Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/uop8iLvGio2XR1p7yd07LOp0wbU.roa
File: uop8iLvGio2XR1p7yd07LOp0wbU.roa (raw, json)
Hash identifier: H3If7XaaDy0nvVVZrO5PKp/jwuDyoRjUvaAvnvYkJvY=
Subject key identifier: BA:8A:7C:88:BB:C6:8A:8D:97:47:5A:7B:C9:DD:3B:2C:EA:74:C1:B5
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019EDB94E9CC79857E22FCB102D5886F1E2A
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/uop8iLvGio2XR1p7yd07LOp0wbU.roa
Signing time: Thu 18 Jun 2026 16:33:49 +0000
ROA not before: Thu 18 Jun 2026 16:33:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215935
IP address blocks: 2.27.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Jun 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:db:94:e9:cc:79:85:7e:22:fc:b1:02:d5:88:6f:1e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 18 16:33:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba8a7c88bbc68a8d97475a7bc9dd3b2cea74c1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7d:61:55:21:e2:f7:16:ad:04:73:08:26:31:
50:2a:f5:46:2b:85:17:83:ce:83:b1:d1:dc:e3:fe:
3d:71:0e:93:59:55:f4:8c:c3:5d:22:29:c2:7d:30:
5a:3e:de:83:a9:3d:d7:4b:e2:4e:1c:5c:47:4d:92:
b1:c1:33:2c:94:20:97:07:7a:d0:88:d5:40:52:aa:
2e:43:2d:cc:d3:47:1c:95:c5:45:95:99:a5:c4:cd:
f3:0c:f9:fc:06:00:2f:f4:f3:b1:54:23:9f:f7:4e:
8a:55:f3:18:d2:2b:8d:d2:d3:b0:e3:ef:3b:16:bc:
66:fd:a7:ed:b0:01:c1:da:4c:bb:08:5f:cb:d5:11:
fe:ea:ff:17:0b:da:f2:1b:6a:4c:89:50:61:d7:1e:
78:ee:d6:88:f4:27:1b:82:12:de:67:49:f0:8d:b2:
54:d9:8d:4e:91:a5:af:24:9f:30:e6:26:ec:66:eb:
50:bf:16:65:58:4d:f9:4f:9c:98:2a:f8:6d:61:c2:
ed:08:64:9a:41:55:ad:e3:16:3a:a6:48:fb:73:4f:
c5:ab:3d:05:38:c0:1c:14:af:8e:e8:df:9f:a0:ed:
21:d8:0d:f6:5d:99:73:0b:fd:5c:5c:61:9e:1f:bd:
bd:db:4e:2f:a9:f5:dd:32:6c:40:fe:f3:38:f4:16:
5e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8A:7C:88:BB:C6:8A:8D:97:47:5A:7B:C9:DD:3B:2C:EA:74:C1:B5
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/uop8iLvGio2XR1p7yd07LOp0wbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.140.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:c3:98:d1:c8:5e:9e:46:e1:7f:72:95:a1:c2:44:a1:81:16:
e9:da:62:65:90:6f:24:ca:01:3b:59:4e:84:81:2c:76:bb:1e:
50:91:48:f0:ba:67:d4:3d:ce:93:d8:82:58:10:be:a5:6a:07:
28:ed:98:37:55:dc:95:f9:9e:3c:67:54:25:57:40:0b:38:02:
a5:b1:bf:2d:6b:ed:5a:16:68:d3:81:db:55:a6:c2:64:0c:34:
92:98:d4:4f:79:c2:c8:61:8e:9c:52:37:44:82:2a:27:07:96:
24:73:7d:ba:be:4b:3b:d7:85:8b:e1:3c:9e:3d:89:d1:0c:20:
e4:f4:e1:12:c9:b3:c6:aa:5f:13:d6:3f:2d:3c:9d:45:00:99:
91:f1:aa:9b:8c:95:7f:fd:02:62:da:f4:59:45:a8:09:70:66:
6d:e0:f9:3e:8a:12:b6:c5:3f:5f:d2:03:3f:80:ab:94:3b:35:
96:61:f4:45:8c:ff:5e:2c:e5:cf:ca:26:18:a5:b6:45:8f:b9:
c4:5c:15:71:3a:39:97:14:4d:bb:c2:69:f7:7f:7b:c1:31:f9:
eb:93:82:5b:e9:9e:b0:94:c1:09:70:25:bb:52:c6:ed:b6:b1:
74:83:76:80:ec:9a:71:aa:5e:90:09:d0:16:00:80:68:eb:db:
b2:77:26:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 02:18:04 2026 by rpki-client