Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/P20_WmKwST5xGSH7aUGeurWtkes.roa
File: P20_WmKwST5xGSH7aUGeurWtkes.roa (raw, json)
Hash identifier: ILyr5MVoHcsv9Y01RlEbFw8lI72khtHplXcqaePpA3Q=
Subject key identifier: 3F:6D:3F:5A:62:B0:49:3E:71:19:21:FB:69:41:9E:BA:B5:AD:91:EB
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DD18FFB79450D79EC68F51AF5AB2F0193
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/P20_WmKwST5xGSH7aUGeurWtkes.roa
Signing time: Tue 28 Apr 2026 00:49:27 +0000
ROA not before: Tue 28 Apr 2026 00:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203154
IP address blocks: 2.26.4.0/24 maxlen: 24
2.27.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:8f:fb:79:45:0d:79:ec:68:f5:1a:f5:ab:2f:01:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 28 00:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f6d3f5a62b0493e711921fb69419ebab5ad91eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:23:e7:fe:c2:47:28:79:91:da:a9:5b:d5:cc:
5a:37:13:85:0d:42:b2:5e:8d:16:8b:72:5d:cc:41:
55:7d:c4:33:09:72:a6:8d:39:9f:cb:62:cc:61:56:
ca:aa:bd:7f:35:59:fc:8f:33:5a:ec:7d:c1:9a:04:
9a:dd:71:0e:41:77:f8:3a:58:60:f3:87:6e:0f:60:
07:20:7e:1f:b4:82:43:c9:58:52:49:96:6a:9a:a5:
c5:47:eb:f4:7b:10:21:7d:1f:ee:31:0d:02:8d:a8:
3f:5c:0c:59:a3:ad:87:20:fc:8d:c8:3a:fd:91:a9:
4e:88:45:10:b0:7e:a6:7b:c2:e2:ba:43:5b:7a:47:
19:4c:69:25:22:db:ff:63:a7:fa:d2:6c:c5:da:8d:
9d:73:d7:24:9a:50:bf:72:0e:8d:6c:ef:08:36:be:
2f:45:80:ea:cf:6a:71:3a:f8:35:b7:a2:11:dc:17:
a9:bb:01:f8:b2:85:5e:bf:d2:c9:75:46:b2:a9:8b:
d4:12:cf:2b:ca:e7:32:3d:00:a4:95:23:4f:fe:ad:
90:eb:a2:61:85:4b:30:0b:02:60:24:92:b1:18:5d:
16:55:be:cd:70:5d:1d:dc:9d:22:be:0b:3c:33:ee:
ce:c4:d4:34:c1:cb:17:ed:6d:19:c6:77:e5:08:d4:
57:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6D:3F:5A:62:B0:49:3E:71:19:21:FB:69:41:9E:BA:B5:AD:91:EB
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/P20_WmKwST5xGSH7aUGeurWtkes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.4.0/24
2.27.56.0/24
Signature Algorithm: sha256WithRSAEncryption
08:7a:a5:2c:04:0f:4c:80:e9:a4:35:ad:f8:8b:e7:74:03:2c:
87:8c:40:ff:e7:26:c4:a6:b8:46:f4:c0:06:91:e2:24:7e:4c:
04:7e:2f:66:43:c6:fb:fb:25:f2:b8:22:72:bd:50:fd:79:78:
b3:60:cb:ee:34:2e:8a:5a:16:4c:91:6f:76:be:65:19:93:4c:
4f:34:16:dc:c1:ce:a7:63:8e:63:39:1b:15:b8:1f:ac:57:a1:
33:a2:dc:34:db:d9:eb:90:6a:7f:92:ad:1b:90:43:ff:33:ef:
59:aa:87:97:d5:1a:2f:fe:05:0f:40:10:0c:f4:4c:87:63:bd:
ad:e8:ba:33:3a:a9:91:bb:1e:ec:20:21:03:f3:97:c7:1c:72:
33:c5:f6:2c:8b:b1:d0:56:b8:16:86:db:3b:f1:d0:05:b8:48:
1c:80:c9:fe:5a:9e:39:44:85:09:d8:9e:27:e3:3a:a0:e1:7e:
ad:33:74:09:1a:86:ff:a9:d7:25:b2:7c:23:5d:9a:e3:59:ca:
7e:18:c5:84:15:09:90:0e:5f:44:c4:5f:d9:83:e4:b8:05:bf:
94:d0:e6:23:b9:5b:df:29:b0:f7:8c:f8:15:aa:02:74:20:5b:
92:47:59:b3:6c:9b:3a:dd:d9:f6:5a:05:7f:a5:e7:7c:e6:37:
7f:9f:5c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:50:58 2026 by rpki-client