Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/fEYr6RPOYE07aE5JwQXoU94CSOo.roa
File: fEYr6RPOYE07aE5JwQXoU94CSOo.roa (raw, json)
Hash identifier: whcjGoIvRR9201aVoBoc6oc7AJNh9XtdSNUqp2oz47I=
Subject key identifier: 7C:46:2B:E9:13:CE:60:4D:3B:68:4E:49:C1:05:E8:53:DE:02:48:EA
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F2A042D8B507EB0B00E1C3139153B06B2
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/fEYr6RPOYE07aE5JwQXoU94CSOo.roa
Signing time: Fri 03 Jul 2026 22:05:44 +0000
ROA not before: Fri 03 Jul 2026 22:05:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198057
IP address blocks: 2.27.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2a:04:2d:8b:50:7e:b0:b0:0e:1c:31:39:15:3b:06:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 3 22:05:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c462be913ce604d3b684e49c105e853de0248ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:69:b1:9a:10:88:98:61:09:81:05:ad:d8:e4:
75:1e:66:52:bf:a9:0b:2a:61:f4:ef:da:ef:43:cc:
a6:90:40:53:af:ba:96:bb:f8:6a:3b:97:2b:c7:49:
0c:7c:0d:fe:16:6c:50:4b:f0:02:47:ad:78:e6:83:
b2:97:7e:7a:8a:e0:4b:62:1b:be:65:0d:f2:47:f8:
71:27:b4:be:94:56:01:2a:46:63:fe:4e:9d:39:76:
0e:3f:06:5a:bf:24:d8:be:f8:43:97:6a:79:4f:34:
d7:70:42:dc:d8:01:16:71:fd:72:0a:af:44:10:db:
d6:8b:bf:7e:81:08:57:f4:bd:45:08:54:0e:d7:f4:
98:cd:c0:3d:63:db:9a:c0:98:98:92:b8:99:3f:5b:
ba:8a:a6:dc:cd:fe:32:47:72:4c:55:e0:51:c0:dd:
4a:23:34:25:00:68:c4:e3:60:b3:82:a0:bf:7d:8c:
51:16:ab:a5:9f:d0:5d:4f:fc:0a:0d:f8:91:82:89:
5c:02:94:4e:4b:97:86:51:7b:4d:81:e5:23:ed:c2:
5d:26:8a:c6:ee:cb:fb:11:b3:59:2e:1a:2f:96:04:
93:ea:d3:16:d5:7a:06:83:9a:8d:80:35:61:1f:50:
2d:f7:4d:96:36:a1:6f:ab:bc:a8:bc:e2:55:c9:54:
3f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:46:2B:E9:13:CE:60:4D:3B:68:4E:49:C1:05:E8:53:DE:02:48:EA
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/fEYr6RPOYE07aE5JwQXoU94CSOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.246.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:45:07:22:13:85:ea:46:cc:81:eb:fa:fe:7b:dc:e3:8b:2d:
69:71:dc:b0:32:a0:ca:5f:17:b5:33:56:76:d7:e1:49:43:58:
e8:d9:a0:ac:a5:aa:b5:dc:71:85:59:4d:df:0d:2a:ca:8a:b1:
5a:1a:56:65:01:e0:3c:fe:d8:11:4c:ca:a1:75:2a:d2:3a:2a:
82:bc:8f:0a:60:99:aa:cd:51:7f:95:96:61:55:de:d4:cd:34:
0d:e0:69:b1:1b:81:cc:cb:15:90:dc:00:0e:35:ee:2d:ad:b8:
fe:65:ed:37:12:af:8c:33:40:71:85:29:14:8e:38:98:6b:fd:
be:b5:93:03:7f:bf:c3:15:27:d8:4a:04:f8:76:54:1b:fd:5d:
30:e5:a8:01:77:64:f9:f5:6b:4b:70:4f:d6:9b:06:2c:c5:2d:
8a:86:c7:96:6f:03:fc:6b:56:55:33:77:ec:bb:c3:29:15:a3:
4e:01:cb:de:f6:52:06:7c:68:0a:00:13:00:21:2a:8b:e8:0c:
ab:de:ca:b7:ea:a5:16:d7:44:f6:41:ee:d2:fe:80:1e:b3:14:
50:24:3a:da:ad:7e:ed:91:d3:c3:06:96:66:8b:44:fb:a9:31:
2e:0f:02:f4:fe:b6:06:a3:33:3c:e5:0b:4f:4b:0e:17:c1:e7:
8b:41:9a:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8qBC2LUH6wsA4cMTkVOwayMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNzAzMjIwNTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzQ2MmJlOTEzY2U2MDRkM2I2ODRlNDljMTA1ZTg1M2RlMDI0OGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2mxmhCImGEJgQWt2OR1HmZSv6kL
KmH079rvQ8ymkEBTr7qWu/hqO5crx0kMfA3+FmxQS/ACR6145oOyl356iuBLYhu+
ZQ3yR/hxJ7S+lFYBKkZj/k6dOXYOPwZavyTYvvhDl2p5TzTXcELc2AEWcf1yCq9E
ENvWi79+gQhX9L1FCFQO1/SYzcA9Y9uawJiYkriZP1u6iqbczf4yR3JMVeBRwN1K
IzQlAGjE42CzgqC/fYxRFquln9BdT/wKDfiRgolcApROS5eGUXtNgeUj7cJdJorG
7sv7EbNZLhovlgST6tMW1XoGg5qNgDVhH1At902WNqFvq7yovOJVyVQ/kQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHxGK+kTzmBNO2hOScEF6FPeAkjqMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvZkVZcjZSUE9ZRTA3YUU1SndRWG9VOTRDU09vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAhv2MA0G
CSqGSIb3DQEBCwUAA4IBAQBbRQciE4XqRsyB6/r+e9zjiy1pcdywMqDKXxe1M1Z2
1+FJQ1jo2aCspaq13HGFWU3fDSrKirFaGlZlAeA8/tgRTMqhdSrSOiqCvI8KYJmq
zVF/lZZhVd7UzTQN4GmxG4HMyxWQ3AAONe4trbj+Ze03Eq+MM0BxhSkUjjiYa/2+
tZMDf7/DFSfYSgT4dlQb/V0w5agBd2T59WtLcE/WmwYsxS2KhseWbwP8a1ZVM3fs
u8MpFaNOAcve9lIGfGgKABMAISqL6Ayr3sq36qUW10T2Qe7S/oAesxRQJDrarX7t
kdPDBpZmi0T7qTEuDwL0/rYGozM85QtPSw4XweeLQZp6
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:29 2026 by rpki-client