Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/t-OugipETI2YfFaISEFYlkSVGzM.roa
File: t-OugipETI2YfFaISEFYlkSVGzM.roa (raw, json)
Hash identifier: hjUBFkZEPUTvUU8Ai9FsMjF8N1kVC1rmmrpK6mAljRY=
Subject key identifier: B7:E3:AE:82:2A:44:4C:8D:98:7C:56:88:48:41:58:96:44:95:1B:33
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1AE69134FF59E7F2C68EB6AE9DE345AEF
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/t-OugipETI2YfFaISEFYlkSVGzM.roa
Signing time: Fri 06 Nov 2026 01:11:24 +0000
ROA not before: Fri 06 Nov 2026 01:11:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137897
IP address blocks: 2.27.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ae:69:13:4f:f5:9e:7f:2c:68:eb:6a:e9:de:34:5a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 6 01:11:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7e3ae822a444c8d987c56884841589644951b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:65:14:48:4b:c0:c6:fe:29:47:f2:cb:29:1a:
57:9d:49:cc:b4:e5:bf:1b:8c:d8:76:2f:69:57:69:
bf:55:b9:ad:e8:df:d0:00:e1:f2:eb:51:0b:99:f9:
5d:6e:3b:99:ab:e4:e4:c5:aa:59:e4:d2:fc:32:38:
f2:55:a9:49:da:65:0b:21:20:ee:9c:37:d5:c0:ec:
86:67:fa:65:8a:eb:bc:ca:f3:43:98:44:52:c0:5d:
40:0b:39:cc:61:e5:ad:ea:36:14:21:66:ac:28:df:
fb:95:e3:90:2d:e8:e7:e0:9f:81:f0:d3:e3:a4:22:
c7:da:31:6e:29:fd:e5:82:29:48:ff:fd:6b:ef:85:
ab:5b:90:ed:5f:17:9d:d5:f1:46:fc:c4:ba:58:bb:
8c:96:99:fa:ad:6f:e3:f9:c8:1c:bd:5d:91:5f:1a:
74:99:a6:e3:5f:b5:83:c3:f7:fd:a6:03:26:d0:ab:
96:80:c9:54:ae:a5:8b:e8:bc:46:46:81:d8:a4:cd:
d6:44:8a:cf:07:8c:f4:2a:22:77:4b:3d:ea:48:2e:
49:d9:db:2e:6c:c6:79:1a:eb:e0:c1:11:2c:70:bb:
94:05:a2:f1:ee:c2:a3:06:b0:01:cf:b4:19:69:d6:
e1:77:63:31:87:ed:1e:03:67:f7:32:73:d6:50:0e:
74:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E3:AE:82:2A:44:4C:8D:98:7C:56:88:48:41:58:96:44:95:1B:33
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/t-OugipETI2YfFaISEFYlkSVGzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.134.0/23
Signature Algorithm: sha256WithRSAEncryption
29:f6:02:3f:a0:04:17:68:91:51:28:cd:77:be:e9:d0:6e:3c:
e1:f1:3c:06:7a:66:0e:da:7f:54:47:8a:35:70:98:54:f4:58:
db:ae:c9:ff:ca:f8:14:47:84:cb:7d:90:43:d2:1f:b6:c2:5e:
24:87:cd:c0:d2:dc:25:d4:28:dd:89:06:d6:90:e9:f8:c6:c7:
74:c8:ad:bb:8a:64:a3:2e:6e:bb:68:ca:7d:e0:00:85:5d:82:
e3:6b:65:cf:c0:db:8f:9f:7c:f2:5b:ec:47:d8:fb:00:28:e1:
6c:00:5b:53:b2:04:54:fe:f8:90:72:ee:ae:c6:9e:50:e8:30:
a9:59:1d:69:50:0a:d7:f8:f0:f1:74:d3:7e:f6:c3:b6:44:d9:
83:e9:c4:8e:c6:15:e4:64:f8:7d:2d:2c:97:3c:47:f3:25:de:
76:81:c9:d2:95:18:c8:63:2b:22:b8:3b:db:12:92:3e:a5:7b:
8c:8d:98:87:bb:8c:74:f4:cf:1c:85:77:70:77:4f:c9:73:2b:
46:a2:1b:46:7e:30:bc:1d:32:b6:c9:b2:a7:ea:dd:1c:6a:28:
75:58:f2:3d:9f:2b:cc:92:93:da:6f:98:9e:ad:43:d3:9c:9c:
cf:92:ed:f3:7d:08:ba:d5:4c:82:22:58:a9:41:6a:da:b3:0c:
52:cb:d3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:14:56 2026 by rpki-client