Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/t4DFiGvhQRjrXIrUccAEUBYqOkc.roa
File: t4DFiGvhQRjrXIrUccAEUBYqOkc.roa (raw, json)
Hash identifier: SpcsvOn59YEM5YQkdnPIszNY0/y4X9WwCZCnYqtOnXE=
Subject key identifier: B7:80:C5:88:6B:E1:41:18:EB:5C:8A:D4:71:C0:04:50:16:2A:3A:47
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A19DCE4A8F9DB9FEDCB3BB611BA764499F
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/t4DFiGvhQRjrXIrUccAEUBYqOkc.roa
Signing time: Mon 02 Nov 2026 19:48:24 +0000
ROA not before: Mon 02 Nov 2026 19:48:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218938
IP address blocks: 2.27.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:ce:4a:8f:9d:b9:fe:dc:b3:bb:61:1b:a7:64:49:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 2 19:48:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b780c5886be14118eb5c8ad471c00450162a3a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8e:e5:a3:60:5d:ea:0c:71:13:90:55:8d:36:
4b:be:7a:11:5c:ac:19:da:cc:b8:0b:e9:cd:1a:2e:
7b:8a:e0:0c:f7:be:5d:1a:9a:ee:12:41:e6:6a:8d:
31:2a:61:f6:93:c4:df:3d:55:64:40:ae:e6:a0:c3:
83:05:46:62:2b:fd:ee:64:35:3f:25:62:ae:25:b2:
e1:77:49:c7:5b:63:04:8e:ba:a9:d8:cb:79:26:fe:
d5:e4:c3:7e:00:ab:24:a1:ac:e5:44:6c:20:70:1d:
8f:c6:0d:01:fb:d7:16:d9:2b:8b:aa:f0:4f:df:95:
08:17:eb:fd:7b:1d:23:2d:3c:5b:ac:d6:b3:3d:7d:
bc:9b:b2:17:5d:65:e6:49:c8:bf:63:da:d0:78:bd:
77:e8:0c:53:70:66:66:90:d6:65:f6:0a:d3:c8:c1:
63:52:d0:9d:54:5a:ef:cc:31:0c:e6:b4:f7:f5:8f:
d9:ce:2d:1c:19:79:17:8c:8b:23:f7:c9:c8:5f:a7:
96:cd:99:06:45:99:71:f6:d4:02:b5:88:7c:f7:48:
67:39:ee:01:72:fa:1c:7a:08:ce:e0:1c:a5:0e:a0:
6a:3a:f3:a0:be:00:9e:9b:94:d4:b6:32:c3:0a:0d:
42:87:68:7e:66:2d:7f:d4:66:25:bb:8b:ad:aa:94:
16:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:80:C5:88:6B:E1:41:18:EB:5C:8A:D4:71:C0:04:50:16:2A:3A:47
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/t4DFiGvhQRjrXIrUccAEUBYqOkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.117.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:15:f4:5a:20:44:1c:e1:4d:99:af:f2:14:89:d6:6d:9c:88:
bf:70:bc:fd:1f:65:0f:ae:08:77:89:82:58:4e:d3:3c:a6:46:
7c:53:e1:0e:89:e7:bc:d8:d7:03:eb:b7:f6:fd:18:fa:da:29:
e9:37:ec:97:4b:ea:80:1d:f9:49:7c:f5:40:6f:6b:74:7d:bc:
23:31:fb:7d:ad:98:62:e4:c8:50:9b:32:c5:34:e6:4d:ee:d1:
88:27:a7:09:9b:50:30:fd:d2:7f:46:3f:20:4c:1a:9c:25:e2:
d6:30:50:e7:d0:98:ad:71:9d:0b:50:40:ac:2b:33:1d:12:04:
c0:6c:d7:1a:fc:02:73:73:1b:f2:b6:ca:48:5e:89:40:c6:f8:
12:15:c5:10:a8:c5:e5:14:2f:c6:a0:b9:b4:72:5f:d6:20:68:
58:25:d8:77:61:be:ea:14:4d:51:89:d2:eb:d6:39:b5:09:56:
55:d9:6b:51:c4:32:19:08:dd:20:0f:1c:81:8c:dd:4d:82:bf:
8a:09:12:b9:a2:a9:ab:08:7f:09:00:68:d1:c2:71:9d:92:43:
e3:67:77:59:d9:41:ce:c5:6f:f6:28:ce:dc:40:59:76:ca:04:
8e:3a:c3:8b:a5:d2:a3:c5:0a:b7:fd:0e:97:98:de:13:c2:6f:
9c:52:30:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:38:40 2026 by rpki-client