Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/cE4bMwUaCd8BoADolHQLpJBR2EM.roa
File: cE4bMwUaCd8BoADolHQLpJBR2EM.roa (raw, json)
Hash identifier: hzmFpFHHAOS7duPUzM4OQFtZ42tACZR36I3C0v8sBGk=
Subject key identifier: 70:4E:1B:33:05:1A:09:DF:01:A0:00:E8:94:74:0B:A4:90:51:D8:43
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A15F7E218D387156E8085BC1D0F43D6875
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/cE4bMwUaCd8BoADolHQLpJBR2EM.roa
Signing time: Wed 21 Oct 2026 17:24:23 +0000
ROA not before: Wed 21 Oct 2026 17:24:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213905
IP address blocks: 2.27.118.0/24 maxlen: 24
31.77.127.0/24 maxlen: 24
191.217.212.0/24 maxlen: 24
193.23.209.0/24 maxlen: 24
193.23.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 01:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:7e:21:8d:38:71:56:e8:08:5b:c1:d0:f4:3d:68:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 21 17:24:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=704e1b33051a09df01a000e894740ba49051d843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:2e:90:11:f1:66:f1:af:cd:55:af:6d:00:
7c:d4:af:ae:ce:9a:12:94:db:2d:4b:ea:f4:fa:f4:
15:35:8a:8a:b4:90:2c:9d:85:71:ed:e8:a0:47:07:
9b:40:54:de:03:33:25:e0:5e:02:81:70:bf:31:5a:
8f:2f:d9:ab:e5:13:25:08:1b:32:2f:9a:40:8d:f5:
f7:b9:4d:c0:79:a0:e0:3b:8d:cf:52:84:0b:d1:96:
21:ec:c2:6e:88:65:bb:32:66:d1:79:37:34:11:2d:
b6:f1:4a:30:7b:f9:3b:f3:e6:4f:28:7e:9a:c5:4d:
ff:84:b9:2d:d5:14:a0:8f:79:9f:ab:fc:f8:cb:cb:
53:12:33:5b:9b:2f:69:a6:98:fa:db:54:99:9b:ca:
1f:7b:6c:1a:9e:11:a0:d8:fd:ac:22:30:6e:c3:26:
14:4e:32:28:41:f2:a6:31:b2:1f:d9:1c:38:b2:80:
b1:d1:22:7f:3d:3e:88:06:f6:4e:4e:b3:52:87:95:
91:e2:85:de:88:ae:af:23:7b:09:ab:7d:f9:42:b9:
44:7c:4e:76:d0:82:02:f9:2b:44:a6:96:4c:00:44:
33:2a:3c:04:b5:c7:ed:cb:f6:54:14:ef:59:87:3b:
f4:fa:0d:17:7f:b5:23:44:d1:f5:8e:7d:db:2c:05:
34:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4E:1B:33:05:1A:09:DF:01:A0:00:E8:94:74:0B:A4:90:51:D8:43
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/cE4bMwUaCd8BoADolHQLpJBR2EM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.118.0/24
31.77.127.0/24
191.217.212.0/24
193.23.209.0/24
193.23.221.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:b7:36:d1:92:28:23:37:7f:33:f7:e5:9f:75:3a:2b:e1:2b:
e1:59:53:46:50:b8:b7:a3:b3:c7:d2:fe:19:6b:6f:9a:c0:35:
07:0e:6f:c4:76:91:36:4e:01:ac:29:16:89:36:8e:41:55:b4:
15:c0:a5:e5:40:b7:06:b3:8e:a4:e2:21:84:ce:a8:20:78:0f:
d1:37:70:03:47:c4:13:0f:b0:2c:3b:4d:f3:60:64:fb:c3:5f:
55:2f:94:0a:c3:46:06:e3:97:db:25:26:64:2b:00:52:37:1d:
e8:3d:66:80:bc:c5:ff:ab:2a:f5:9c:3a:12:e2:77:24:e8:9c:
6b:ba:26:c9:5b:25:ef:db:ab:ed:71:cf:89:56:66:59:bf:d8:
56:b1:72:3f:f5:0a:b0:ce:21:10:1e:1e:c4:ef:7f:f2:df:4a:
b5:32:68:7c:58:52:ff:66:9c:37:10:7a:2b:b4:05:39:b0:89:
f6:d1:07:92:7b:e9:3a:de:64:f2:42:fa:6f:1a:62:25:8e:41:
81:f2:bb:14:f7:20:0d:8f:64:5a:a9:d2:b5:06:95:fc:36:80:
41:8d:d9:2b:c1:03:bc:dc:7f:38:a6:14:b9:19:92:0c:36:df:
14:13:a2:8b:d4:1d:8e:5c:5c:ed:7c:1d:1e:2c:b8:8f:70:bd:
a9:07:ba:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 11:18:12 2026 by rpki-client