Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zP4GY_OMGjnUpjP5bvI_VGzGcP8.roa
File: zP4GY_OMGjnUpjP5bvI_VGzGcP8.roa (raw, json)
Hash identifier: tHcmcBEMSeBPhfEmEgcitaxq413vkkZII+rpuW+yS+8=
Subject key identifier: CC:FE:06:63:F3:8C:1A:39:D4:A6:33:F9:6E:F2:3F:54:6C:C6:70:FF
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F1B2AE96229CD891A6A5C2AF020854CFC
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zP4GY_OMGjnUpjP5bvI_VGzGcP8.roa
Signing time: Wed 01 Jul 2026 00:53:44 +0000
ROA not before: Wed 01 Jul 2026 00:53:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 2.27.218.0/23 maxlen: 24
2.27.220.0/23 maxlen: 24
2.27.222.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1b:2a:e9:62:29:cd:89:1a:6a:5c:2a:f0:20:85:4c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 1 00:53:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ccfe0663f38c1a39d4a633f96ef23f546cc670ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:79:44:af:03:26:2a:e5:e2:54:94:bd:9d:
88:3d:cb:b2:cf:ad:06:7b:89:cd:87:77:e5:c2:ce:
7f:ca:eb:8a:91:6b:d4:47:36:43:ba:c6:f5:d0:0d:
34:3a:d0:ff:00:f6:2d:7b:1e:c2:4c:db:1d:aa:71:
e6:19:70:ee:ca:1c:fa:fd:25:0e:28:3d:1d:ca:2e:
7c:45:85:b0:47:26:57:e8:1a:74:2d:83:8b:d4:83:
6f:9b:e6:99:5c:bf:06:19:dc:4d:4d:0f:98:25:0f:
ed:15:3a:e8:72:8a:29:b9:c6:a8:03:15:e4:af:30:
e9:e0:0b:a1:bc:5b:d9:f1:aa:2c:6e:43:fa:f6:19:
85:28:34:c0:d3:ac:75:35:4f:e8:97:28:89:dc:25:
b4:5f:71:3a:32:ef:a6:91:a6:42:92:76:0e:1b:ed:
08:57:47:5a:dd:24:86:21:55:f4:2b:51:86:3b:60:
d7:24:50:bd:03:d6:16:91:74:eb:18:18:9e:1d:dc:
4e:61:f6:a4:9e:77:2d:95:79:84:e8:2a:b5:83:03:
30:24:46:33:92:fb:c2:b3:dc:88:32:50:3e:44:a7:
dd:fd:07:4b:11:92:7f:a2:96:24:5a:77:33:36:26:
21:95:ac:4c:9a:b2:ce:13:90:bc:72:00:bd:f1:3a:
59:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FE:06:63:F3:8C:1A:39:D4:A6:33:F9:6E:F2:3F:54:6C:C6:70:FF
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zP4GY_OMGjnUpjP5bvI_VGzGcP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.218.0-2.27.223.255
Signature Algorithm: sha256WithRSAEncryption
6c:79:22:08:ef:14:ac:75:67:ce:96:7b:d2:76:7e:80:e2:05:
0e:15:db:be:d0:33:20:a8:c1:6f:f6:7c:a5:87:20:a0:31:d7:
a4:f4:0a:af:ee:cb:25:ba:6e:dc:02:c0:08:44:88:d4:4e:83:
1a:f7:db:3c:a6:8f:b2:06:63:10:af:b4:ad:12:b3:ed:e3:77:
84:fb:66:1f:39:f2:d2:64:5c:87:de:a6:3a:6c:c6:47:fb:b3:
78:a9:ac:27:c4:76:fc:f7:ea:6e:99:a8:43:cc:3d:03:84:65:
f3:d7:ac:69:c2:8a:9b:66:cb:49:43:d5:47:f3:b8:ed:1b:3b:
ec:33:7d:ca:c4:d7:b3:9c:b7:06:a0:72:c0:43:13:c7:d9:5f:
e7:a8:b6:7a:9f:63:15:ef:6f:40:7f:08:f4:c1:98:07:d1:2d:
4e:3f:81:af:0b:92:3d:1f:91:27:1f:9c:61:00:56:49:15:38:
63:d7:13:2f:f7:26:55:54:f0:56:a4:0a:2b:74:a0:62:66:4e:
7c:94:c3:4a:bc:69:17:e5:be:ec:13:b8:ea:dc:49:4c:de:ae:
da:0d:78:da:54:da:06:09:32:06:7f:bc:0d:fb:ea:39:6c:ee:
f2:fe:4e:bb:c7:00:9b:6d:3f:8d:e9:d7:fd:57:31:95:87:ca:
ae:11:91:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:49 2026 by rpki-client