Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/02f8zeub4En3g0YvGFuFw_OzKbM.roa
File: 02f8zeub4En3g0YvGFuFw_OzKbM.roa (raw, json)
Hash identifier: Ben2d2zqZGMM1sp6v/uf7z6tS6tY60J4HQ1OsfAturU=
Subject key identifier: D3:67:FC:CD:EB:9B:E0:49:F7:83:46:2F:18:5B:85:C3:F3:B3:29:B3
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019EDC258D0ADAABDA6F410004F18DD2E485
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/02f8zeub4En3g0YvGFuFw_OzKbM.roa
Signing time: Thu 18 Jun 2026 19:11:48 +0000
ROA not before: Thu 18 Jun 2026 19:11:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199180
IP address blocks: 2.26.12.0/24 maxlen: 24
2.26.13.0/24 maxlen: 24
2.26.14.0/24 maxlen: 24
2.26.15.0/24 maxlen: 24
2.26.144.0/24 maxlen: 24
2.27.6.0/24 maxlen: 24
31.76.36.0/24 maxlen: 24
31.76.92.0/24 maxlen: 24
31.76.121.0/24 maxlen: 24
31.76.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dc:25:8d:0a:da:ab:da:6f:41:00:04:f1:8d:d2:e4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 18 19:11:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d367fccdeb9be049f783462f185b85c3f3b329b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d0:6e:e0:7f:08:61:35:f7:b3:1c:f3:77:70:
df:8f:f7:40:f4:b2:3f:9e:62:e1:fb:b5:1e:98:e6:
33:cb:37:a4:14:61:33:ee:b8:c4:f6:58:7a:64:6c:
1a:60:e0:ba:10:f2:8f:70:2f:6f:0d:67:91:50:d6:
73:af:00:af:0a:45:5e:0a:4f:82:1e:30:58:81:c5:
36:e2:19:3d:00:86:58:68:2f:2b:eb:4c:9c:1f:e1:
56:1f:12:27:ff:02:c4:b0:6a:71:23:29:bc:d4:81:
e2:95:b4:79:68:6b:55:d1:6e:49:f0:16:b7:82:45:
6d:1d:15:4a:df:bd:fc:0d:e0:14:20:fc:05:6e:9d:
7a:29:3c:a5:5e:a1:f6:0f:9f:20:3f:6b:d9:04:ef:
dc:63:3a:7f:5b:01:f0:b7:32:04:e2:f9:f0:20:40:
99:7d:d6:40:7a:55:9f:27:bb:a2:14:7d:ed:4e:eb:
2a:36:7d:40:6b:57:19:93:3f:35:5a:92:45:28:76:
5f:a1:1f:ed:09:98:d8:f2:2d:c3:68:b0:89:00:43:
41:a3:59:cb:6b:5e:46:5d:23:ae:e8:d4:7a:94:ab:
02:ac:f7:0d:bc:72:e0:1b:c1:1e:8d:dd:fe:d8:16:
de:f6:95:13:9c:77:72:64:c5:af:92:a8:1f:43:54:
df:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:67:FC:CD:EB:9B:E0:49:F7:83:46:2F:18:5B:85:C3:F3:B3:29:B3
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/02f8zeub4En3g0YvGFuFw_OzKbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.12.0/22
2.26.144.0/24
2.27.6.0/24
31.76.36.0/24
31.76.92.0/24
31.76.121.0/24
31.76.254.0/24
Signature Algorithm: sha256WithRSAEncryption
21:6e:e8:44:1e:e4:25:3d:71:b6:ec:35:77:79:bf:52:a5:5c:
36:bc:30:36:f6:6b:cd:de:ba:c4:25:4a:35:5e:da:25:77:d9:
31:74:d1:24:bd:ca:e9:99:fb:e9:54:3c:47:b2:24:98:7e:ee:
f8:7f:ac:1b:d5:91:bd:be:11:94:c6:65:53:4c:88:08:e8:24:
29:54:e7:30:d6:a9:d9:10:ff:13:98:06:8f:13:8a:cd:db:72:
44:ac:64:9e:cb:6a:9b:d1:95:31:64:f2:01:64:bf:99:9b:85:
0f:c0:bd:73:cf:fd:41:0e:20:7d:30:f4:80:8a:77:74:d4:db:
f9:27:2f:e0:6d:c9:0f:4e:e6:7a:86:e3:96:18:be:48:c2:c6:
63:81:ba:19:53:a4:cd:9f:2d:05:09:7a:85:9a:d3:06:62:83:
29:b3:2f:63:28:a5:0b:07:30:7d:c3:cb:cd:6b:ea:e6:a3:7b:
be:01:fe:67:3d:3f:14:4e:01:e8:73:7b:7c:cc:f6:3e:55:cd:
21:a1:1b:90:4a:97:89:1a:9d:30:fb:61:15:d1:ef:c3:30:63:
9e:1a:00:9d:c1:18:d4:86:31:29:09:b5:5b:82:32:f3:26:0a:
5f:41:03:22:8f:ff:7d:31:95:1c:c6:ff:c9:e1:6d:c9:52:6a:
85:92:f7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:05:18 2026 by rpki-client