Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/yEVBeu7FPXr4j1RvLwbWZIxwWHw.roa
File: yEVBeu7FPXr4j1RvLwbWZIxwWHw.roa (raw, json)
Hash identifier: IQHlPk5kNg8WKE8ewool4x+u1qv+LUTPRlR+xTOqKMg=
Subject key identifier: C8:45:41:7A:EE:C5:3D:7A:F8:8F:54:6F:2F:06:D6:64:8C:70:58:7C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D54A92BD3534B104A8E5E028E2FFF94D0
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/yEVBeu7FPXr4j1RvLwbWZIxwWHw.roa
Signing time: Fri 03 Apr 2026 18:44:26 +0000
ROA not before: Fri 03 Apr 2026 18:44:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206411
IP address blocks: 2.27.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Apr 2026 22:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:54:a9:2b:d3:53:4b:10:4a:8e:5e:02:8e:2f:ff:94:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 3 18:44:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c845417aeec53d7af88f546f2f06d6648c70587c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:51:65:d5:d5:c8:10:64:3d:18:66:08:65:da:
6e:27:c1:a7:f8:9a:8e:a8:eb:a0:95:e4:ed:29:66:
e2:83:9a:83:2a:05:1b:98:e1:74:34:15:13:c9:7f:
14:4a:24:3d:7e:8c:c7:13:c4:0c:a3:95:8c:e0:21:
d6:31:90:47:14:bb:b8:c2:78:2a:e6:ec:0b:cf:03:
13:d0:e1:c0:8e:46:5e:59:db:5a:75:44:62:ee:4a:
66:f6:13:08:60:c3:e4:07:0a:67:73:f8:27:f0:72:
d7:62:f8:a1:b6:13:d4:a7:67:46:cb:59:b9:06:57:
3d:cd:e4:65:71:5b:89:fb:b2:31:ec:05:82:e7:04:
fc:ea:e9:74:1d:d5:6d:9a:39:bd:41:2c:09:1b:88:
56:ad:fe:ff:29:37:4d:fc:47:0b:d3:3d:26:5c:3c:
db:d3:d5:d0:61:79:49:a4:ac:b8:51:d7:52:32:59:
67:fe:fa:45:47:a3:3b:aa:d3:c3:9f:40:72:bd:df:
b3:94:72:28:c8:55:d2:0c:48:d9:c9:b1:b9:44:fc:
90:53:43:1d:33:73:63:45:81:2e:7d:b5:58:24:4e:
44:3b:53:d5:7d:f5:2c:1d:45:17:9a:72:71:a3:86:
03:f1:d5:ac:59:a6:ed:ae:cb:3a:b0:ff:d0:97:4d:
03:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:45:41:7A:EE:C5:3D:7A:F8:8F:54:6F:2F:06:D6:64:8C:70:58:7C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/yEVBeu7FPXr4j1RvLwbWZIxwWHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.79.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:3b:79:9d:92:9f:c2:1f:5d:db:a9:42:0e:42:79:d4:d1:c8:
89:c3:74:cf:27:a1:b5:44:13:f4:2b:1a:d0:e2:b4:35:2b:1d:
c3:1a:60:60:bd:d4:47:fe:82:b0:ff:80:2a:62:8d:d2:7a:bb:
f3:05:d6:fe:4b:64:98:d7:3a:42:ff:f0:94:b1:58:6a:12:4c:
1f:c7:01:dc:94:8b:5b:c3:df:65:3f:ea:58:4a:3e:47:48:12:
06:3f:58:d2:21:4e:51:3b:fc:7f:10:32:8f:dc:43:b5:11:88:
96:5c:f2:3d:e2:ca:a1:32:d8:1f:a2:85:00:6f:92:9e:20:8f:
61:10:4e:76:d2:40:66:94:19:03:04:79:5a:39:bc:d2:f4:4e:
67:2d:30:43:78:b0:1e:e1:71:5f:37:e1:ce:24:2c:64:ae:07:
74:e4:47:8a:b8:82:01:35:eb:f8:a0:8a:0d:6f:6e:d4:bf:a7:
7e:f1:f3:20:3e:5d:9c:e2:03:03:1c:bc:a1:d7:b8:a3:89:d6:
e2:45:dc:74:a9:ae:f9:2a:e4:db:c0:b4:0d:63:a2:37:9c:f7:
81:ab:5d:0f:d5:b7:6d:96:dc:5f:35:53:53:86:b2:14:bf:57:
1e:2e:5f:08:88:fe:04:e6:ee:69:27:89:1f:66:9b:d0:34:89:
1b:8e:b1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 07:42:13 2026 by rpki-client