Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/yg4I2fzdaXDBB2D3kRCJJfk1Rvs.roa
File: yg4I2fzdaXDBB2D3kRCJJfk1Rvs.roa (raw, json)
Hash identifier: Y0hbr2Sfp3QpO/uL0WH8OxEjjeKd9AhY4MI+XhDYQdw=
Subject key identifier: CA:0E:08:D9:FC:DD:69:70:C1:07:60:F7:91:10:89:25:F9:35:46:FB
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DDA39BCFCFE5E409C549C20693D1EFDA4
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/yg4I2fzdaXDBB2D3kRCJJfk1Rvs.roa
Signing time: Wed 29 Apr 2026 17:11:50 +0000
ROA not before: Wed 29 Apr 2026 17:11:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215607
IP address blocks: 2.27.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:da:39:bc:fc:fe:5e:40:9c:54:9c:20:69:3d:1e:fd:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 29 17:11:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca0e08d9fcdd6970c10760f791108925f93546fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:5a:99:a8:e4:71:c0:a0:5e:e3:cf:3a:a4:
a2:ae:d4:4a:b1:9f:b7:6b:ed:db:8f:17:f5:c4:d4:
df:68:ac:78:8d:67:18:bf:cc:3b:44:c3:75:a9:33:
e4:65:93:8a:bd:ea:e0:ec:d8:a5:f4:37:09:21:29:
24:80:59:92:36:43:50:b2:22:10:07:2e:ad:08:da:
02:6b:4a:cf:5b:e2:cb:64:e5:70:f1:a0:7a:0e:8e:
53:88:81:92:fb:c2:86:78:70:e9:7c:77:77:35:b7:
b8:73:ca:8e:00:46:ec:5a:2b:ea:64:49:6a:25:fb:
33:ef:a0:aa:2c:4d:83:c9:12:64:d5:31:0d:0a:e9:
46:a5:9e:14:c1:ba:4c:fb:c8:40:0b:98:04:9b:bf:
67:9e:51:4e:36:55:db:1d:df:c0:59:40:aa:40:b2:
c3:56:a0:8b:ec:9f:0b:70:2f:13:10:e0:df:85:81:
90:af:4b:c8:c1:ad:24:81:ec:45:4d:e0:b7:00:70:
72:61:75:9f:a2:4f:95:31:b2:c7:45:cb:70:b8:30:
d9:3f:18:49:3f:24:a6:49:f6:64:4c:f0:ae:ea:93:
fd:d3:4b:ee:4a:b4:f9:a5:a2:a9:60:e7:9e:20:27:
b6:6a:cd:36:21:5e:3c:a7:00:51:3a:85:8b:38:d0:
f1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0E:08:D9:FC:DD:69:70:C1:07:60:F7:91:10:89:25:F9:35:46:FB
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/yg4I2fzdaXDBB2D3kRCJJfk1Rvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.236.0/24
Signature Algorithm: sha256WithRSAEncryption
99:6b:4d:7a:90:06:3f:e4:26:5a:d7:b0:b2:6a:de:18:00:04:
16:51:17:ea:a4:ef:2a:6b:d0:f5:89:ec:20:00:d3:79:e1:d4:
77:b2:b1:c9:71:9a:ac:b1:73:5f:6e:32:c5:76:77:7c:08:6e:
87:cc:11:9a:8f:5a:30:8a:08:cc:75:a3:95:73:39:8e:52:52:
87:c3:75:07:c7:96:d6:8b:90:33:ce:6a:02:08:27:c2:e3:0d:
10:dc:58:04:fe:84:64:d3:af:73:9b:e3:dc:da:2f:5a:db:e2:
e3:bc:c9:2c:67:3e:dd:9c:58:b8:aa:31:31:f0:fe:b3:9a:6f:
65:da:1d:2f:c7:e4:c3:61:d5:ab:27:21:ec:25:98:ef:fb:ec:
ed:cc:c2:d5:fd:c6:12:c0:79:ff:89:b6:22:d5:e1:8b:b5:f4:
dd:cc:5d:10:bd:68:72:8b:b7:f0:48:f6:e2:46:38:38:b1:91:
c5:b7:eb:a3:bd:7f:7f:a4:5c:1e:63:b0:16:eb:24:3f:70:0d:
37:e4:59:5d:de:2e:a3:2f:3c:cb:36:b3:22:b9:92:fe:5f:77:
78:27:35:03:d9:7e:e9:48:27:cf:23:46:f1:19:40:01:30:2c:
ca:6f:f7:38:dd:56:25:2e:55:da:5f:91:ad:67:83:cf:bf:f4:
96:c3:fd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:48:31 2026 by rpki-client