Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/XIE4evKv5tZlJFeDimXmryaFCvc.roa
File: XIE4evKv5tZlJFeDimXmryaFCvc.roa (raw, json)
Hash identifier: bc7wX25BguavhjA8oADdHCtmzuqUGh6u9FqRZ0r0chs=
Subject key identifier: 5C:81:38:7A:F2:AF:E6:D6:65:24:57:83:8A:65:E6:AF:26:85:0A:F7
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0830EEC374B46CA1B5AF759CC660FF341
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/XIE4evKv5tZlJFeDimXmryaFCvc.roa
Signing time: Tue 08 Sep 2026 22:06:28 +0000
ROA not before: Tue 08 Sep 2026 22:06:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58232
IP address blocks: 2.27.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:83:0e:ec:37:4b:46:ca:1b:5a:f7:59:cc:66:0f:f3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 8 22:06:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c81387af2afe6d6652457838a65e6af26850af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c1:d7:10:e1:c3:7a:30:e1:40:ab:15:10:8d:
9c:71:67:dd:81:b6:84:54:87:b7:af:7c:7f:e5:b1:
10:70:be:00:af:ec:26:a7:d6:3f:74:7c:2b:ed:9f:
60:34:66:97:2a:c0:87:5c:ef:df:88:93:72:6b:70:
5d:c4:ff:88:6e:57:bb:90:6b:8a:51:3c:1b:73:c3:
b9:ea:6b:2b:9d:e2:49:93:65:d3:b4:da:51:7f:83:
48:ea:06:52:59:92:5e:2f:0e:8f:75:34:a9:ba:03:
3e:8e:0b:03:89:04:54:de:42:c2:db:e9:aa:f9:c4:
e8:57:a8:d5:39:a1:70:9d:ed:fc:99:4a:64:ee:37:
aa:98:20:45:67:0b:b0:19:f9:9f:2b:92:09:53:11:
03:7d:e0:5b:e2:52:39:b1:72:59:a6:65:39:c5:62:
78:f9:23:54:c6:76:f9:90:3d:5e:a6:ef:92:1d:20:
fc:7f:b4:a6:42:6e:bd:be:d2:89:f0:22:65:47:69:
e7:b2:3e:31:b9:b1:4b:98:44:e3:6e:f8:00:5f:b1:
56:dc:67:a6:7a:f3:e6:a0:12:fa:30:e2:a9:db:4d:
0a:a2:21:88:58:40:a6:96:8e:db:4a:d3:1e:81:92:
89:01:9d:f3:bc:a1:37:9d:ba:e9:73:56:56:b5:2a:
ab:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:81:38:7A:F2:AF:E6:D6:65:24:57:83:8A:65:E6:AF:26:85:0A:F7
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/XIE4evKv5tZlJFeDimXmryaFCvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.87.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:55:be:0c:b4:96:f9:6b:ab:86:de:d6:b8:4c:04:3a:e4:64:
28:75:41:df:28:56:3c:33:cd:28:75:bf:8b:89:aa:a5:23:a5:
c5:2a:72:8b:53:b2:a6:e0:2f:9f:4c:e2:39:3f:b6:47:57:0d:
36:b3:4a:a8:a1:90:b1:ba:1a:1c:7d:11:ec:72:d9:a1:e2:32:
a7:c1:54:2c:b4:14:20:bf:2e:ec:5a:5b:ac:02:79:e9:29:83:
9c:76:79:f3:5d:f3:25:ea:a5:56:fc:80:64:51:42:06:6b:52:
f5:b7:a8:15:32:4a:45:3e:15:34:e3:38:b3:7e:3d:d1:f4:91:
55:bc:c3:c1:23:b6:a1:fa:6a:d7:f6:b2:73:2e:06:ae:7c:f6:
c5:4c:0a:8b:ed:bd:ba:32:3d:6f:6c:7d:51:a1:8a:b1:76:01:
8c:7c:97:84:09:a2:30:0e:3a:63:3b:43:bd:e9:ac:66:1a:c4:
08:3a:c7:1b:7b:5c:75:36:7c:04:fe:79:23:cb:dc:f2:70:1f:
eb:9d:a0:12:97:a7:fc:38:ab:93:f3:ca:2e:c8:68:72:31:26:
3f:8a:3c:06:74:11:af:47:04:08:b1:24:cd:39:70:25:02:3e:
cb:cd:f2:32:cf:99:09:da:5d:75:18:44:b1:a6:97:a2:b9:d4:
98:1d:cb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:25:40 2026 by rpki-client