Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4C6G_HPZ1azxrbPkIw8kVFweH8Q.roa
File: 4C6G_HPZ1azxrbPkIw8kVFweH8Q.roa (raw, json)
Hash identifier: p6a4lZUhHG4RALl56EAawY9JQaiRatCrea1z2i39XHQ=
Subject key identifier: E0:2E:86:FC:73:D9:D5:AC:F1:AD:B3:E4:23:0F:24:54:5C:1E:1F:C4
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E1D088347657E670D731CD9A627230BBA
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4C6G_HPZ1azxrbPkIw8kVFweH8Q.roa
Signing time: Tue 12 May 2026 16:32:37 +0000
ROA not before: Tue 12 May 2026 16:32:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20326
IP address blocks: 2.26.224.0/22 maxlen: 22
2.26.240.0/22 maxlen: 22
2.26.244.0/22 maxlen: 22
2.27.200.0/21 maxlen: 21
2.27.208.0/22 maxlen: 24
2.27.224.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:08:83:47:65:7e:67:0d:73:1c:d9:a6:27:23:0b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 12 16:32:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e02e86fc73d9d5acf1adb3e4230f24545c1e1fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e6:7d:a0:fe:f1:71:be:09:b8:45:99:9f:c5:
c9:9f:ef:e7:fc:ae:f7:35:30:1d:99:52:66:53:04:
6a:c7:7e:17:38:d8:e1:3a:9a:43:60:33:8b:dc:45:
1b:03:58:d2:2b:e1:25:e5:99:50:93:1b:d6:80:f9:
06:d1:2f:67:8c:37:77:23:5c:ab:b9:5b:46:c7:4d:
af:77:41:d9:48:ce:ba:d2:53:0f:40:a6:f0:1f:2b:
76:13:66:e4:f7:30:24:d0:fe:05:03:11:95:01:8d:
b2:1e:e0:4b:2f:9c:51:fb:ee:c5:fb:4e:0d:6f:34:
06:16:f1:aa:5e:30:21:24:b7:82:a0:af:d2:c9:38:
a7:0c:1c:ac:0d:b2:c0:38:90:4a:87:58:73:29:e4:
b0:43:85:0d:2d:5c:d8:fd:1a:81:b3:6e:b5:c1:8f:
88:d4:d0:7e:99:96:60:68:52:1d:07:f3:c9:61:8e:
c5:58:a4:a0:41:36:fd:48:c0:c9:23:fd:85:5b:72:
26:fa:3f:a4:db:8a:1a:24:9e:39:4e:a8:b9:a9:34:
fa:f3:4f:b0:98:71:b8:6a:ea:74:1a:d6:54:3e:39:
bc:0d:6f:55:82:e3:75:7f:1e:01:e8:ed:0b:76:ef:
53:da:18:60:35:d9:8e:55:65:74:87:3b:d1:3f:df:
cc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2E:86:FC:73:D9:D5:AC:F1:AD:B3:E4:23:0F:24:54:5C:1E:1F:C4
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4C6G_HPZ1azxrbPkIw8kVFweH8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.224.0/22
2.26.240.0/21
2.27.200.0-2.27.211.255
2.27.224.0/21
Signature Algorithm: sha256WithRSAEncryption
00:06:3e:72:b2:39:93:03:e2:e9:e1:9f:a3:33:34:39:af:76:
8d:2c:ca:64:ce:9f:f7:67:c9:6a:7b:07:d2:77:49:36:57:1e:
4d:05:35:80:a5:34:dc:63:2c:be:b2:a4:c8:03:fb:72:66:af:
b9:8b:90:cd:a8:09:e3:8c:6c:76:c6:53:48:6f:5f:f5:fa:03:
8b:dd:7a:4d:52:36:4c:25:1e:c0:c5:f1:51:3f:d0:79:32:62:
ae:80:f9:d3:1a:74:b4:03:39:1a:fb:c0:d3:96:a2:ab:29:c3:
0c:d4:e6:40:1e:f2:55:f3:86:d4:5b:9a:c3:6a:0d:3a:63:ad:
cc:e3:99:f4:99:f5:ba:ba:20:6e:37:78:65:48:04:3c:a6:39:
a1:57:24:3c:99:d3:c1:c4:31:fb:db:2d:41:8d:d6:cb:95:74:
e6:8a:f2:54:44:51:28:a6:74:31:d2:e7:4e:26:37:49:99:b0:
7b:ea:96:f3:57:68:55:a1:0e:e2:00:42:f9:a4:a4:15:f8:ae:
00:26:1b:3e:9a:bd:7a:b6:8e:59:78:7a:5c:58:9c:3f:a9:5f:
63:17:a8:6e:dc:c8:ae:5f:b3:44:e6:f7:75:a1:7f:76:5e:f6:
e4:cb:9f:bd:bc:2f:c7:fc:1f:67:53:39:8b:8a:70:f8:3a:c9:
d9:d0:81:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:32:46 2026 by rpki-client