Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OvZjIiYwy5QR4X-MaevyWh0demQ.roa
File: OvZjIiYwy5QR4X-MaevyWh0demQ.roa (raw, json)
Hash identifier: EgeiOIQs/0Od+3kr+Vp1LGdHGHuxUOqMaR35fmsqPLw=
Subject key identifier: 3A:F6:63:22:26:30:CB:94:11:E1:7F:8C:69:EB:F2:5A:1D:1D:7A:64
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D25B1C032A6C599D3971BEB809FC6FDF5
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OvZjIiYwy5QR4X-MaevyWh0demQ.roa
Signing time: Wed 25 Mar 2026 15:51:39 +0000
ROA not before: Wed 25 Mar 2026 15:51:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152460
IP address blocks: 2.27.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:b1:c0:32:a6:c5:99:d3:97:1b:eb:80:9f:c6:fd:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 25 15:51:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3af663222630cb9411e17f8c69ebf25a1d1d7a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:ed:dd:2a:af:1b:0f:c7:ee:68:49:31:c7:
d7:46:72:fb:9b:b6:ce:2e:12:62:8d:7e:3e:d3:77:
54:b4:c7:9c:38:04:fc:d9:80:7c:ef:80:d4:d0:7b:
c4:ad:4c:eb:6c:c0:3d:cc:e6:3f:2f:e8:0e:3b:72:
b9:35:5b:5a:85:61:43:64:e5:af:dd:95:b0:96:6a:
be:82:6a:3b:8b:20:eb:2c:bf:ce:c1:e7:20:a0:73:
d3:97:b3:2d:33:1b:0b:7f:75:96:bf:4a:ae:17:72:
fe:41:2a:46:fc:a7:3f:76:dc:ed:df:19:f3:bf:f0:
a5:d3:eb:f3:2c:3e:1a:ba:bf:fe:d0:57:30:e5:26:
2d:a9:f1:b5:b8:1a:9d:f4:82:21:d8:73:1a:4b:3a:
9d:84:b8:e4:84:e6:0f:4f:98:ad:02:3a:53:a6:c2:
7d:32:dc:9e:57:2b:44:77:42:8b:a8:3e:ed:76:d4:
0a:b8:d1:b7:09:52:58:d0:29:c4:31:a3:b2:7c:19:
80:a4:43:b9:57:10:07:bc:d5:c4:ff:22:e1:c6:6a:
13:0c:13:c6:ad:88:24:8f:d5:54:66:1b:a8:79:8b:
c7:ee:8e:3b:7d:52:9d:9d:02:74:62:09:12:f8:cf:
a8:e3:66:7d:74:5e:e6:7f:dd:db:42:cb:d6:a5:4c:
e8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F6:63:22:26:30:CB:94:11:E1:7F:8C:69:EB:F2:5A:1D:1D:7A:64
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OvZjIiYwy5QR4X-MaevyWh0demQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.245.0/24
Signature Algorithm: sha256WithRSAEncryption
02:18:0b:ff:1c:53:3a:fa:7b:b7:48:93:b6:38:cf:86:67:63:
8b:10:1f:ff:cb:f0:02:bd:06:d8:14:11:6b:ff:d3:90:fe:3d:
7a:7b:79:00:66:9b:dd:2f:0a:0f:e5:29:8b:9e:a2:f7:cb:3b:
9a:20:96:13:a1:a2:4f:f6:10:4b:2d:2f:a3:fb:c0:63:0f:3d:
c9:54:95:b9:3e:eb:20:9a:c3:cb:56:85:e0:8a:58:d0:0b:d6:
e3:ca:fe:2c:33:dc:21:3b:41:e2:a3:e9:3b:a5:14:03:9e:84:
65:54:ae:7e:5b:d3:03:f3:0b:ef:e3:8d:47:b4:16:bc:dc:a8:
9e:50:3a:83:95:83:1f:62:d2:ef:7d:c2:57:7a:8a:57:62:16:
20:1e:2d:df:af:5a:88:9a:5c:81:85:2e:b6:47:c7:eb:16:2e:
77:6f:0a:fa:61:06:8a:79:8b:bf:73:4b:d6:72:73:f8:90:16:
ff:0b:c5:06:b4:b7:d1:4c:cb:33:0d:e4:42:f2:5f:d5:fa:37:
b6:23:90:fd:2e:c3:54:34:30:da:b2:ca:b8:19:74:ff:f0:7c:
8a:b4:2c:02:23:63:4c:60:07:8f:19:13:a7:a1:58:d7:19:f4:
e6:83:a2:5c:cf:bd:e0:52:bc:88:24:1a:c8:fd:fb:f7:56:87:
9f:0c:d5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:00:54 2026 by rpki-client