Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/RticOpdqHUu3WIufWJJ91kCv5VM.roa
File: RticOpdqHUu3WIufWJJ91kCv5VM.roa (raw, json)
Hash identifier: Kp9aTT2zq2PAc18yRI5+nHW4iheKec74HRsPXs248nc=
Subject key identifier: 46:D8:9C:3A:97:6A:1D:4B:B7:58:8B:9F:58:92:7D:D6:40:AF:E5:53
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D79D4789FDE600CA2952EE7A51EA8D33C
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/RticOpdqHUu3WIufWJJ91kCv5VM.roa
Signing time: Fri 10 Apr 2026 23:57:40 +0000
ROA not before: Fri 10 Apr 2026 23:57:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51847
IP address blocks: 2.26.156.0/24 maxlen: 24
2.27.128.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:79:d4:78:9f:de:60:0c:a2:95:2e:e7:a5:1e:a8:d3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 10 23:57:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46d89c3a976a1d4bb7588b9f58927dd640afe553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:85:df:56:09:8c:9b:11:d3:34:e6:37:2c:87:
b4:d1:1c:78:48:a9:63:57:8a:8b:f3:88:22:29:81:
33:83:c2:02:ce:a9:3b:c0:24:68:c4:da:65:87:74:
87:cc:be:99:ca:fd:b3:4a:96:69:2b:62:49:19:fa:
38:87:62:b7:ac:6e:f5:fd:97:4d:68:3e:0f:c3:c2:
25:10:41:30:42:3e:88:84:b4:8c:38:ec:cb:93:17:
3a:27:c8:50:7c:63:02:a3:29:e2:4a:c7:02:ba:41:
e3:0b:71:af:57:b6:70:8a:c4:d8:cf:f3:d4:4d:6e:
49:3e:ad:b5:4b:80:b0:c5:ea:ba:28:18:bd:0e:3a:
d5:3a:01:19:ea:fb:b4:07:1f:26:92:e6:de:17:2c:
74:95:59:79:8d:fd:ed:24:3a:dc:95:e4:e3:44:80:
fa:f4:e8:1e:eb:b2:9e:b6:1e:2d:31:a6:9a:c6:06:
60:ad:db:71:d6:0c:0f:c3:64:33:df:4e:75:52:74:
f1:f0:30:74:7f:bb:a9:67:d6:4e:27:09:73:0f:bb:
aa:f1:c3:ac:af:c2:61:15:b2:fb:36:ff:3e:66:a3:
13:48:4f:7e:32:db:84:a6:9a:40:eb:0e:49:d1:f4:
82:6b:5c:88:03:20:39:48:c5:7c:bf:0b:6c:55:4b:
52:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D8:9C:3A:97:6A:1D:4B:B7:58:8B:9F:58:92:7D:D6:40:AF:E5:53
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/RticOpdqHUu3WIufWJJ91kCv5VM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.156.0/24
2.27.128.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:0a:c0:6f:ce:d4:9b:b9:0c:1e:78:b1:db:d1:6a:65:95:9a:
89:7b:1f:09:37:10:74:af:41:c4:e2:e1:df:fc:44:77:b1:72:
f2:df:03:68:96:37:8f:c6:14:e7:8e:e7:1e:e0:77:55:df:36:
46:a0:2c:5a:0a:65:21:bc:2a:ba:17:68:f9:80:a4:8c:3e:b2:
17:2f:1c:98:39:24:3e:9e:0f:e2:77:ad:e2:f9:9e:1b:d7:81:
9b:6d:16:a5:3c:87:57:cf:85:eb:a4:e8:60:cd:a9:3d:a6:fe:
19:47:70:8c:fa:30:71:08:b6:f0:b7:d2:fd:85:f6:5c:4c:6a:
ff:16:ba:67:f4:fb:8f:84:60:51:48:50:40:9e:c2:e2:72:0b:
05:fb:78:fb:6f:fe:5b:21:29:c0:df:ab:22:6f:ef:e9:73:a4:
82:96:dd:7a:c9:71:11:2a:b6:e7:c9:b1:66:de:2a:12:29:03:
72:09:0a:40:f0:a9:ea:0b:69:00:83:d9:d6:05:82:40:8f:ce:
2a:ba:17:42:3b:4d:42:3e:ca:76:88:6b:c4:5e:9c:11:cf:1e:
c3:90:77:c4:66:51:f4:a3:f7:77:13:31:d8:23:4c:0f:c6:13:
49:42:41:2c:45:9c:af:0b:48:2b:73:36:2a:bc:96:b0:b2:3f:
4a:60:55:df
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ151Hif3mAMopUu56UeqNM8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNDEwMjM1NzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmQ4OWMzYTk3NmExZDRiYjc1ODhiOWY1ODkyN2RkNjQwYWZlNTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYXfVgmMmxHTNOY3LIe00Rx4SKlj
V4qL84giKYEzg8ICzqk7wCRoxNplh3SHzL6Zyv2zSpZpK2JJGfo4h2K3rG71/ZdN
aD4Pw8IlEEEwQj6IhLSMOOzLkxc6J8hQfGMCoyniSscCukHjC3GvV7ZwisTYz/PU
TW5JPq21S4Cwxeq6KBi9DjrVOgEZ6vu0Bx8mkubeFyx0lVl5jf3tJDrcleTjRID6
9Oge67Keth4tMaaaxgZgrdtx1gwPw2Qz3051UnTx8DB0f7upZ9ZOJwlzD7uq8cOs
r8JhFbL7Nv8+ZqMTSE9+MtuEpppA6w5J0fSCa1yIAyA5SMV8vwtsVUtSZwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEbYnDqXah1Lt1iLn1iSfdZAr+VTMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvUnRpY09wZHFIVXUzV0l1ZldKSjkxa0N2NVZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAhqcAwQB
AhuAMA0GCSqGSIb3DQEBCwUAA4IBAQAqCsBvztSbuQweeLHb0WpllZqJex8JNxB0
r0HE4uHf/ER3sXLy3wNoljePxhTnjuce4HdV3zZGoCxaCmUhvCq6F2j5gKSMPrIX
LxyYOSQ+ng/id63i+Z4b14GbbRalPIdXz4XrpOhgzak9pv4ZR3CM+jBxCLbwt9L9
hfZcTGr/Frpn9PuPhGBRSFBAnsLicgsF+3j7b/5bISnA36sib+/pc6SClt16yXER
KrbnybFm3ioSKQNyCQpA8KnqC2kAg9nWBYJAj84quhdCO01CPsp2iGvEXpwRzx7D
kHfEZlH0o/d3EzHYI0wPxhNJQkEsRZyvC0grczYqvJawsj9KYFXf
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:18:08 2026 by rpki-client