Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zCpr1l4vwilRzc4wHVdfc1sj8Kw.roa
File: zCpr1l4vwilRzc4wHVdfc1sj8Kw.roa (raw, json)
Hash identifier: SbP+WA3W3JvZGbjD0kxVvRxOcU2sN2VqogiZLo1yTG8=
Subject key identifier: CC:2A:6B:D6:5E:2F:C2:29:51:CD:CE:30:1D:57:5F:73:5B:23:F0:AC
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A19DAA9498F3BA465DA03F4BFF63D8FA02
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zCpr1l4vwilRzc4wHVdfc1sj8Kw.roa
Signing time: Mon 02 Nov 2026 19:09:24 +0000
ROA not before: Mon 02 Nov 2026 19:09:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202831
IP address blocks: 2.27.98.0/24 maxlen: 24
2.27.106.0/24 maxlen: 24
13.143.134.0/24 maxlen: 24
31.77.232.0/24 maxlen: 24
31.77.251.0/24 maxlen: 24
144.31.34.0/24 maxlen: 24
144.31.222.0/24 maxlen: 24
150.241.69.0/24 maxlen: 24
150.241.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:aa:94:98:f3:ba:46:5d:a0:3f:4b:ff:63:d8:fa:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 2 19:09:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc2a6bd65e2fc22951cdce301d575f735b23f0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:04:96:61:4c:c2:80:55:6a:93:9f:4c:df:c5:
3b:d5:c4:79:2c:15:3a:be:d5:cb:7c:e2:94:22:fc:
e5:c2:08:a1:d9:e8:52:bc:d7:5e:2f:3d:aa:00:29:
c8:6a:ea:0c:74:d5:c9:4a:a5:ff:6f:80:a8:2e:09:
d3:d8:9e:db:e5:0c:ab:b5:3e:2b:a0:13:79:ff:13:
52:b1:37:f4:fc:16:6f:1b:d2:6a:4d:55:52:71:60:
eb:f9:1d:5a:0a:b8:14:2f:80:fe:8d:74:7d:3a:e8:
86:03:66:23:84:10:80:2a:b7:e5:7f:ec:de:e4:90:
50:13:3e:89:ac:d8:b8:27:63:e4:b5:88:37:2a:98:
21:ea:cf:d7:99:71:44:2f:32:da:dd:eb:60:dd:23:
88:c5:1e:dd:01:cf:e3:b7:95:70:5c:28:59:f0:a3:
6a:6d:dc:4f:fc:3b:ae:3b:9a:be:82:ca:4e:1f:85:
e8:b5:c0:21:0e:76:b4:6d:8b:24:10:17:d8:15:58:
3f:d2:ec:6a:6c:4e:ad:c5:34:97:87:35:19:85:66:
6f:3a:61:1a:ed:24:e0:25:0d:bc:17:16:e8:e2:f4:
83:49:29:5a:73:3a:de:09:32:3d:21:49:0b:95:82:
33:a2:1e:86:7f:25:1e:9f:ca:23:4f:f0:46:2c:1d:
67:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2A:6B:D6:5E:2F:C2:29:51:CD:CE:30:1D:57:5F:73:5B:23:F0:AC
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zCpr1l4vwilRzc4wHVdfc1sj8Kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.98.0/24
2.27.106.0/24
13.143.134.0/24
31.77.232.0/24
31.77.251.0/24
144.31.34.0/24
144.31.222.0/24
150.241.69.0/24
150.241.85.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:28:72:bd:e0:b0:a9:54:a5:8b:f9:f0:1a:56:a4:d0:ca:94:
b6:44:fa:2a:c2:02:6a:0b:c9:08:8f:95:31:bd:0d:20:4d:78:
82:1e:b1:c0:13:5a:79:a1:64:8a:e0:c4:a4:43:a8:13:85:46:
69:29:96:30:e0:d2:46:92:27:76:90:e8:12:a4:e6:fa:ff:14:
75:9f:fa:19:0e:5d:28:7d:98:70:32:2c:19:30:55:43:d6:8f:
ca:25:85:0b:cf:c2:b6:6c:8b:4c:3c:9c:26:03:ff:67:7f:37:
3e:f1:48:d0:75:2d:b8:02:56:cf:f8:56:05:a9:09:2f:47:0d:
83:9f:56:85:ca:b2:89:bf:d6:6b:06:5f:b2:e7:39:d8:ac:5c:
ea:7c:03:4a:95:49:a0:37:1d:76:6c:8d:b8:f9:73:eb:ce:12:
78:2c:8a:d3:3a:ba:a4:0a:83:72:5e:10:80:7b:d6:23:98:4f:
7a:1d:2b:62:5d:15:96:c4:05:5f:ea:fb:3f:2b:17:f3:10:ab:
66:b9:ef:a2:7e:2a:fc:8a:59:db:c7:e6:58:00:76:bd:08:2a:
15:2a:c2:78:9a:ab:f3:33:82:da:3f:95:e1:84:d3:72:4f:fa:
f9:b0:d3:15:7e:c2:37:95:b0:1f:41:3b:a3:89:e0:1d:04:ab:
85:d9:cd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:29:21 2026 by rpki-client