Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MYUz-WYLxin_DtV4uJNIEljwouM.roa
File: MYUz-WYLxin_DtV4uJNIEljwouM.roa (raw, json)
Hash identifier: 5ESXOu8P8lZC7m8Cyw87H+AWoc0Z+qrcsjRI+u6YXy0=
Subject key identifier: 31:85:33:F9:66:0B:C6:29:FF:0E:D5:78:B8:93:48:12:58:F0:A2:E3
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DF9068CEF361FEB1C7FBD1556BF07BB80
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MYUz-WYLxin_DtV4uJNIEljwouM.roa
Signing time: Tue 05 May 2026 16:44:09 +0000
ROA not before: Tue 05 May 2026 16:44:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200019
IP address blocks: 2.27.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f9:06:8c:ef:36:1f:eb:1c:7f:bd:15:56:bf:07:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 5 16:44:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=318533f9660bc629ff0ed578b893481258f0a2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:45:c8:e8:99:08:0a:ab:5c:49:48:3c:8d:19:
27:9e:0c:09:ff:ba:5e:8d:ac:9c:fb:0b:8e:3f:d5:
3d:fe:3e:cf:6e:09:40:f0:65:d6:3b:5f:0c:c6:48:
b2:16:21:b0:b5:c5:c3:71:ff:fc:ba:e2:f9:79:1b:
bf:00:d9:a0:eb:f5:2b:37:10:73:16:26:e2:e1:b9:
c2:92:55:d8:77:fc:96:2e:16:d2:39:30:83:76:e4:
ec:b4:f3:53:00:a9:f3:a9:3b:a6:96:44:66:f1:a8:
0a:97:fe:7c:0f:dc:d5:a4:97:0d:0c:2d:36:77:40:
a9:20:bb:27:c0:e1:99:12:dc:4e:40:37:35:56:3c:
3d:0a:a4:45:7d:1e:93:56:eb:0f:97:ca:5f:70:5b:
01:35:c3:cf:50:16:5c:8a:d6:d3:aa:38:74:21:db:
9f:58:47:47:a7:e6:39:87:56:c2:e6:79:d7:13:83:
0b:bd:be:d1:90:7b:2d:48:ab:4a:24:88:c3:4d:b2:
27:63:12:dc:26:80:e5:9b:32:9e:a2:e6:53:3e:8e:
f8:59:e4:32:04:50:18:dd:81:38:23:cf:7d:63:e8:
b8:de:b4:94:18:e4:64:20:9f:c0:a7:09:18:fd:d9:
2c:e3:1e:cf:94:d7:33:75:14:6c:87:4d:c2:e8:60:
92:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:85:33:F9:66:0B:C6:29:FF:0E:D5:78:B8:93:48:12:58:F0:A2:E3
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MYUz-WYLxin_DtV4uJNIEljwouM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.162.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:38:cb:50:6d:ab:0c:b2:64:51:5f:ad:c6:12:6a:31:81:3a:
65:dc:6b:33:18:79:9a:33:57:f3:04:7e:ee:88:4e:41:9a:6c:
25:55:3b:8d:fb:1e:0c:33:74:49:32:30:32:f2:63:ee:c8:78:
86:2b:c6:ad:94:30:46:5d:d0:25:7c:e4:17:a5:14:ad:9a:53:
fd:9b:61:e1:3b:11:6c:4c:62:87:2a:54:86:e9:a5:6b:60:81:
bc:7a:91:08:6d:5e:39:ea:7c:ee:53:09:f3:cf:95:f0:f2:af:
3c:7e:79:1f:d6:15:d2:4e:70:5a:0c:d9:11:c6:a3:f1:e4:e1:
55:cc:15:9a:72:85:ae:8e:d3:81:c0:5b:6b:ba:11:89:ce:bf:
7d:1a:39:9c:ca:08:82:b5:8c:1b:58:72:61:89:b9:df:78:8c:
bf:12:72:20:c6:da:be:0f:4e:a0:14:8a:ac:a5:bd:d6:20:f5:
55:a0:8c:5f:ff:47:04:d6:94:91:4b:e9:23:9b:d4:67:24:b2:
fe:e7:a9:39:62:2c:32:f8:08:7c:33:33:67:98:d4:ed:6d:7f:
77:92:d2:15:e3:bc:e4:79:92:54:b7:7d:ab:67:d3:29:fb:05:
ff:ed:00:24:e8:fd:68:19:2e:04:a3:31:b2:0c:5d:73:bc:eb:
69:f8:75:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:43:26 2026 by rpki-client