Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4cWGmFrWBWk_rcnaJDuKodTUDJg.roa
File: 4cWGmFrWBWk_rcnaJDuKodTUDJg.roa (raw, json)
Hash identifier: I7Jh5soM9R+KoNP4XWfiur40yOhZ/syhAopARYIzqzE=
Subject key identifier: E1:C5:86:98:5A:D6:05:69:3F:AD:C9:DA:24:3B:8A:A1:D4:D4:0C:98
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FB98DD4DAF5EB3FE2A7B4D8039F32BB99
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4cWGmFrWBWk_rcnaJDuKodTUDJg.roa
Signing time: Fri 31 Jul 2026 19:01:47 +0000
ROA not before: Fri 31 Jul 2026 19:01:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136725
IP address blocks: 2.27.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b9:8d:d4:da:f5:eb:3f:e2:a7:b4:d8:03:9f:32:bb:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 31 19:01:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1c586985ad605693fadc9da243b8aa1d4d40c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3a:1d:c7:19:bb:bb:25:b4:a0:57:21:c5:04:
d4:1d:15:70:11:d6:bb:4f:9e:a0:e8:f9:c6:a5:37:
2b:ac:f0:7f:5a:a5:9f:5e:a1:ed:30:76:7c:f0:f7:
f1:bc:82:de:e5:e6:7a:6c:d4:a8:3e:f6:47:1a:b9:
dc:aa:82:1c:5f:2a:e8:0c:22:e8:af:b2:6e:cb:74:
5f:f2:c2:01:ee:7c:33:cc:d3:15:bc:bb:16:f6:8b:
2f:a1:60:a5:ce:e5:b7:c7:7d:5f:2e:1f:37:97:4c:
ce:c3:12:67:89:b1:17:ea:ed:77:7c:49:40:9e:51:
49:92:0a:20:08:c6:5f:bf:bd:56:b6:89:ad:14:20:
02:03:6f:ba:95:17:d8:fe:4c:25:f1:e0:16:89:83:
ae:74:57:5f:c5:06:18:53:b5:cb:61:ed:01:eb:ae:
17:b2:52:3a:d9:b1:43:24:7a:f2:23:4d:6f:4b:99:
d2:09:0f:7c:ec:2b:66:04:bd:a3:76:b0:81:5d:45:
88:db:7d:58:fe:b0:96:6c:d8:d2:d8:2a:d1:57:cc:
c1:81:24:d4:ca:40:55:2c:db:a0:95:8b:63:b6:ac:
1f:45:2f:41:f3:65:d5:f7:86:d8:0a:67:b4:0a:10:
cd:c3:20:5b:18:fb:a1:f5:6a:39:fd:d8:a1:19:b1:
97:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C5:86:98:5A:D6:05:69:3F:AD:C9:DA:24:3B:8A:A1:D4:D4:0C:98
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4cWGmFrWBWk_rcnaJDuKodTUDJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.155.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:93:6b:f4:93:c0:4d:ac:90:88:6e:01:ca:f7:86:c8:7b:be:
86:c9:64:42:0b:d4:a6:dc:ee:7a:65:da:13:21:36:8f:25:29:
84:01:44:61:a0:77:05:16:e8:73:fe:74:26:8e:8b:4d:41:31:
8c:02:bd:16:fb:8d:c5:df:c7:c0:26:41:4b:54:c8:c7:c3:c4:
bd:3f:6f:29:c0:53:00:e9:49:f3:c4:c1:d5:af:b5:27:d7:5e:
2e:f8:75:7e:c8:b5:8e:ac:4c:e4:7e:27:cd:4f:ab:29:97:5b:
9c:26:45:a9:c7:e8:e5:f1:54:36:45:8a:b4:ed:65:7e:0c:ad:
4c:30:98:d7:e3:58:22:84:53:70:88:b0:3a:1a:86:c9:86:f4:
1d:73:f2:52:7f:93:7e:50:ca:4d:53:2d:2d:47:b6:8b:2b:92:
df:45:d3:13:47:8d:80:c2:d1:a8:2a:82:1c:47:4c:f2:87:15:
69:3a:20:d7:a4:d1:88:0f:9e:11:78:a8:58:06:c6:8d:57:ca:
f2:38:5d:69:2b:c3:c8:3a:7b:fc:f4:08:fe:c6:58:3d:8e:eb:
ec:4e:06:0e:66:cd:99:ee:ec:0d:53:4d:b0:47:e5:33:76:9e:
31:e1:09:d7:92:fa:b5:9a:70:df:eb:6b:4a:4a:e3:2d:72:d5:
f7:98:fb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:51:35 2026 by rpki-client