Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MzerRuHGmpXG3-4VS2CjW2RF854.roa
File: MzerRuHGmpXG3-4VS2CjW2RF854.roa (raw, json)
Hash identifier: AteOR330Hi8YdK5HcVVq7qdSQhq/oiNBzbd3+QY0I18=
Subject key identifier: 33:37:AB:46:E1:C6:9A:95:C6:DF:EE:15:4B:60:A3:5B:64:45:F3:9E
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F2E2EC5B48B86856B7E5D5E7E7E0502F2
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MzerRuHGmpXG3-4VS2CjW2RF854.roa
Signing time: Sat 04 Jul 2026 17:30:44 +0000
ROA not before: Sat 04 Jul 2026 17:30:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215186
IP address blocks: 2.27.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2e:2e:c5:b4:8b:86:85:6b:7e:5d:5e:7e:7e:05:02:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 4 17:30:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3337ab46e1c69a95c6dfee154b60a35b6445f39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3d:d2:38:ae:ed:3c:86:28:64:f1:e2:4c:e9:
16:48:42:96:4a:8d:05:30:22:87:1e:d8:1d:04:b3:
bd:b0:a7:a8:92:b5:4d:f6:af:e1:d5:65:30:9c:44:
24:ef:30:51:ff:4f:a0:53:b9:2b:d4:b2:a8:31:c7:
1f:ea:7e:93:86:2a:0d:ac:f1:c6:36:6f:c2:b2:14:
56:32:00:a3:4d:28:d2:f0:23:b0:0f:20:7e:34:05:
a3:d9:e1:11:e7:1a:07:ab:58:11:51:88:2e:c8:bd:
7c:8d:9a:db:cc:88:e2:73:3c:ea:ba:a9:2e:cd:f3:
07:dd:c3:2b:b7:0e:12:2c:28:2d:30:74:f2:0e:d9:
a4:0a:11:2d:61:a8:b0:ab:2e:51:1b:e2:c2:5d:be:
c4:e1:0d:55:86:6a:56:94:83:51:27:44:c7:cf:3d:
1b:1a:f7:f9:15:a5:89:fa:69:8d:de:30:73:8f:91:
1f:6b:ed:02:ba:5e:45:a6:46:20:25:ea:4b:4e:ac:
b7:aa:f7:fa:08:46:48:a2:df:a7:90:44:b2:b5:06:
d7:15:de:a9:a6:af:e6:f4:a2:fd:27:60:c7:99:77:
98:f4:6d:86:71:32:23:dd:11:b1:59:b1:ce:28:74:
69:8a:aa:04:97:cc:f6:3a:9d:82:fa:a4:21:f3:bc:
62:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:37:AB:46:E1:C6:9A:95:C6:DF:EE:15:4B:60:A3:5B:64:45:F3:9E
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MzerRuHGmpXG3-4VS2CjW2RF854.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.240.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:a2:63:1e:c9:9e:9f:25:1f:ee:27:af:f0:64:bd:59:4f:52:
d4:5c:d7:d1:e9:1e:dd:64:09:d8:6d:e2:63:de:87:32:87:f3:
04:e1:0c:1a:61:5e:a9:7f:ca:77:23:32:66:04:3b:1e:6f:19:
61:96:58:a6:89:48:ea:7e:14:17:1d:01:25:5a:ac:73:dc:15:
e1:c3:68:8c:72:cf:17:03:6b:c2:05:f4:c8:a7:2e:4d:6d:1f:
a9:5d:1a:23:49:06:b7:0c:21:72:72:fe:53:67:24:22:e3:e1:
ca:03:04:29:cf:45:9e:c1:2f:6a:3d:a7:56:15:41:41:ba:5e:
57:b2:1c:c4:cf:7c:92:ed:de:ff:05:92:a4:7b:9e:85:9b:5f:
3a:3e:e9:1e:f1:65:19:e2:42:f1:e4:2c:c7:ed:fe:83:65:3e:
cc:74:05:c5:af:28:7f:4b:68:9f:ca:a2:1b:46:c5:22:dd:3d:
d4:d7:aa:6e:79:b4:9b:be:b5:6c:4a:59:10:57:ec:62:f0:2a:
6c:db:48:4f:f2:95:8b:f9:10:43:53:86:f4:31:24:3f:64:5c:
55:87:1b:75:29:3b:8f:f0:ef:02:43:ab:81:d7:79:b1:45:09:
3d:93:a0:a7:2e:6b:88:00:89:4d:21:30:72:9e:4c:a2:6f:56:
56:2f:96:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:42 2026 by rpki-client