Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4sI3ZfKrLl-Fh5iB6nrp2fjy2ck.roa
File: 4sI3ZfKrLl-Fh5iB6nrp2fjy2ck.roa (raw, json)
Hash identifier: uumMiA3heYLHaIowqpGkpx32aWAtVeQhXBFYxpqk360=
Subject key identifier: E2:C2:37:65:F2:AB:2E:5F:85:87:98:81:EA:7A:E9:D9:F8:F2:D9:C9
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0D4B1299CA8E85C2725FCE508D254A8ED
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4sI3ZfKrLl-Fh5iB6nrp2fjy2ck.roa
Signing time: Thu 24 Sep 2026 18:32:55 +0000
ROA not before: Thu 24 Sep 2026 18:32:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207057
IP address blocks: 2.26.171.0/24 maxlen: 24
201.10.84.0/24 maxlen: 24
201.10.85.0/24 maxlen: 24
201.10.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:b1:29:9c:a8:e8:5c:27:25:fc:e5:08:d2:54:a8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 24 18:32:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2c23765f2ab2e5f85879881ea7ae9d9f8f2d9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:fc:82:2e:e2:98:8b:d1:20:7e:1e:ef:ca:
e2:08:30:8a:07:84:d3:72:19:99:ae:41:c4:89:cf:
39:b7:1a:7a:d3:78:6a:d7:ac:f1:88:47:cf:7a:6c:
b1:67:1e:fe:62:af:b3:c6:8a:d1:5d:42:fe:08:0d:
60:e5:48:c0:23:47:14:05:ab:01:e0:b8:55:7c:11:
b2:f9:29:13:92:b6:35:ea:6e:2b:cb:d6:00:67:22:
27:42:b5:ee:5c:05:ce:f3:8c:97:95:12:82:42:ed:
9c:c8:67:ec:b7:38:7e:e1:7c:9a:ba:c0:e6:22:c0:
96:8a:31:dc:b9:9e:46:ce:d4:30:80:b2:bc:0d:96:
40:ce:e6:4f:d4:4f:20:bf:88:0f:cb:fa:01:14:8d:
1f:4f:fa:f4:f3:89:4f:47:31:d3:be:27:92:41:57:
65:97:e0:4e:ba:90:db:1e:9e:03:ec:97:54:f3:96:
52:ec:55:8d:6c:e9:cd:4f:3a:a1:69:de:4a:5b:31:
9b:08:6e:f9:ac:2d:21:3c:c0:4e:3f:e8:58:86:f3:
e5:ad:ea:69:b8:86:fd:0c:b0:0e:a3:5e:60:22:1d:
21:98:93:6d:56:4f:27:11:fa:6d:bd:bc:06:7a:1c:
72:e8:d8:d0:67:67:97:13:78:36:8a:da:de:4b:21:
fc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C2:37:65:F2:AB:2E:5F:85:87:98:81:EA:7A:E9:D9:F8:F2:D9:C9
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4sI3ZfKrLl-Fh5iB6nrp2fjy2ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.171.0/24
201.10.84.0/23
201.10.93.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:e0:45:cd:b1:12:dd:08:d8:7d:89:ea:35:b0:94:41:98:8d:
f5:ab:67:22:5f:0d:03:47:6f:cd:85:a8:76:11:87:1b:f9:72:
5a:7f:92:f8:30:b8:08:3e:87:50:ac:0e:d0:e1:7b:c8:e0:94:
fb:65:73:76:70:dd:de:9b:03:bc:50:a8:cb:90:95:f1:7d:75:
14:04:5a:e8:c0:e1:b2:76:8d:d1:69:eb:ac:89:24:94:d6:ea:
16:5d:9d:b6:a9:0e:4e:71:db:ac:98:03:82:26:bd:e7:90:44:
dc:cb:6d:4f:da:5b:0c:27:4f:1b:2b:f6:d2:35:cd:57:8b:6b:
81:21:04:c4:77:23:7f:e5:7a:64:35:79:8a:fb:4f:28:f4:62:
db:67:71:e0:20:ec:ce:70:d1:cc:f7:18:42:e8:3a:40:fb:7a:
b3:5d:b7:e8:c5:f0:e9:18:b3:67:fa:70:9e:51:32:4f:ad:4a:
63:b3:28:7d:3e:b3:2e:8f:c7:0d:de:a2:4c:5b:e6:ea:9e:72:
f3:b1:b9:63:f3:ce:c2:05:4b:a7:78:b9:b5:9c:7e:39:28:61:
5b:95:df:28:61:25:2d:4a:ef:15:59:90:e9:40:4e:4e:7c:a5:
23:e2:9f:c6:f1:14:38:d3:bb:30:0e:13:08:be:6f:c3:90:d9:
88:9b:69:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:58:56 2026 by rpki-client