Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4eZOC8oDsak266MaTz-Y54nKosM.roa
File: 4eZOC8oDsak266MaTz-Y54nKosM.roa (raw, json)
Hash identifier: RbST1w4MbjNGOvIu3EbRd2aMaEYzsj1aTRSCc++iLNA=
Subject key identifier: E1:E6:4E:0B:CA:03:B1:A9:36:EB:A3:1A:4F:3F:98:E7:89:CA:A2:C3
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F29EA8A5F41CB0E0E79A6FEB20006FAC1
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4eZOC8oDsak266MaTz-Y54nKosM.roa
Signing time: Fri 03 Jul 2026 21:37:44 +0000
ROA not before: Fri 03 Jul 2026 21:37:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211138
IP address blocks: 2.27.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:ea:8a:5f:41:cb:0e:0e:79:a6:fe:b2:00:06:fa:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 3 21:37:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1e64e0bca03b1a936eba31a4f3f98e789caa2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:55:43:63:cf:32:e9:a0:da:84:2b:f8:e1:b7:
c4:61:ec:ea:19:a8:10:c6:e4:6c:9c:1c:c2:0a:c6:
f2:ab:dd:0e:af:5d:c8:70:23:b9:ae:df:c9:9c:65:
b6:a7:29:6a:28:b7:ab:9c:a6:f1:c4:45:58:49:8e:
1d:3e:48:20:3a:83:1b:ee:4f:72:69:68:0a:07:78:
6c:71:b1:b1:ad:da:df:1a:59:1d:d6:cd:0b:f7:5b:
0e:d5:f9:e9:7e:39:2d:af:10:70:cf:5b:85:7f:ea:
d8:2b:c9:72:c0:8c:bb:04:7e:5b:44:35:91:46:76:
e8:53:ba:b8:a5:e9:49:b4:a9:bb:de:4e:31:a9:ea:
b2:e8:d3:a1:f8:b9:06:e9:2c:17:d6:8e:7a:8c:6e:
f3:18:46:8d:68:44:b5:7f:d0:e3:31:38:db:25:29:
97:01:c5:9c:d8:8f:74:75:6d:77:2c:22:9c:13:39:
fa:46:12:66:22:b4:99:e1:2f:00:bd:73:62:6c:e8:
b6:b3:df:45:d0:41:e0:9b:d6:84:12:95:95:7f:b5:
3d:57:d9:c6:ac:97:68:a5:f5:ca:a3:92:53:9f:05:
a5:c0:bf:d5:72:47:2e:07:3c:05:e9:8f:42:70:6f:
d0:a6:5d:c5:bb:a4:f6:2d:c5:05:d6:2d:60:17:4a:
b1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E6:4E:0B:CA:03:B1:A9:36:EB:A3:1A:4F:3F:98:E7:89:CA:A2:C3
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4eZOC8oDsak266MaTz-Y54nKosM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.239.0/24
Signature Algorithm: sha256WithRSAEncryption
35:5b:74:98:f4:59:08:f5:3a:80:a4:f9:60:3a:18:81:a7:51:
b2:e4:ca:1a:bb:f0:6d:45:08:e3:fe:1d:29:d4:5a:af:0f:55:
30:c6:53:cb:cc:ad:df:47:8c:00:3e:8e:7a:14:7a:4f:5b:5e:
aa:80:55:cc:85:93:73:ce:f9:db:31:b1:b6:c2:e1:fe:da:27:
b9:bd:8e:ec:fe:58:88:9c:83:4d:6c:68:b3:c4:6e:41:61:0d:
e7:7a:03:cd:d9:fa:dd:1f:55:ef:ea:93:a0:0b:60:89:f8:26:
0f:e3:18:f3:a4:d8:26:34:dd:1a:26:d1:19:49:1a:d1:ed:51:
04:30:3e:d6:b6:60:5b:9d:1f:e4:7b:e9:87:95:bf:8b:27:a4:
bf:83:4f:7e:85:f2:e2:23:2d:2b:3a:36:95:3f:9d:11:9d:a5:
14:25:2f:16:87:f5:26:13:fa:40:1a:28:27:80:54:26:10:be:
73:fc:ef:2d:7f:21:03:01:1f:a6:5c:c9:79:9b:8f:14:e3:ca:
d7:a2:67:2f:92:bb:55:eb:d3:77:fc:2a:af:f9:68:1a:2e:73:
99:f4:dc:a5:a5:ef:77:46:01:02:c0:49:4c:99:0d:13:21:a4:
a8:b1:65:98:cf:2e:89:ff:b5:14:87:8e:b4:97:67:23:6d:f1:
a6:e2:e2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:39:32 2026 by rpki-client