Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/njE5ypXquhJGxq81biVjrlZI1Yw.roa
File: njE5ypXquhJGxq81biVjrlZI1Yw.roa (raw, json)
Hash identifier: kxUbgpOHk2gpHsgbMNq9ARNbgfxdfpC5aZORDVcJUw4=
Subject key identifier: 9E:31:39:CA:95:EA:BA:12:46:C6:AF:35:6E:25:63:AE:56:48:D5:8C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0A6653FE2F6A13274748F0FEA78DB35E3
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/njE5ypXquhJGxq81biVjrlZI1Yw.roa
Signing time: Tue 15 Sep 2026 18:47:28 +0000
ROA not before: Tue 15 Sep 2026 18:47:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202831
IP address blocks: 2.27.98.0/24 maxlen: 24
13.143.134.0/24 maxlen: 24
31.77.232.0/24 maxlen: 24
144.31.34.0/24 maxlen: 24
144.31.222.0/24 maxlen: 24
150.241.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a6:65:3f:e2:f6:a1:32:74:74:8f:0f:ea:78:db:35:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 15 18:47:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e3139ca95eaba1246c6af356e2563ae5648d58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:14:93:42:ce:b3:cf:79:0a:9f:28:06:f6:13:
33:bf:79:23:82:8e:a5:74:f4:da:a0:ee:ac:fa:b5:
aa:0a:0c:a8:93:49:73:c9:f3:47:71:55:34:a3:7d:
5c:98:17:85:0a:e5:a8:fd:86:8e:ad:9c:1e:62:a9:
c7:9d:25:f8:7d:db:e3:0f:d1:c1:bc:05:f8:5d:eb:
e5:87:e9:34:5e:6f:c1:f8:8d:b5:b8:01:33:92:61:
e6:d5:a7:ac:fe:e9:39:51:f9:f5:c0:e9:96:fb:67:
5d:31:2d:83:40:8e:2d:7a:df:54:8b:54:13:6f:8a:
a6:34:36:62:ff:d3:5c:5f:3a:b9:b3:db:f4:b3:7b:
54:09:94:71:43:bb:5d:fd:4a:0d:c1:0c:41:af:f0:
9e:52:bd:f2:36:8b:17:9a:7f:18:df:00:b1:22:b4:
49:19:76:d1:a0:dd:0a:6e:45:23:5e:83:9f:88:5d:
92:5e:2e:6b:89:7a:e2:a4:c4:25:be:e0:e7:46:c4:
00:05:ae:83:6e:98:4b:73:9b:0e:f5:85:06:b2:61:
c2:23:fe:57:78:08:6d:21:47:32:21:d8:7e:22:1b:
26:ee:21:b7:08:fa:ae:25:e4:04:76:ac:2a:55:73:
22:d9:be:8c:f8:3c:0f:6e:91:6a:5d:9f:04:09:b1:
a3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:31:39:CA:95:EA:BA:12:46:C6:AF:35:6E:25:63:AE:56:48:D5:8C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/njE5ypXquhJGxq81biVjrlZI1Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.98.0/24
13.143.134.0/24
31.77.232.0/24
144.31.34.0/24
144.31.222.0/24
150.241.85.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:9a:3f:fb:99:be:25:b0:35:e5:10:0d:dc:e8:4d:b6:9a:9f:
15:e3:db:ee:b0:8c:b1:c7:0d:61:45:d1:0b:8f:bd:1b:a2:4a:
7a:c7:fb:52:49:e0:94:a3:4c:cb:9d:b5:1e:87:29:96:c9:ec:
14:34:7c:90:fb:0e:60:bc:d3:ab:36:fc:90:12:e3:80:e0:37:
fb:dd:65:0f:cb:9a:f2:2d:97:17:b6:c5:2c:7c:49:ce:a3:71:
9f:92:30:85:7c:17:8e:38:1b:8a:12:b7:00:86:76:a9:fd:a8:
d9:e0:76:d7:88:fc:3c:66:4b:07:3b:f1:48:2c:83:b9:44:2f:
19:88:0c:76:e2:2d:80:4a:1d:dd:d8:5e:9b:58:57:22:f1:21:
26:31:41:f3:3b:34:90:9e:07:73:e7:ef:db:f3:c1:5f:60:02:
32:a0:6c:0a:15:3b:f5:90:bf:de:2d:35:d8:3a:cf:68:c9:23:
2d:38:b1:ef:6d:33:68:1a:60:57:96:ac:02:71:d7:90:be:3b:
3d:57:5e:e7:d0:e6:49:5b:37:c8:12:7c:ea:9b:92:09:33:2a:
bf:09:dc:2a:f7:41:5e:7f:6a:87:1d:6d:e6:36:cd:a7:3b:d7:
2c:72:4e:00:76:5d:75:81:e6:df:42:cf:25:fe:7d:b9:d8:32:
0c:5e:14:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:27:20 2026 by rpki-client