Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wHEZ8oc2TuOKqpMDxi-dBJwSf0M.roa
File: wHEZ8oc2TuOKqpMDxi-dBJwSf0M.roa (raw, json)
Hash identifier: HiQOibCdB8DCsYcqk9OGXYYUFqykgEiFpaVeaDy1RqA=
Subject key identifier: C0:71:19:F2:87:36:4E:E3:8A:AA:93:03:C6:2F:9D:04:9C:12:7F:43
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A09175C22658E656492F75DD25FF728B65
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wHEZ8oc2TuOKqpMDxi-dBJwSf0M.roa
Signing time: Fri 11 Sep 2026 17:13:28 +0000
ROA not before: Fri 11 Sep 2026 17:13:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215533
IP address blocks: 2.27.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:75:c2:26:58:e6:56:49:2f:75:dd:25:ff:72:8b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 11 17:13:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c07119f287364ee38aaa9303c62f9d049c127f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:78:d7:7c:31:48:ac:62:42:b8:88:53:db:aa:
43:2d:26:00:88:66:df:9d:ba:93:92:9d:72:83:f7:
13:93:5c:57:5f:f6:f7:29:eb:94:1b:11:a5:0d:29:
45:66:d7:64:8a:85:d8:16:22:12:b0:67:04:e3:82:
18:44:f2:dc:0b:da:81:dd:a0:ec:23:8b:84:08:43:
df:7a:8a:d0:fb:37:f5:07:0b:75:86:5a:54:11:df:
5c:07:3f:6b:84:10:68:20:f8:35:34:db:cf:c8:d3:
67:7f:2c:22:18:21:4c:68:69:74:90:a8:17:f6:c7:
08:4b:c1:3c:c5:0e:e3:73:05:aa:a6:de:ea:bf:0e:
39:3a:bd:1c:be:d8:94:71:f3:48:f5:27:91:dc:34:
e3:90:ce:dc:21:5c:1d:59:98:64:69:9d:35:6c:87:
cb:2f:09:fe:26:74:b3:6a:1d:f8:e3:de:31:b6:df:
ff:9d:30:ce:66:54:1e:29:b0:ce:ef:fd:bd:ad:45:
09:25:9b:12:9b:e6:d2:fb:f9:3d:4c:50:2b:b8:11:
fd:be:e4:be:19:3f:13:30:53:01:8b:1d:81:f8:b0:
9c:85:ab:e0:68:f2:c9:3f:72:fd:90:77:68:12:ba:
91:fd:46:0d:e1:c1:ad:f2:09:39:70:ef:8e:c5:96:
04:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:71:19:F2:87:36:4E:E3:8A:AA:93:03:C6:2F:9D:04:9C:12:7F:43
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wHEZ8oc2TuOKqpMDxi-dBJwSf0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.89.0/24
Signature Algorithm: sha256WithRSAEncryption
06:e9:6c:c6:84:82:e3:9b:28:19:b6:0b:78:39:ad:62:0d:e2:
ba:2b:d1:fa:ed:2b:3e:3a:aa:ef:5d:83:c7:fb:c6:ae:62:b5:
4e:de:bd:c7:91:d3:60:63:40:e4:7c:a0:81:6c:08:8b:5c:62:
89:bb:de:34:af:14:21:e7:2d:e7:39:d0:d6:54:e2:c3:c8:84:
e4:2b:e6:ee:c5:b3:72:ba:6b:27:5d:ed:69:d3:68:8a:01:06:
92:fc:58:3f:5d:47:6d:4d:42:0c:c2:9b:13:64:94:cf:fd:8f:
7b:f1:d7:4c:14:83:07:f2:d0:da:b5:6b:f1:a6:ff:ec:39:17:
ca:de:34:b1:0b:05:a4:84:12:e3:cf:d6:22:b3:37:e0:b5:cb:
86:6a:d6:43:b5:ec:9b:8b:fa:28:e4:bd:f9:da:1b:b1:ed:cb:
cc:b3:9c:8b:39:22:c5:f5:44:0c:74:f6:82:c3:40:1c:63:c6:
9e:22:e4:01:f3:47:78:6a:d7:24:52:f6:c7:98:72:09:81:3f:
76:b1:53:e4:40:43:09:f2:31:b8:0e:ff:34:7b:68:78:19:06:
ec:10:29:3a:c0:4f:1b:8a:f6:f3:97:73:29:5a:35:5a:ee:19:
1c:6d:4e:56:5c:32:8c:4d:89:5d:82:f5:3d:85:ef:2d:f7:fa:
1a:9f:a2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:16 2026 by rpki-client