Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GQSmOsHzjg9IIbheO5uT5GDXpZg.roa
File: GQSmOsHzjg9IIbheO5uT5GDXpZg.roa (raw, json)
Hash identifier: B6WtCG1Rh4heTJiP/FKoTaeGbAWD51keAbt4Q2v8vLY=
Subject key identifier: 19:04:A6:3A:C1:F3:8E:0F:48:21:B8:5E:3B:9B:93:E4:60:D7:A5:98
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0E985314EE5D722C927B3305F468736CB
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GQSmOsHzjg9IIbheO5uT5GDXpZg.roa
Signing time: Mon 28 Sep 2026 19:36:55 +0000
ROA not before: Mon 28 Sep 2026 19:36:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207567
IP address blocks: 2.26.124.0/23 maxlen: 24
2.26.254.0/24 maxlen: 24
2.26.255.0/24 maxlen: 24
2.27.12.0/22 maxlen: 24
31.76.240.0/23 maxlen: 24
77.239.112.0/24 maxlen: 24
77.239.114.0/24 maxlen: 24
144.31.215.0/24 maxlen: 24
150.241.65.0/24 maxlen: 24
150.241.68.0/24 maxlen: 24
150.241.92.0/24 maxlen: 24
191.217.247.0/24 maxlen: 24
191.217.248.0/24 maxlen: 24
191.217.249.0/24 maxlen: 24
193.23.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:85:31:4e:e5:d7:22:c9:27:b3:30:5f:46:87:36:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 28 19:36:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1904a63ac1f38e0f4821b85e3b9b93e460d7a598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a5:65:aa:1d:c8:c6:60:73:6c:ad:47:d5:02:
25:4b:85:d2:9a:d4:d9:c6:33:c3:f6:53:a7:68:dd:
fe:5f:15:f9:10:6c:bf:8b:f1:7b:c1:50:41:01:70:
d0:3e:eb:66:ef:9a:d0:1a:fc:57:bc:39:fd:af:25:
96:3a:14:b2:a8:fc:87:38:df:43:4e:b0:82:df:15:
b6:e0:5b:e9:ce:5f:96:ef:0a:16:e2:0a:07:25:46:
31:fc:04:03:79:95:0c:eb:f3:82:e7:11:76:f3:d9:
c2:0a:b9:de:fa:77:7f:7c:a6:97:b9:ba:c7:3e:48:
40:ff:e2:27:61:62:c3:d1:b0:92:29:70:e8:a8:7a:
6a:1f:de:b0:00:88:ec:d7:3f:40:29:f3:0d:94:5c:
eb:a1:ea:dd:e3:50:8f:a9:56:e5:26:f4:0a:53:cf:
f7:27:0c:8a:96:aa:f9:67:b2:41:9a:47:e9:98:e7:
fd:4c:c7:d1:e1:b9:fe:40:2a:d7:77:f8:fc:e8:3b:
e5:fb:fa:a2:e3:4e:d3:e0:6c:5a:f0:e9:49:49:76:
2d:54:98:3a:7b:11:20:88:82:61:0a:eb:7a:cf:23:
a2:eb:55:fe:ce:4f:c4:0e:40:d6:54:a1:a9:a3:77:
eb:b8:c3:09:34:c3:b7:69:95:bb:71:dd:ad:c5:21:
90:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:04:A6:3A:C1:F3:8E:0F:48:21:B8:5E:3B:9B:93:E4:60:D7:A5:98
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GQSmOsHzjg9IIbheO5uT5GDXpZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.124.0/23
2.26.254.0/23
2.27.12.0/22
31.76.240.0/23
77.239.112.0/24
77.239.114.0/24
144.31.215.0/24
150.241.65.0/24
150.241.68.0/24
150.241.92.0/24
191.217.247.0-191.217.249.255
193.23.222.0/24
Signature Algorithm: sha256WithRSAEncryption
51:25:f7:bf:73:a2:aa:9a:0d:42:57:96:5b:81:33:b3:51:67:
a4:df:1f:2f:d6:f5:12:71:67:ac:f6:a4:3b:81:b1:e0:cf:19:
1e:03:38:e0:0d:95:cf:97:d6:45:0a:e0:ca:6c:44:1a:cf:6a:
80:89:33:79:54:06:ab:96:11:b8:fb:c8:e2:81:2f:2a:4f:69:
89:4c:d7:20:04:b5:a4:7e:19:fd:7b:76:46:d2:26:6d:e7:43:
62:36:9b:5c:57:11:b9:5b:e0:fb:c0:d1:cb:2c:16:ef:44:99:
da:31:a4:82:e2:71:cc:0e:aa:f1:42:f1:f5:7f:39:87:31:76:
1a:0c:f6:52:ba:2c:b1:bb:83:e8:f4:dc:8a:4e:db:e3:ea:e4:
d9:fa:2d:e7:30:e8:61:ee:c6:05:a4:e4:ae:92:e5:13:d7:12:
91:5f:0e:88:96:d3:da:24:01:a8:de:a2:84:b1:c3:b9:f7:e7:
28:39:08:dc:f5:38:c3:7c:74:77:92:43:9e:05:ff:5c:fb:e1:
bd:24:3c:ba:c9:f3:e4:33:00:fc:9e:80:ff:5a:98:51:41:3e:
14:65:e4:a6:0c:d2:fd:fc:22:ea:fd:71:78:c1:26:52:37:bc:
8e:a8:89:24:04:eb:eb:b1:b6:23:b7:b1:8a:15:b6:40:b0:3d:
22:e3:68:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:16:42 2026 by rpki-client