Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/npNJrz5T0BoO2S184mUQXfajiBA.roa
File: npNJrz5T0BoO2S184mUQXfajiBA.roa (raw, json)
Hash identifier: /w5LQe08w6NlWhjJlF/6IefxnCBnZDcaAS3bzq2zb8s=
Subject key identifier: 9E:93:49:AF:3E:53:D0:1A:0E:D9:2D:7C:E2:65:10:5D:F6:A3:88:10
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D06E516E7DE2D6D0E4192BF52155565E8
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/npNJrz5T0BoO2S184mUQXfajiBA.roa
Signing time: Thu 19 Mar 2026 16:19:30 +0000
ROA not before: Thu 19 Mar 2026 16:19:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 2.27.118.0/24 maxlen: 24
2.27.214.0/23 maxlen: 24
2.27.241.0/24 maxlen: 24
2.27.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:e5:16:e7:de:2d:6d:0e:41:92:bf:52:15:55:65:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 19 16:19:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e9349af3e53d01a0ed92d7ce265105df6a38810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:8f:56:7d:71:44:25:5d:2b:44:84:e2:63:98:
31:f7:73:1b:f5:d3:dd:99:20:2e:bd:5b:94:2c:f9:
b0:57:13:e1:dc:64:79:d9:38:cc:e7:db:44:90:29:
27:84:2f:16:8b:a3:47:4a:c2:5b:1b:0f:0b:98:8d:
33:0d:f2:96:a3:76:67:fb:bf:d3:8c:f1:ec:25:99:
ae:cd:e6:b4:de:9a:bc:62:8a:93:e5:05:a2:6c:17:
e0:46:a0:e1:b7:29:b9:ff:f8:ce:76:0c:aa:62:b5:
d8:07:77:75:db:59:e9:6e:3c:71:9f:da:a5:6f:d1:
61:44:04:e1:4a:4d:53:82:0e:a1:4e:56:16:e0:65:
3a:2d:b3:24:95:4f:fe:eb:8d:95:16:bc:76:d9:85:
39:30:c2:50:ea:b5:04:98:1a:9a:95:45:96:a3:4f:
8c:82:f2:a7:e6:5b:3b:54:96:e2:89:03:74:82:d0:
ef:2e:78:80:b0:ff:ed:af:38:6b:cd:17:ce:7e:25:
b4:15:c8:aa:bb:83:52:50:81:95:9e:e6:09:b0:bd:
f3:93:73:c0:4c:99:03:5b:b6:b3:47:2a:7b:1a:1c:
4a:75:3d:94:19:01:72:d0:a4:cd:95:7b:60:27:89:
00:5a:7f:87:30:5e:4b:10:93:78:af:b0:86:d0:9c:
24:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:93:49:AF:3E:53:D0:1A:0E:D9:2D:7C:E2:65:10:5D:F6:A3:88:10
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/npNJrz5T0BoO2S184mUQXfajiBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.118.0/24
2.27.214.0/23
2.27.241.0/24
2.27.247.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:3f:86:56:49:54:61:64:9c:d4:f5:f8:4b:ac:8f:60:4a:f7:
db:bc:82:10:2d:7e:fa:da:66:a3:5f:62:3e:37:62:12:49:a8:
fb:5f:f9:73:fc:ec:64:fc:f6:f9:e0:59:cb:2d:92:2c:68:f5:
55:16:68:a7:1a:c3:76:00:c0:94:41:14:f8:65:91:9c:d9:f5:
70:07:00:97:30:76:81:21:59:76:ad:12:0e:81:54:96:35:e7:
92:9a:0f:fd:6e:07:e3:f3:98:6f:eb:38:4b:85:bc:7f:55:04:
ec:00:5b:fd:82:a8:e7:63:45:cb:dd:4d:0e:c2:b3:a4:f1:91:
f9:8c:bd:75:06:95:13:6f:39:8a:0f:37:bc:6b:bd:c8:27:30:
fa:60:4b:5c:a4:1b:ad:69:5f:b4:e7:3d:50:a5:5c:05:c9:71:
11:5f:cd:8b:5a:e0:ef:a7:41:b3:9f:24:56:7e:ab:39:d8:31:
31:2f:86:e0:70:aa:85:61:0d:e1:8a:b0:10:9b:87:29:ee:b7:
d3:00:45:55:db:95:3b:b0:05:98:fc:23:f7:d1:8e:ca:7a:ac:
30:08:63:1f:02:49:40:46:7b:e6:9b:22:73:c3:7b:f1:c1:33:
47:0f:36:69:84:6c:d3:4f:83:9c:be:f0:ce:5c:44:40:fb:be:
33:53:a9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 14:30:06 2026 by rpki-client