Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/eN6iah-VSvv8c1E6c8aKZB4J2gc.roa
File: eN6iah-VSvv8c1E6c8aKZB4J2gc.roa (raw, json)
Hash identifier: 3OJh33locFj1pYyaBcSJhXqk7r1JlHY5fBnSppJUxSU=
Subject key identifier: 78:DE:A2:6A:1F:95:4A:FB:FC:73:51:3A:73:C6:8A:64:1E:09:DA:07
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D5480F3F347288B4D1E5E4181AD121C7B
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/eN6iah-VSvv8c1E6c8aKZB4J2gc.roa
Signing time: Fri 03 Apr 2026 18:00:30 +0000
ROA not before: Fri 03 Apr 2026 18:00:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 2.26.200.0/21 maxlen: 24
2.26.208.0/21 maxlen: 24
2.27.218.0/23 maxlen: 24
2.27.220.0/23 maxlen: 24
2.27.222.0/23 maxlen: 24
2.27.239.0/24 maxlen: 24
2.27.240.0/24 maxlen: 24
2.27.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Apr 2026 23:54:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:54:80:f3:f3:47:28:8b:4d:1e:5e:41:81:ad:12:1c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 3 18:00:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78dea26a1f954afbfc73513a73c68a641e09da07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a1:19:3e:63:6e:31:c1:2f:19:04:8c:14:e2:
80:1e:08:39:47:42:6f:5d:56:d7:4d:b9:37:24:9f:
0b:89:7f:09:fb:3d:31:7d:5f:2e:d3:fa:3b:c8:21:
3e:02:ee:6b:53:60:f3:f3:c4:72:a0:00:42:60:f6:
f8:36:53:64:6c:97:a1:f7:2b:a7:2b:51:9a:31:fe:
73:34:48:bd:92:f1:b2:4b:85:b4:6b:62:bf:7a:f4:
ac:4b:fe:00:42:7b:ed:de:36:9b:f4:ac:6e:2b:84:
18:48:b1:0a:22:e6:64:ba:96:18:66:c2:e1:7b:7d:
3b:4b:89:bd:91:25:11:3d:cc:fe:da:cc:da:4f:c6:
78:25:93:07:1c:dd:3a:62:73:5e:b5:a0:c0:79:ae:
dc:a3:db:60:f7:4e:1e:f9:0e:5e:b9:7c:b7:fa:cd:
41:d8:40:0a:2b:b5:c1:40:87:41:a0:c8:2a:17:a0:
5f:bf:8e:8c:98:69:9a:ee:72:19:9e:df:ab:ca:81:
db:a4:d3:f9:6c:8b:77:69:5c:94:bb:b0:27:32:13:
57:55:c0:d8:16:94:2a:dc:e7:b9:78:e2:2b:2a:80:
6d:78:82:df:57:cf:6a:39:7d:82:6b:7f:d2:6e:5f:
66:5c:64:8e:24:e1:08:db:d9:ec:73:71:7f:53:f2:
af:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DE:A2:6A:1F:95:4A:FB:FC:73:51:3A:73:C6:8A:64:1E:09:DA:07
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/eN6iah-VSvv8c1E6c8aKZB4J2gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.200.0-2.26.215.255
2.27.218.0-2.27.223.255
2.27.239.0-2.27.240.255
2.27.254.0/24
Signature Algorithm: sha256WithRSAEncryption
50:95:85:68:6a:60:3c:f6:5f:74:d8:cd:79:3e:43:45:0c:f0:
75:9f:74:10:56:93:c3:be:5d:8b:d7:12:c4:e7:a7:f6:66:f3:
02:c3:e1:f4:1b:2e:a2:68:17:32:4e:b7:56:61:36:c4:2f:7b:
f2:e7:8b:fb:d6:04:d5:fe:d4:a7:c3:ad:c8:7a:ed:95:b6:14:
69:57:84:28:1e:34:b6:f4:ac:88:6f:c6:10:fe:81:bd:e8:85:
e6:b0:43:a3:3b:af:d3:c2:38:6b:dc:15:d6:19:66:02:cd:91:
a9:ca:ef:f6:8c:4a:98:b2:5e:65:f4:4d:67:e6:38:c2:8f:90:
d8:77:fe:ca:68:95:60:b5:f9:19:66:fe:5f:64:f5:b1:b1:af:
e2:d9:df:17:d7:43:a5:c9:cf:8c:6a:e6:1a:16:15:55:c3:e7:
0f:1f:3b:99:a1:5a:e7:55:13:96:39:8e:a2:8d:19:a4:96:12:
6c:d5:98:39:59:68:e0:a7:18:f2:fd:03:42:46:12:7c:a9:4f:
50:95:ce:33:36:75:9e:7c:b4:46:54:53:53:5a:7e:2f:cf:57:
cf:87:dc:44:57:8a:89:bb:94:9e:f7:6f:4b:d8:38:bc:39:8c:
e4:a8:74:7c:f9:22:32:82:77:61:ac:77:70:6c:5c:43:8c:30:
58:5a:2f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:30:56 2026 by rpki-client