Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-WFcsE0bhlFa6GneLyR-aASWuow.roa
File: 1-WFcsE0bhlFa6GneLyR-aASWuow.roa (raw, json)
Hash identifier: qcBkWFvICz/O7WQOvF18N5NRCqhTDw4bCoHIQYvLkM0=
Subject key identifier: F9:61:5C:B0:4D:1B:86:51:5A:E8:69:DE:2F:24:7E:68:04:96:BA:8C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E9381B5A06940618F49271505C30C635E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-WFcsE0bhlFa6GneLyR-aASWuow.roa
Signing time: Thu 04 Jun 2026 16:40:11 +0000
ROA not before: Thu 04 Jun 2026 16:40:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198550
IP address blocks: 2.26.124.0/23 maxlen: 24
2.26.254.0/24 maxlen: 24
2.26.255.0/24 maxlen: 24
2.27.12.0/22 maxlen: 24
31.76.120.0/24 maxlen: 24
31.76.240.0/23 maxlen: 24
144.31.28.0/24 maxlen: 24
144.31.215.0/24 maxlen: 24
150.241.65.0/24 maxlen: 24
150.241.68.0/24 maxlen: 24
150.241.87.0/24 maxlen: 24
150.241.92.0/24 maxlen: 24
193.23.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:20:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:93:81:b5:a0:69:40:61:8f:49:27:15:05:c3:0c:63:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 4 16:40:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9615cb04d1b86515ae869de2f247e680496ba8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ae:aa:d6:cf:46:39:9a:5c:57:9f:d5:8b:cd:
18:fe:10:b2:02:1f:cc:3a:ac:15:04:e8:37:66:d2:
f7:db:ae:e4:a1:55:0f:af:5b:ad:e8:b8:21:d4:5f:
ec:42:02:b1:07:90:8f:5d:3d:32:03:3a:7f:2a:4b:
7b:d5:53:bf:8c:07:43:f2:57:4f:36:0f:6f:31:8c:
a0:fb:7f:12:0b:54:6b:9b:3d:e0:3b:6b:d6:11:b6:
74:8c:f6:00:cd:ac:6e:dd:7d:66:cb:f7:d7:dd:0b:
d5:3f:9c:e8:80:e4:5d:5b:4a:c4:4a:96:42:fc:a5:
57:a2:73:0f:ee:ca:9f:2e:4e:0e:26:db:2c:3c:fa:
7a:19:4f:51:41:25:a3:10:1e:d5:33:5d:d7:7d:c8:
16:60:1b:68:f4:50:93:ee:cd:07:fc:c9:20:88:08:
b7:ce:c3:3d:6e:cb:20:6e:ea:04:94:fe:ac:34:32:
af:7d:b2:5c:65:6b:0a:bb:21:45:83:17:be:7d:f7:
94:09:da:f9:cd:b2:2f:42:5a:59:ef:06:1a:d3:bf:
a7:ee:81:03:9c:b7:81:ca:55:eb:a6:e5:fa:a8:d4:
9c:6b:da:9e:22:0d:50:5a:73:33:27:d3:24:bd:76:
89:77:69:02:e6:cd:79:63:9e:d6:ce:8a:f4:8d:17:
f1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:61:5C:B0:4D:1B:86:51:5A:E8:69:DE:2F:24:7E:68:04:96:BA:8C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-WFcsE0bhlFa6GneLyR-aASWuow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.124.0/23
2.26.254.0/23
2.27.12.0/22
31.76.120.0/24
31.76.240.0/23
144.31.28.0/24
144.31.215.0/24
150.241.65.0/24
150.241.68.0/24
150.241.87.0/24
150.241.92.0/24
193.23.222.0/24
Signature Algorithm: sha256WithRSAEncryption
69:78:7b:d0:8b:81:77:d3:f9:ce:77:54:68:e2:a5:6c:26:41:
b4:2a:ea:29:c4:53:b6:91:8c:ca:92:9a:2d:f0:79:21:5e:a6:
9a:50:1a:91:39:37:7e:d5:c9:a4:83:f9:dc:7c:80:d3:f8:85:
f1:f5:d4:78:6d:a4:8a:b2:c6:98:06:cf:19:d9:04:65:dc:b8:
e9:7f:81:0e:68:98:da:3e:02:10:a9:03:b8:42:71:6a:90:a4:
2b:bd:e8:06:62:c6:88:bc:5d:00:dd:ee:a9:44:14:a1:77:ce:
55:30:71:13:7b:74:c2:c9:37:47:41:bc:37:2d:44:53:b0:30:
34:9d:6d:6f:e8:a2:fb:fc:e2:b4:35:76:69:09:59:4a:98:fb:
2d:cc:ec:4e:53:5b:fc:17:d7:96:09:98:b9:69:aa:ba:59:69:
b2:11:0f:40:04:6e:3f:47:83:80:9d:31:45:75:71:78:a6:55:
92:a9:b6:fd:80:b2:b9:d0:81:a5:f7:81:5b:6f:a6:50:5f:73:
db:0a:da:6e:94:b2:91:ec:20:5c:d8:bf:ef:26:43:3a:5c:b3:
02:9d:b0:c3:80:f6:69:16:f8:b2:09:49:90:59:d4:02:f1:ec:
a9:b0:71:42:69:8f:45:67:97:f1:79:32:10:f9:fa:a6:cc:a2:
f0:e4:38:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:55:45 2026 by rpki-client