0d:3f:76:c4:51:9e:
7f:78:39:c4:64:9f:0c:85:0f:83:1e:ab:3c:68:6b:b2:7d:de:
02:93:fe:c0:67:7c:80:89:de:03:b2:40:64:3d:e4:34:e1:22:
40:84:0b:80:df:b0:b6:50:e9:1d:9c:31:80:5e:f6:7f:3a:3c:
28:4a:61:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:27:13 2026 by rpki-client