Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4Pnzzux1bBFhwYCr8PTIZFjEH9w.roa
File: 4Pnzzux1bBFhwYCr8PTIZFjEH9w.roa (raw, json)
Hash identifier: YmGiyNzqePNomMMT6cIII7dRjJ94X9dcEsaDV2XPWnw=
Subject key identifier: E0:F9:F3:CE:EC:75:6C:11:61:C1:80:AB:F0:F4:C8:64:58:C4:1F:DC
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FB98DD5EB934E0D86912C69B7937DEB65
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4Pnzzux1bBFhwYCr8PTIZFjEH9w.roa
Signing time: Fri 31 Jul 2026 19:01:48 +0000
ROA not before: Fri 31 Jul 2026 19:01:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402315
IP address blocks: 2.27.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b9:8d:d5:eb:93:4e:0d:86:91:2c:69:b7:93:7d:eb:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 31 19:01:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0f9f3ceec756c1161c180abf0f4c86458c41fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4f:22:4c:76:e9:50:be:2d:4d:69:1d:0b:ab:
af:15:df:7d:9b:8f:6d:b5:e7:4f:c0:bf:1a:5d:c7:
b6:de:f1:d6:d4:41:68:a8:09:6e:c7:ca:55:dd:e4:
d4:b0:e0:22:2a:f2:9d:51:22:af:50:ce:8b:25:29:
2b:69:b5:ca:03:b0:b8:bd:a2:0a:3f:b3:bd:1f:b6:
08:c4:6b:9d:92:62:59:97:3d:87:7a:b4:e0:f9:1d:
e4:ef:77:73:ca:7a:27:e6:54:6b:e0:72:80:0d:5c:
a0:6e:d8:1f:64:24:98:f5:a6:ed:0c:9f:ee:e9:87:
c7:99:f3:e1:14:a5:1d:db:5a:52:f8:21:1c:43:9e:
7e:3f:ea:d8:d5:e0:a1:f1:db:ca:76:cb:57:79:bc:
c6:c2:92:63:8d:25:d2:9a:79:90:5e:94:b3:d8:51:
4e:a8:0f:bc:4b:cd:f0:49:6f:d3:f4:76:dc:48:d1:
60:29:71:98:f4:68:ce:f9:65:93:b0:4c:8e:d4:bf:
c1:50:a4:e7:cf:b8:c2:9c:dc:ab:9e:17:0b:34:fd:
06:a6:b5:3e:91:7a:75:52:f2:39:96:d4:e5:38:f9:
1b:89:84:6e:88:ba:6a:69:92:f5:c1:66:f7:22:c4:
19:01:05:06:09:8b:c7:d2:55:bb:45:cf:2f:62:e4:
54:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F9:F3:CE:EC:75:6C:11:61:C1:80:AB:F0:F4:C8:64:58:C4:1F:DC
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4Pnzzux1bBFhwYCr8PTIZFjEH9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.119.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:0c:c6:51:ef:8e:3d:b9:ee:b5:05:53:7c:0c:10:9a:c7:dd:
6d:1f:a4:8a:9d:c9:e0:58:0a:d8:4d:46:ad:f9:1d:8c:b9:47:
94:f2:a5:b3:88:c2:f9:8c:b0:fd:54:9b:48:d7:a4:61:3b:50:
44:8d:56:3b:e4:72:f7:37:f0:72:12:11:d2:06:f5:e5:b8:57:
43:5d:28:c4:8f:8c:d1:33:c6:86:fb:58:48:32:1d:f2:b2:c0:
e8:84:32:ba:33:89:85:13:80:eb:10:37:df:11:1b:ca:57:b5:
7d:83:d7:71:77:d9:b5:f7:b5:4b:da:98:ed:d9:65:90:20:f2:
9f:d3:e9:45:1b:6a:b8:29:4a:eb:96:1a:43:42:d3:1b:83:a6:
fc:ae:fe:f4:e4:cb:57:1c:c1:52:6b:7a:bf:fc:a9:cf:78:e9:
fe:8a:72:2b:02:35:a9:0d:aa:8c:57:d4:1e:26:14:af:3a:cd:
3a:6f:01:b1:73:46:07:be:d0:01:a9:2d:a2:9c:4f:85:72:45:
c6:9f:95:32:54:e9:67:19:90:6b:96:46:68:9b:2c:df:20:d6:
8b:37:5c:d8:bd:9e:7e:83:58:22:26:05:94:85:fb:8c:83:66:
e6:bc:d7:70:4a:87:8b:59:6e:20:ef:41:a7:27:f6:0b:98:b7:
f3:65:06:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:52:38 2026 by rpki-client