Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ebPSWBzZPf1L-eYYNWSYgLvEYYg.roa
File: ebPSWBzZPf1L-eYYNWSYgLvEYYg.roa (raw, json)
Hash identifier: LUgpCs3lN/D40hERVuvvxRWYso57z9W2M//IKxJUrGY=
Subject key identifier: 79:B3:D2:58:1C:D9:3D:FD:4B:F9:E6:18:35:64:98:80:BB:C4:61:88
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D0BDDAC6585CFA1DD7271A16E94359F28
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ebPSWBzZPf1L-eYYNWSYgLvEYYg.roa
Signing time: Fri 20 Mar 2026 15:29:30 +0000
ROA not before: Fri 20 Mar 2026 15:29:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24669
IP address blocks: 2.27.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0b:dd:ac:65:85:cf:a1:dd:72:71:a1:6e:94:35:9f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 20 15:29:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79b3d2581cd93dfd4bf9e61835649880bbc46188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:23:7b:e3:5f:7d:1a:47:2e:92:ce:d7:fe:dc:
59:f2:bc:ee:68:49:e3:4d:54:a7:02:e8:5a:aa:20:
d6:dc:f1:08:91:50:91:85:0b:33:21:60:cd:72:66:
fb:65:f3:00:bb:31:84:1d:3d:b0:55:ea:dd:7b:53:
6c:c4:f0:5b:b7:66:ea:1a:fa:cc:84:f7:1a:83:bc:
cc:4c:a7:02:e2:dc:1e:e4:3a:a1:cf:03:79:eb:2b:
2f:51:71:7c:d0:8c:84:78:a2:74:62:9d:16:bf:4f:
18:a8:56:cb:dd:38:82:55:6a:2a:0f:60:f3:1d:4a:
d5:9c:54:28:86:06:c3:5a:1b:3a:2a:c1:a0:c0:da:
4e:40:c8:fc:55:28:4b:97:93:0c:82:f6:1c:06:52:
53:3f:12:48:11:72:b5:3c:04:83:3e:8a:7d:e9:56:
ec:a2:68:6c:78:e6:83:75:25:c0:8e:a7:0b:58:5c:
52:49:8f:da:13:79:70:07:cf:a6:d8:05:17:55:05:
b5:73:8d:d5:11:39:c5:2c:d4:b7:d7:d6:e6:14:43:
2c:18:21:1d:a7:07:da:84:01:14:e7:4d:d2:8c:c4:
ed:b2:38:3e:76:af:8d:67:86:1c:e7:7a:35:af:e6:
44:43:c1:c8:2a:b8:9f:d6:e1:f0:5e:f7:15:01:22:
ab:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B3:D2:58:1C:D9:3D:FD:4B:F9:E6:18:35:64:98:80:BB:C4:61:88
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ebPSWBzZPf1L-eYYNWSYgLvEYYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.113.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ed:17:64:4d:02:a5:8b:fd:08:95:ec:c3:16:b5:36:d8:3e:
22:fd:cd:82:26:39:49:fe:e0:73:ce:28:6e:15:2f:7b:cb:24:
b7:e6:d8:d7:d0:06:6d:22:33:43:0f:b3:7b:56:89:23:fe:8e:
01:26:2a:ca:78:e9:ba:cb:f3:93:69:d0:a9:6b:0c:78:5f:61:
6b:7c:f5:77:f0:29:e8:db:84:75:60:fc:75:18:2e:9f:36:e8:
ff:e4:0a:80:c1:54:15:53:e1:5b:33:ea:02:1f:3d:69:5e:7f:
dd:8a:e9:59:4c:7c:92:1b:e4:55:dd:c9:d1:f8:68:8b:ab:0a:
49:46:3c:b7:c7:9f:c7:f9:3a:d7:6b:9a:6a:02:79:4f:6d:0d:
d0:91:ec:2a:86:c2:6e:87:35:78:59:8d:ed:59:a3:f3:98:2b:
0b:94:f0:dd:c3:9b:db:9b:37:7d:c3:67:75:79:28:b3:49:e4:
2e:98:18:c2:93:91:c7:a5:59:e9:da:d0:6a:75:ce:ce:72:0d:
fe:e6:37:d8:41:72:46:ff:21:54:cf:94:e8:cc:67:32:14:a7:
d5:5e:0d:10:58:f4:e7:71:1e:f6:04:73:92:ef:52:63:fe:e1:
6b:d9:14:26:ea:42:c6:26:2e:88:45:da:e1:f9:ce:a5:b4:54:
a9:55:06:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 14:30:05 2026 by rpki-client