Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/EGRBl6ShvqFLj4e4OwVSGIqa-SA.roa
File: EGRBl6ShvqFLj4e4OwVSGIqa-SA.roa (raw, json)
Hash identifier: wdDA9/HpE9M74a4JkLKbOcB+k0vul5YaPEXZxNC5+aY=
Subject key identifier: 10:64:41:97:A4:A1:BE:A1:4B:8F:87:B8:3B:05:52:18:8A:9A:F9:20
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D25AFEB3ABA12C9696A768F7DA9C08AAD
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/EGRBl6ShvqFLj4e4OwVSGIqa-SA.roa
Signing time: Wed 25 Mar 2026 15:49:39 +0000
ROA not before: Wed 25 Mar 2026 15:49:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151704
IP address blocks: 2.27.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:af:eb:3a:ba:12:c9:69:6a:76:8f:7d:a9:c0:8a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 25 15:49:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10644197a4a1bea14b8f87b83b0552188a9af920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1e:98:88:d1:aa:5e:f9:00:29:cb:a0:0e:33:
e5:f9:68:e2:fa:fb:f0:8d:fc:4e:2f:d6:89:d7:28:
c7:bc:4f:23:3e:0a:89:f3:cf:6b:9a:1b:e4:c0:95:
99:c1:9c:7f:50:60:67:3f:cd:dd:ea:9f:01:fc:31:
f2:bd:fb:79:79:03:53:92:78:d1:3b:48:61:36:6f:
fd:e0:f1:79:ac:a1:cf:73:4a:c1:32:31:a3:bf:36:
43:5d:50:3a:a0:39:fe:ea:e7:65:bd:99:4e:63:3f:
59:61:18:00:0a:ff:0a:1c:dd:a4:31:19:2e:38:af:
5d:79:e2:1b:9e:54:a8:30:ee:8b:4a:3f:e5:94:3e:
a8:20:f1:1c:65:47:7a:7e:5d:3a:44:7e:03:7d:1c:
85:1c:02:c1:3a:a4:41:e9:34:70:39:48:6d:63:ce:
3a:ff:ba:7c:cb:0b:18:80:36:67:06:e8:7d:0d:16:
ab:0d:ba:71:3f:e6:bc:38:2a:86:86:d2:85:89:22:
2e:93:65:d7:69:98:59:04:33:36:15:7e:24:6f:1a:
31:27:69:75:df:25:5a:a9:e6:41:1a:f1:0f:a8:05:
25:95:1d:30:55:a2:16:28:1b:b2:08:1f:75:0f:e5:
b6:a6:1a:72:3b:69:81:57:cb:35:1e:09:5c:a7:12:
06:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:64:41:97:A4:A1:BE:A1:4B:8F:87:B8:3B:05:52:18:8A:9A:F9:20
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/EGRBl6ShvqFLj4e4OwVSGIqa-SA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.107.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:f7:c2:be:39:0c:fb:7b:a4:f6:25:93:59:b5:2a:1d:82:7f:
48:15:8b:73:f3:b9:9b:68:0e:f4:d4:d3:3c:75:cf:25:2f:e7:
f7:47:09:32:ca:09:2e:4c:f1:17:7d:47:29:05:16:7a:71:fa:
29:8a:d5:89:b4:c2:76:a2:24:e5:12:92:92:d5:df:42:da:ec:
6f:cb:8b:2c:3f:4b:75:ad:ab:06:eb:1f:49:40:99:6e:b0:b2:
f1:e2:9e:98:c0:6d:75:a7:c8:a8:37:73:2f:49:62:e8:07:42:
3a:39:c3:70:96:b9:5f:40:8a:ae:79:03:ef:8e:23:72:6a:a0:
e8:83:b4:0f:de:f8:2f:ac:b1:e1:c6:52:94:e6:d5:72:5f:85:
22:63:32:40:f7:14:e2:b6:5f:3b:bb:ee:3d:a5:e3:64:2c:7e:
f6:22:85:72:8e:3f:bb:20:8c:f3:85:ce:05:ff:e7:34:1a:f1:
cc:64:c6:41:20:9a:76:60:1f:df:b3:38:4b:54:3a:7a:2a:ac:
df:7b:6d:8b:43:80:1f:74:91:02:e2:be:83:f8:94:88:bd:e4:
72:95:a2:ed:e1:cb:22:62:02:cc:74:ad:66:d1:85:ba:bc:da:
63:2f:8f:0c:62:d4:58:4f:3b:3c:49:44:b6:fa:ce:70:d6:e9:
61:bf:8f:93
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0lr+s6uhLJaWp2j32pwIqtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwMzI1MTU0OTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDY0NDE5N2E0YTFiZWExNGI4Zjg3YjgzYjA1NTIxODhhOWFmOTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB6YiNGqXvkAKcugDjPl+Wji+vvw
jfxOL9aJ1yjHvE8jPgqJ889rmhvkwJWZwZx/UGBnP83d6p8B/DHyvft5eQNTknjR
O0hhNm/94PF5rKHPc0rBMjGjvzZDXVA6oDn+6udlvZlOYz9ZYRgACv8KHN2kMRku
OK9deeIbnlSoMO6LSj/llD6oIPEcZUd6fl06RH4DfRyFHALBOqRB6TRwOUhtY846
/7p8ywsYgDZnBuh9DRarDbpxP+a8OCqGhtKFiSIuk2XXaZhZBDM2FX4kbxoxJ2l1
3yVaqeZBGvEPqAUllR0wVaIWKBuyCB91D+W2phpyO2mBV8s1HglcpxIGwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBBkQZekob6hS4+HuDsFUhiKmvkgMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvRUdSQmw2U2h2cUZMajRlNE93VlNHSXFhLVNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAhtrMA0G
CSqGSIb3DQEBCwUAA4IBAQA698K+OQz7e6T2JZNZtSodgn9IFYtz87mbaA701NM8
dc8lL+f3RwkyygkuTPEXfUcpBRZ6cfopitWJtMJ2oiTlEpKS1d9C2uxvy4ssP0t1
rasG6x9JQJlusLLx4p6YwG11p8ioN3MvSWLoB0I6OcNwlrlfQIqueQPvjiNyaqDo
g7QP3vgvrLHhxlKU5tVyX4UiYzJA9xTitl87u+49peNkLH72IoVyjj+7IIzzhc4F
/+c0GvHMZMZBIJp2YB/fszhLVDp6Kqzfe22LQ4AfdJEC4r6D+JSIveRylaLt4csi
YgLMdK1m0YW6vNpjL48MYtRYTzs8SUS2+s5w1ulhv4+T
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:18:28 2026 by rpki-client