Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/oCQ8QgvPalm1fifgv3pKVDkNbt0.roa
File: oCQ8QgvPalm1fifgv3pKVDkNbt0.roa (raw, json)
Hash identifier: uQSL6QY2Non+4waJLlll29DxOA9jry6lEr3wPMq+a6M=
Subject key identifier: A0:24:3C:42:0B:CF:6A:59:B5:7E:27:E0:BF:7A:4A:54:39:0D:6E:DD
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019CF7C554392EE49A2862BE816D9A749DA6
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/oCQ8QgvPalm1fifgv3pKVDkNbt0.roa
Signing time: Mon 16 Mar 2026 17:50:30 +0000
ROA not before: Mon 16 Mar 2026 17:50:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 2.27.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f7:c5:54:39:2e:e4:9a:28:62:be:81:6d:9a:74:9d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 16 17:50:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0243c420bcf6a59b57e27e0bf7a4a54390d6edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:78:b8:65:98:0e:db:43:b4:df:c1:27:56:
eb:db:cf:35:c2:75:f9:38:ef:29:bf:6c:5c:50:6b:
9f:fe:1c:1e:5c:68:c5:90:d8:2d:ad:b0:f7:b1:b3:
b6:e2:78:6d:86:57:b3:8d:73:fb:0d:b5:83:39:c7:
31:77:77:d7:78:2c:ce:af:e5:95:fa:3b:7e:86:a2:
9a:4a:c8:e4:e7:56:b1:e8:c3:67:7c:e8:9d:48:23:
15:ee:47:62:28:ee:eb:7c:ac:5b:bc:0d:e7:e0:44:
b6:42:30:51:66:11:85:43:25:cb:4d:ef:82:0d:ae:
8b:73:cc:e9:92:05:45:b7:a2:f4:ab:af:d0:df:fc:
35:00:4d:f1:a2:77:80:78:85:7a:17:19:e2:ac:32:
b8:4a:9f:62:c5:c8:35:38:1d:ed:fe:81:24:4a:cc:
80:ef:63:33:f7:b0:61:eb:76:75:23:2a:23:e7:22:
c0:73:2f:77:84:5f:bd:0f:d0:db:8d:2a:de:6d:f8:
fe:3e:38:b1:02:1d:7c:2a:07:54:40:f2:fc:d8:ff:
44:1c:b2:89:46:6d:d6:7e:6f:9d:ce:ee:f2:25:9d:
9e:ac:e1:c0:bb:40:0d:91:55:36:e7:f4:b9:34:0f:
55:9e:cf:4f:0f:2b:99:66:9f:3d:45:be:5e:f0:a6:
eb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:24:3C:42:0B:CF:6A:59:B5:7E:27:E0:BF:7A:4A:54:39:0D:6E:DD
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/oCQ8QgvPalm1fifgv3pKVDkNbt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.242.0/24
Signature Algorithm: sha256WithRSAEncryption
37:e0:18:65:5e:26:c7:39:4e:75:fc:92:9f:59:60:96:9b:63:
54:9b:63:2a:5f:78:ab:5a:27:83:54:da:6d:df:c8:0b:19:d7:
b5:73:9a:86:a2:7f:09:f8:9d:50:e3:98:c1:c2:0e:c1:d9:ae:
63:ce:44:dc:64:6f:d9:41:bf:e1:78:4b:7f:65:5e:8c:13:6d:
98:f7:88:36:8b:20:63:35:22:c8:d5:6b:b4:f5:57:0e:c4:17:
b0:c8:d7:b5:01:10:16:bd:1c:20:c8:9f:71:23:d0:81:cc:a2:
71:14:24:3e:6b:7b:e4:ec:1d:61:21:7a:63:23:b6:14:9c:9d:
d3:f9:88:03:78:bf:e3:f7:35:63:7f:0e:57:5d:d9:39:47:82:
e1:28:36:21:7a:2f:33:e0:ea:8e:39:91:1b:3c:99:3b:55:4d:
eb:b0:79:ba:a0:55:64:54:3f:8a:8c:17:74:0d:94:5e:2f:34:
3e:8a:70:14:24:cd:8f:30:00:90:14:14:95:c1:cb:9e:f6:c6:
9b:4b:18:63:9d:45:f3:d5:c2:23:cd:17:25:3f:3f:bd:87:14:
0b:9d:e7:30:89:09:89:d7:6c:7e:d0:00:ae:85:ec:2d:89:50:
f6:f5:80:2a:78:dd:8d:1c:dc:d9:5b:ca:cf:11:b6:fc:60:8a:
a8:b5:01:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 14:31:30 2026 by rpki-client