Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/EquU4L8Kv7khTOqfNG__0XF3I-w.roa
File: EquU4L8Kv7khTOqfNG__0XF3I-w.roa (raw, json)
Hash identifier: NohV11Ljyitn2R/jCMMkj0TmroW/7LLxVzwMoZjHZV8=
Subject key identifier: 12:AB:94:E0:BF:0A:BF:B9:21:4C:EA:9F:34:6F:FF:D1:71:77:23:EC
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D354837F81432E9399FD237D75D0D329B
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/EquU4L8Kv7khTOqfNG__0XF3I-w.roa
Signing time: Sat 28 Mar 2026 16:30:18 +0000
ROA not before: Sat 28 Mar 2026 16:30:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147003
IP address blocks: 2.27.128.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:48:37:f8:14:32:e9:39:9f:d2:37:d7:5d:0d:32:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 28 16:30:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12ab94e0bf0abfb9214cea9f346fffd1717723ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:eb:3c:25:f7:f2:a8:68:11:9e:6c:9d:7a:02:
d7:c2:4b:e5:24:50:48:cc:e3:a8:ce:5d:49:83:81:
b3:8e:35:6c:75:31:0c:1e:1e:5b:53:03:91:ef:90:
ad:09:00:aa:a6:96:62:b1:97:2e:47:56:12:47:62:
a0:69:c5:eb:5c:28:78:fa:1e:39:fb:02:1a:22:55:
cc:57:24:45:f6:b6:59:e1:9b:ba:3a:92:69:4a:54:
1e:aa:2e:aa:7e:a5:c2:f8:d7:50:87:87:0d:a1:62:
2f:a1:64:62:1c:f8:dc:35:83:12:0a:01:a4:76:0e:
7a:06:86:85:cc:1d:0a:9c:24:b6:d4:f8:0f:7f:5e:
dd:76:b8:21:ca:82:91:2e:f5:5e:f9:38:e3:0d:dc:
02:2d:3b:ae:96:30:5c:2b:05:ae:bd:e9:48:da:12:
94:a7:76:cf:94:15:db:a4:8b:62:3b:f3:dd:75:00:
03:ab:db:5a:ae:4d:84:e5:78:6a:60:5d:3d:af:c6:
b4:3e:81:06:3e:e9:4d:81:24:9f:5c:15:6f:dc:56:
0a:60:59:7a:cf:79:70:a4:67:57:98:93:dc:78:e0:
64:8f:d5:52:ed:0e:8a:0b:8d:14:b9:07:9f:62:a6:
5c:75:2a:3c:f9:ab:68:a0:e2:06:c5:9b:ed:23:08:
5a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AB:94:E0:BF:0A:BF:B9:21:4C:EA:9F:34:6F:FF:D1:71:77:23:EC
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/EquU4L8Kv7khTOqfNG__0XF3I-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.128.0/23
Signature Algorithm: sha256WithRSAEncryption
54:42:55:89:ba:91:f1:f8:49:87:7b:3a:3f:79:91:18:fb:df:
52:13:fb:37:41:6e:1c:b1:73:d0:a1:cf:f1:43:6d:04:12:15:
75:a3:0e:47:25:45:69:12:b4:7d:2c:1d:99:a4:8b:f5:27:72:
fc:4e:5a:67:1c:6f:fa:a0:41:73:c8:e2:c9:ed:cf:44:65:0e:
4b:80:9b:24:05:06:f1:b6:f8:d8:54:a2:d9:81:3d:ab:55:e3:
c8:48:4e:c2:91:e5:ca:c1:58:82:8e:65:e7:00:e5:e2:ab:7a:
17:ea:8b:9e:88:9e:78:5a:b6:82:a2:42:08:19:2d:67:99:48:
01:e7:0c:08:70:6d:c7:d4:8f:48:38:b1:ce:5c:4e:b1:0d:98:
25:8e:94:70:b9:31:ff:8e:91:bc:1a:cc:cb:25:bc:3e:96:ff:
79:fa:16:42:99:cf:05:39:5e:08:47:bd:66:57:24:f0:e3:4b:
9e:ad:86:63:3b:db:3d:c0:5f:1b:95:35:5d:21:9a:60:40:61:
a8:58:09:f4:2a:c1:c3:69:23:f4:97:33:03:09:4a:f3:27:03:
6c:ee:35:31:be:c9:75:ea:7c:6f:97:5f:47:ca:f5:57:f6:af:
a1:5e:b6:80:88:f0:1f:8e:75:36:bc:60:85:d6:f7:1d:50:22:
a0:5d:fb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:39 2026 by rpki-client