Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/EZujaN3ijHQnzh8d8E2s7gIJYHE.roa
File: EZujaN3ijHQnzh8d8E2s7gIJYHE.roa (raw, json)
Hash identifier: j5SCxYFwhtQTwH9i51uy1RUwMc8mHKafcUvVccYp+iU=
Subject key identifier: 11:9B:A3:68:DD:E2:8C:74:27:CE:1F:1D:F0:4D:AC:EE:02:09:60:71
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DCFB794B75A193EA78D3BC7FBBC008F5E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/EZujaN3ijHQnzh8d8E2s7gIJYHE.roa
Signing time: Mon 27 Apr 2026 16:13:28 +0000
ROA not before: Mon 27 Apr 2026 16:13:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214693
IP address blocks: 2.27.233.0/24 maxlen: 24
2.27.234.0/24 maxlen: 24
144.31.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:b7:94:b7:5a:19:3e:a7:8d:3b:c7:fb:bc:00:8f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 27 16:13:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=119ba368dde28c7427ce1f1df04dacee02096071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:cf:36:8b:99:75:d7:87:4f:76:b0:00:99:
b3:fd:d7:07:cf:17:16:f6:e8:af:10:61:aa:c4:8e:
5d:ff:5a:a1:81:72:2d:65:6e:2a:fc:75:c0:55:59:
c7:bd:34:bb:3a:77:4d:93:e5:ce:1b:a4:35:bc:06:
f4:1c:bd:39:4f:57:00:0b:e7:f6:55:e7:2b:76:dd:
fa:70:98:9e:0f:52:fb:2e:c3:94:87:3f:68:33:a0:
b3:c6:f4:c7:5a:86:1b:e6:19:7e:39:0d:73:38:c2:
e2:7c:fa:fd:db:e1:36:bf:d8:e8:97:e8:ed:6f:a3:
0e:fc:9a:d3:78:38:12:c9:5f:7f:d3:f9:b8:e2:9e:
4d:02:72:84:ec:b7:ff:62:1f:3e:ba:82:3f:98:09:
d8:63:ce:c2:e0:93:aa:ec:75:67:27:17:90:94:20:
d7:fe:2d:7b:31:80:37:76:47:eb:86:18:a1:7c:87:
4d:5b:da:26:f7:a4:c4:3f:32:a3:58:e5:f5:82:47:
b8:5c:83:d2:33:0d:37:b1:30:9d:b4:d9:6f:13:78:
40:e1:ef:2d:e6:9c:2e:7e:51:90:2c:7a:45:a9:b8:
3a:8e:d2:b8:97:39:b7:2d:cb:21:06:d1:e4:74:e3:
9a:8a:a8:08:f4:56:fc:99:97:43:52:bb:c4:18:99:
36:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9B:A3:68:DD:E2:8C:74:27:CE:1F:1D:F0:4D:AC:EE:02:09:60:71
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/EZujaN3ijHQnzh8d8E2s7gIJYHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.233.0-2.27.234.255
144.31.34.0/24
Signature Algorithm: sha256WithRSAEncryption
18:03:f8:c9:b9:d5:e1:88:32:aa:39:26:ce:bc:17:15:01:24:
96:b3:be:64:92:65:5e:0a:81:9f:05:41:16:9b:61:52:4f:19:
bd:51:fd:93:6a:44:6f:5b:df:8c:d2:29:da:bc:93:1a:c6:93:
94:45:67:4e:11:89:cb:19:39:41:85:f2:0a:86:1c:ae:a5:80:
c3:2a:74:9d:d1:54:21:85:6f:90:da:25:dc:ac:6f:95:b6:85:
3a:6b:8b:3a:bd:d6:69:95:4c:19:6f:d9:28:86:5b:b5:71:c3:
9f:35:32:c4:6f:ac:c8:99:3b:fe:85:6c:6d:47:53:b6:c1:a7:
3d:ec:97:d8:bd:24:b8:45:a3:e1:4a:00:a5:96:2d:8a:74:76:
21:78:0d:2b:11:6d:85:e1:3a:fb:3e:cc:f4:c8:ef:da:a6:2c:
dc:c3:6b:6f:d3:ef:d3:3a:eb:27:93:ec:56:03:8d:a7:ac:30:
04:ac:78:77:08:8e:51:41:2d:a7:29:f3:7d:a4:a3:44:05:6b:
bd:19:44:ee:25:ef:74:5d:c4:88:23:90:e7:c8:6d:f9:61:a8:
bb:67:2d:50:72:93:6d:7d:fb:82:f8:f7:f9:40:54:28:87:40:
05:59:0e:f8:b3:66:41:27:9a:ad:3c:e5:72:ad:9a:60:86:d9:
1f:9e:ff:f5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 5 16:51:23 2026 by rpki-client