Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/qGOHUTh6CRimQs2olgD7GGq6uBE.roa
File: qGOHUTh6CRimQs2olgD7GGq6uBE.roa (raw, json)
Hash identifier: c5YcOlwGRkunZDOp/8y8upYGGfZ4r2VCNAbbYowvcco=
Subject key identifier: A8:63:87:51:38:7A:09:18:A6:42:CD:A8:96:00:FB:18:6A:BA:B8:11
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DB0F9B2F04AE24AB1A5E90A0E58F2343B
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/qGOHUTh6CRimQs2olgD7GGq6uBE.roa
Signing time: Tue 21 Apr 2026 16:57:27 +0000
ROA not before: Tue 21 Apr 2026 16:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206766
IP address blocks: 2.27.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:f9:b2:f0:4a:e2:4a:b1:a5:e9:0a:0e:58:f2:34:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 21 16:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8638751387a0918a642cda89600fb186abab811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2e:fd:59:a6:5e:17:7a:34:3e:a2:93:16:82:
f3:95:8c:ad:64:b2:1f:16:d5:df:14:98:6e:d2:77:
85:a8:04:31:c2:64:ae:76:bb:1a:b2:53:f8:e0:cd:
e3:25:53:92:9e:96:e2:66:17:73:74:a4:72:0d:d7:
24:8a:26:d5:f8:ea:4f:ac:10:3f:13:2b:fa:6f:59:
0a:17:2b:26:ea:27:4c:af:b8:36:74:c4:05:5c:46:
f0:50:53:00:7a:7d:f6:19:64:b3:46:9f:96:36:e2:
a4:0b:04:e2:8a:e0:3c:60:c2:db:a8:58:1a:f0:61:
08:d6:84:df:2e:27:f6:e4:8e:10:04:80:f6:c7:36:
07:97:c8:37:7e:3e:cf:d6:bb:44:bc:9c:49:f2:68:
72:6e:33:0f:eb:e9:2c:c6:27:13:0d:bb:1a:a6:ee:
4a:82:65:ab:4e:3d:0f:31:90:af:b9:db:d5:3a:a6:
51:be:60:b6:41:d7:2c:4e:57:43:5f:06:15:de:75:
f4:93:09:fb:77:1b:ec:c4:d2:30:26:0a:1b:43:b1:
4f:27:34:d8:ae:54:94:c6:b1:d4:2f:9b:2e:46:85:
08:d9:21:89:ae:d8:82:84:f7:ed:0f:91:68:72:26:
87:93:79:a0:9e:e7:3f:b0:d3:cd:56:58:d7:89:a2:
6d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:63:87:51:38:7A:09:18:A6:42:CD:A8:96:00:FB:18:6A:BA:B8:11
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/qGOHUTh6CRimQs2olgD7GGq6uBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.114.0/24
Signature Algorithm: sha256WithRSAEncryption
77:92:9c:56:ff:2f:6f:e6:a0:3c:29:60:9e:90:62:02:15:ba:
77:13:48:d3:96:5d:9a:70:b6:2c:2b:d7:ac:15:82:dc:71:ef:
ce:5e:27:ab:20:82:b6:fe:db:79:32:0e:77:7d:0b:dd:a9:3a:
27:4a:8e:83:84:74:9d:aa:b0:c3:c7:5e:f6:ee:4f:84:60:cc:
3c:3a:91:36:44:5d:21:8f:40:12:b9:69:4d:3d:94:c1:13:60:
52:22:07:b1:38:e1:15:7f:96:7a:fe:47:5d:7e:02:e6:d6:ed:
11:b8:64:c5:69:b1:a9:72:30:46:70:94:ed:11:82:42:7f:ac:
6b:c3:2d:6c:93:94:ab:6c:4f:9c:4b:70:29:26:22:e7:fa:fe:
40:11:83:3a:8b:68:11:d8:68:d1:7e:66:c2:bb:25:62:41:98:
df:21:f2:ee:ed:5e:eb:1e:07:f3:29:70:33:0e:fe:7a:37:e6:
b1:9c:82:1b:ca:54:7c:30:d7:60:b0:be:9a:ea:fc:95:19:74:
30:8d:97:5c:27:1c:21:54:d3:ab:a9:2c:5e:94:bc:fa:a4:34:
b8:9e:49:b0:b6:35:96:3e:33:12:a8:6e:51:f2:0c:b0:61:17:
84:83:c1:68:84:b9:a3:a5:e6:c8:71:d2:2f:72:d9:77:70:24:
7b:b1:d3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:51:20 2026 by rpki-client