Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xlWzSo-JBsfoG-FKMlzzQoz6gno.roa
File: xlWzSo-JBsfoG-FKMlzzQoz6gno.roa (raw, json)
Hash identifier: 988ZiQGGiLmfHT3QgcQYw/1zw3kDUfrTnnAYJfVFYkc=
Subject key identifier: C6:55:B3:4A:8F:89:06:C7:E8:1B:E1:4A:32:5C:F3:42:8C:FA:82:7A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E344109176F24B13D19CE28F404FAE94E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xlWzSo-JBsfoG-FKMlzzQoz6gno.roa
Signing time: Sun 17 May 2026 04:45:37 +0000
ROA not before: Sun 17 May 2026 04:45:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207043
IP address blocks: 2.27.160.0/24 maxlen: 24
2.27.168.0/24 maxlen: 24
2.27.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:34:41:09:17:6f:24:b1:3d:19:ce:28:f4:04:fa:e9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 17 04:45:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c655b34a8f8906c7e81be14a325cf3428cfa827a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:72:64:ef:38:2e:73:89:fc:46:61:77:4c:8b:
26:57:67:f3:33:9a:2a:8b:33:1f:d8:b0:57:42:ea:
87:2a:0e:85:69:18:07:2d:12:f0:55:a7:c1:41:2a:
ef:44:a5:86:bd:05:56:17:42:36:49:2a:b4:7c:dc:
6f:ed:dc:7e:cb:47:43:76:0d:1a:da:27:1c:cc:fe:
ed:80:ce:e5:6e:5e:5b:8d:58:d4:4a:e6:aa:fd:56:
18:a6:b1:0a:eb:27:5d:92:15:52:04:47:13:03:9c:
7a:e6:b7:c1:fe:32:ab:f6:c2:4c:23:66:01:7d:ea:
34:11:bd:fa:69:76:5f:c1:5e:78:7b:84:f8:f2:92:
0e:b1:b4:4a:be:b5:7f:b5:6e:b9:71:1f:1b:af:54:
c7:0d:ee:82:d6:8a:55:f7:9a:f6:28:cb:6c:72:e8:
53:2b:33:81:f0:59:e7:aa:3a:cb:5e:6a:0d:6a:7b:
94:e9:84:c3:82:06:96:36:37:6e:cd:c8:bf:5c:ff:
3c:ec:6c:4c:e1:6d:c9:38:df:a7:4e:13:35:83:09:
ae:a0:c3:d8:88:0c:9a:4c:29:1f:e2:67:69:50:0b:
76:62:ee:1b:27:2b:25:5d:e2:7f:e4:20:66:5c:d4:
d1:e0:03:c0:4c:8d:62:d4:1e:19:1e:9e:46:51:cc:
7c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:55:B3:4A:8F:89:06:C7:E8:1B:E1:4A:32:5C:F3:42:8C:FA:82:7A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xlWzSo-JBsfoG-FKMlzzQoz6gno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.160.0/24
2.27.168.0/24
2.27.248.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:24:37:67:b8:19:b6:76:c2:54:56:00:d7:bb:ff:af:4e:ee:
f6:04:4f:5b:1b:10:ba:70:d4:35:ad:25:d4:85:71:f8:1f:a9:
35:93:59:d4:dc:43:00:e6:8f:e4:3c:2b:20:d4:6f:a9:a1:c7:
46:f4:3a:76:e4:eb:ba:12:6e:a9:af:19:10:b9:17:b0:da:43:
4a:fe:2d:8c:6b:9c:fc:c6:30:27:9d:29:da:0c:36:83:25:b2:
bd:97:be:94:2c:20:3f:45:de:9e:c4:d5:ee:68:f1:ac:cc:3b:
99:23:c2:05:8c:1c:5a:48:9f:ad:9a:f0:53:2d:ab:f3:cc:3d:
9a:70:e7:c0:00:db:7a:58:54:41:5e:34:68:53:a9:33:38:2d:
07:af:dd:d4:da:e4:61:a9:43:c5:20:f5:03:43:f5:c3:1f:be:
4e:58:1e:8a:52:79:e4:09:8c:ad:21:75:27:f7:44:dc:3d:32:
08:1f:48:63:e3:ee:db:60:95:0b:2d:f6:dc:7a:1b:7f:51:d6:
55:db:c8:46:9b:c5:96:d5:26:87:9c:63:52:64:20:20:21:4a:
79:ad:03:7b:31:39:ab:e2:98:25:6d:7d:77:b7:63:d3:1a:57:
1c:7d:61:e4:9f:cf:48:86:a1:e8:f8:a6:19:89:e2:3f:13:47:
fb:e2:2f:a9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ40QQkXbySxPRnOKPQE+ulOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNTE3MDQ0NTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjU1YjM0YThmODkwNmM3ZTgxYmUxNGEzMjVjZjM0MjhjZmE4MjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3Jk7zguc4n8RmF3TIsmV2fzM5oq
izMf2LBXQuqHKg6FaRgHLRLwVafBQSrvRKWGvQVWF0I2SSq0fNxv7dx+y0dDdg0a
2icczP7tgM7lbl5bjVjUSuaq/VYYprEK6yddkhVSBEcTA5x65rfB/jKr9sJMI2YB
feo0Eb36aXZfwV54e4T48pIOsbRKvrV/tW65cR8br1THDe6C1opV95r2KMtscuhT
KzOB8FnnqjrLXmoNanuU6YTDggaWNjduzci/XP887GxM4W3JON+nThM1gwmuoMPY
iAyaTCkf4mdpUAt2Yu4bJyslXeJ/5CBmXNTR4APATI1i1B4ZHp5GUcx8EQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMZVs0qPiQbH6BvhSjJc80KM+oJ6MB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEveGxXelNvLUpCc2ZvRy1GS01senpRb3o2Z25vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAAhugAwQA
AhuoAwQAAhv4MA0GCSqGSIb3DQEBCwUAA4IBAQCcJDdnuBm2dsJUVgDXu/+vTu72
BE9bGxC6cNQ1rSXUhXH4H6k1k1nU3EMA5o/kPCsg1G+pocdG9Dp25Ou6Em6prxkQ
uRew2kNK/i2Ma5z8xjAnnSnaDDaDJbK9l76ULCA/Rd6exNXuaPGszDuZI8IFjBxa
SJ+tmvBTLavzzD2acOfAANt6WFRBXjRoU6kzOC0Hr93U2uRhqUPFIPUDQ/XDH75O
WB6KUnnkCYytIXUn90TcPTIIH0hj4+7bYJULLfbceht/UdZV28hGm8WW1SaHnGNS
ZCAgIUp5rQN7MTmr4pglbX13t2PTGlccfWHkn89IhqHo+KYZieI/E0f74i+p
-----END CERTIFICATE-----
Generated at Thu Jun 11 17:34:29 2026 by rpki-client