Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4gs4B9EYUlngnir7NGyEz5vtN0w.roa
File: 4gs4B9EYUlngnir7NGyEz5vtN0w.roa (raw, json)
Hash identifier: ULOBJGQU7mklKEwzBU56FI3LyLdDpQm1sfo7yt79Ds0=
Subject key identifier: E2:0B:38:07:D1:18:52:59:E0:9E:2A:FB:34:6C:84:CF:9B:ED:37:4C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DACCA88D0817C2C3E44E341D2152B8465
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4gs4B9EYUlngnir7NGyEz5vtN0w.roa
Signing time: Mon 20 Apr 2026 21:27:27 +0000
ROA not before: Mon 20 Apr 2026 21:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210554
IP address blocks: 2.27.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ac:ca:88:d0:81:7c:2c:3e:44:e3:41:d2:15:2b:84:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 20 21:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e20b3807d1185259e09e2afb346c84cf9bed374c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:bd:d5:3c:be:63:ce:4a:9e:20:39:eb:47:
48:a8:b2:ff:7a:e6:ae:c7:90:56:3f:df:4f:2c:d7:
c9:f2:96:1d:00:de:38:a4:ca:28:9a:f7:06:f9:77:
ee:97:54:d7:c1:1b:cd:7f:cc:f2:64:e1:fa:bc:d5:
e9:11:94:a1:19:4d:07:97:88:c3:98:90:64:b7:15:
15:0d:78:50:b5:1b:99:13:61:dc:24:4a:bc:57:77:
6b:47:80:49:05:30:9f:d6:76:5a:c0:8e:0d:9d:71:
07:98:2e:ed:20:60:14:7e:1c:3a:61:14:65:b2:72:
4a:0d:c4:85:6b:32:f1:5b:a2:e3:47:74:68:30:ee:
38:97:5b:5a:db:a5:8b:9d:1d:11:33:2a:40:68:5f:
f1:a9:49:0b:67:10:e8:e0:59:8d:fe:01:2a:7e:cd:
d4:16:6f:47:20:f0:00:ee:cb:2c:fe:ca:36:94:50:
94:ae:d0:1d:08:2d:ad:32:cd:5a:6d:23:34:55:58:
84:58:0c:eb:24:4f:21:4c:70:2d:3a:31:a3:11:5c:
b5:05:4d:d7:ba:4f:42:f8:69:23:87:32:05:27:93:
64:cf:5b:f5:88:36:54:8f:76:bd:ab:81:de:f0:f4:
c5:d2:9d:bf:12:1c:31:34:08:3a:fc:54:b2:75:5c:
39:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0B:38:07:D1:18:52:59:E0:9E:2A:FB:34:6C:84:CF:9B:ED:37:4C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4gs4B9EYUlngnir7NGyEz5vtN0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.112.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:8f:7e:f9:3c:ab:b6:13:04:92:08:35:84:87:e3:b7:9b:5b:
03:9f:09:32:83:40:9b:57:32:05:ab:97:70:ab:84:75:47:80:
08:f9:21:b6:5b:67:b4:ac:1c:0b:66:f3:8d:e3:32:21:03:99:
fb:c7:7a:cc:ff:07:b9:f9:28:fb:db:f8:db:f3:90:1e:b8:fe:
a5:44:b4:d2:86:f4:a9:3d:bf:58:42:0f:89:2f:58:e6:64:b4:
0e:7b:7b:b9:1b:e0:c9:45:69:72:7d:34:c6:4c:51:60:70:52:
38:9b:a1:07:aa:29:6c:16:a0:f9:76:10:ea:9a:ef:cf:1b:14:
59:31:a4:53:82:b6:38:60:c7:ee:e8:6d:63:38:05:61:9b:1a:
27:48:d3:b8:f5:ab:82:35:fe:d1:49:ed:77:63:2c:7b:dc:96:
e2:de:b9:5a:0c:45:37:b7:9b:78:a3:49:6c:96:d0:d9:7b:30:
6c:0d:09:aa:65:10:7b:19:7b:84:7b:87:9d:cc:53:18:ff:74:
1f:96:de:41:0c:15:e8:f2:6c:d4:2c:eb:04:74:cf:8e:9f:0e:
c8:45:ee:94:16:a0:c4:e2:c4:ff:5d:3d:d6:6c:e4:7e:47:ec:
d7:09:d6:d1:f4:81:ab:3a:22:1f:f4:a0:e9:4b:1f:0c:e4:c4:
52:00:a9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:49:05 2026 by rpki-client