Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/EVnDATpjYnWShPtneCyIKXPIzf0.roa
File: EVnDATpjYnWShPtneCyIKXPIzf0.roa (raw, json)
Hash identifier: EwwHpGtuMgD9wN0xz6PZXUB4wRalR86ddrpTpS7HBLg=
Subject key identifier: 11:59:C3:01:3A:63:62:75:92:84:FB:67:78:2C:88:29:73:C8:CD:FD
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FA47CE56A1806250DFA31A0A4479B5B97
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/EVnDATpjYnWShPtneCyIKXPIzf0.roa
Signing time: Mon 27 Jul 2026 16:51:16 +0000
ROA not before: Mon 27 Jul 2026 16:51:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402415
IP address blocks: 2.26.171.0/24 maxlen: 24
31.77.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:7c:e5:6a:18:06:25:0d:fa:31:a0:a4:47:9b:5b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 27 16:51:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1159c3013a6362759284fb67782c882973c8cdfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c3:4e:85:fc:77:2e:1b:cd:f8:4a:5e:ec:f9:
e3:4b:f4:bf:e1:a5:5f:e3:c0:27:9b:a4:89:4a:b8:
63:50:8b:1d:d8:6e:af:43:a3:ea:c5:c3:95:7b:ee:
24:ee:35:3f:5c:de:c7:aa:0b:af:46:e5:b5:af:f6:
f3:4b:fe:45:4f:a0:93:8e:01:86:c4:be:7e:e9:42:
2f:79:8c:a9:13:a7:6b:09:1f:5d:5e:71:4e:27:fa:
34:55:76:22:e6:19:69:2e:c2:ab:77:2c:42:32:cf:
51:86:01:dd:b8:63:74:be:ac:33:62:cb:57:91:9d:
ea:fc:29:c4:dc:60:b8:25:b2:95:47:eb:b0:40:a1:
f6:6f:85:23:71:c3:7d:6b:e4:5f:73:e1:1c:55:b0:
2f:89:35:cd:79:57:87:8c:a4:49:b3:88:a8:e5:b4:
36:74:60:f0:e8:65:ed:71:4d:1c:5a:a8:4f:5c:b9:
97:3f:03:80:b7:e6:94:ae:88:c2:71:63:df:24:b9:
6e:9a:9d:8a:48:15:b2:d5:9b:d4:07:89:35:e8:e7:
b2:17:b3:c1:9c:c6:9f:9a:b0:1f:af:62:57:7d:11:
0e:ea:e2:9c:d7:6a:60:2b:d2:56:2d:aa:c3:43:a7:
45:dd:cf:f4:64:94:93:ee:8f:4f:9d:1c:d8:02:61:
1f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:59:C3:01:3A:63:62:75:92:84:FB:67:78:2C:88:29:73:C8:CD:FD
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/EVnDATpjYnWShPtneCyIKXPIzf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.171.0/24
31.77.238.0/24
Signature Algorithm: sha256WithRSAEncryption
56:e9:2a:4e:28:12:89:99:19:92:18:f2:8e:bf:ed:e8:ff:3e:
47:eb:f8:b9:05:dd:48:4f:74:c5:2f:48:e4:e1:e0:8c:1c:7d:
8e:ab:12:88:a0:6a:ea:63:4e:3c:db:e4:8b:2d:b9:33:4c:ca:
27:62:31:7f:dd:e3:e2:0f:de:72:e6:d7:f1:23:ff:5a:d3:69:
14:23:9c:bb:73:22:e2:f5:e8:b4:3b:8f:bb:41:be:81:a5:fc:
b2:0f:85:65:aa:06:0e:12:d1:c0:f3:f7:b8:e8:6e:7b:73:34:
da:34:5a:f8:30:78:b4:7b:48:8d:10:3d:ba:48:28:d3:ec:bb:
fa:71:3f:5e:b8:69:48:88:f7:aa:6c:78:51:50:2c:51:fe:7a:
01:62:1f:9c:c6:2d:50:f0:7d:7f:d8:30:ee:be:fa:e2:a1:1d:
be:a0:70:1c:2b:29:bf:28:0b:88:6b:c1:ec:bd:52:72:26:df:
a2:7e:c5:55:c1:87:dd:0f:5b:b2:1a:4e:08:04:1e:df:5d:f8:
78:9f:fe:d1:d8:c3:1e:f7:d3:34:6e:f2:99:27:4c:2c:f4:b3:
92:a7:cd:0f:99:e6:83:2c:ba:59:18:86:a4:03:75:c6:92:62:
b0:4f:f8:c1:ef:27:e8:91:0b:2f:78:6d:33:91:e6:b9:c3:af:
d2:e1:39:5c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ+kfOVqGAYlDfoxoKRHm1uXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNzI3MTY1MTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTU5YzMwMTNhNjM2Mjc1OTI4NGZiNjc3ODJjODgyOTczYzhjZGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsNOhfx3LhvN+Epe7PnjS/S/4aVf
48Anm6SJSrhjUIsd2G6vQ6PqxcOVe+4k7jU/XN7HqguvRuW1r/bzS/5FT6CTjgGG
xL5+6UIveYypE6drCR9dXnFOJ/o0VXYi5hlpLsKrdyxCMs9RhgHduGN0vqwzYstX
kZ3q/CnE3GC4JbKVR+uwQKH2b4UjccN9a+Rfc+EcVbAviTXNeVeHjKRJs4io5bQ2
dGDw6GXtcU0cWqhPXLmXPwOAt+aUrojCcWPfJLlump2KSBWy1ZvUB4k16OeyF7PB
nMafmrAfr2JXfREO6uKc12pgK9JWLarDQ6dF3c/0ZJST7o9PnRzYAmEf2wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBFZwwE6Y2J1koT7Z3gsiClzyM39MB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvRVZuREFUcGpZbldTaFB0bmVDeUlLWFBJemYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAhqrAwQA
H03uMA0GCSqGSIb3DQEBCwUAA4IBAQBW6SpOKBKJmRmSGPKOv+3o/z5H6/i5Bd1I
T3TFL0jk4eCMHH2OqxKIoGrqY0482+SLLbkzTMonYjF/3ePiD95y5tfxI/9a02kU
I5y7cyLi9ei0O4+7Qb6BpfyyD4VlqgYOEtHA8/e46G57czTaNFr4MHi0e0iNED26
SCjT7Lv6cT9euGlIiPeqbHhRUCxR/noBYh+cxi1Q8H1/2DDuvvrioR2+oHAcKym/
KAuIa8HsvVJyJt+ifsVVwYfdD1uyGk4IBB7fXfh4n/7R2MMe99M0bvKZJ0ws9LOS
p80PmeaDLLpZGIakA3XGkmKwT/jB7yfokQsveG0zkea5w6/S4Tlc
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:53:30 2026 by rpki-client