Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-e71PqX1---gkNR0l-6__PXnM_M.roa
File: 1-e71PqX1---gkNR0l-6__PXnM_M.roa (raw, json)
Hash identifier: 0TUUh8qiXVOjMn45NVtzaU/NSRT7cKWbqXXletf4t4A=
Subject key identifier: F9:EE:F5:3E:A5:F5:FB:EF:A0:90:D4:74:97:EE:BF:FC:F5:E7:33:F3
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FBED549E7E44704959D2E208A40933A9E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-e71PqX1---gkNR0l-6__PXnM_M.roa
Signing time: Sat 01 Aug 2026 19:37:56 +0000
ROA not before: Sat 01 Aug 2026 19:37:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 2.26.191.0/24 maxlen: 24
2.26.222.0/24 maxlen: 24
2.27.98.0/24 maxlen: 24
2.27.214.0/23 maxlen: 24
31.77.98.0/24 maxlen: 24
31.77.99.0/24 maxlen: 24
31.77.104.0/24 maxlen: 24
31.77.105.0/24 maxlen: 24
31.77.109.0/24 maxlen: 24
31.77.206.0/23 maxlen: 24
31.77.217.0/24 maxlen: 24
31.77.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:be:d5:49:e7:e4:47:04:95:9d:2e:20:8a:40:93:3a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 1 19:37:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9eef53ea5f5fbefa090d47497eebffcf5e733f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f4:1c:17:80:5e:dd:5e:47:29:0f:06:92:71:
df:34:26:3f:f3:d5:6b:52:a2:97:00:75:bd:22:88:
40:72:bc:41:ac:db:25:0b:bd:52:bc:fc:2d:65:b5:
b8:f2:78:f1:78:b8:06:e6:f4:06:72:c9:08:de:8f:
21:17:c4:44:09:73:d2:e5:fb:f5:15:2f:c7:a6:b6:
46:7e:9f:94:6a:8a:b0:3d:34:af:06:27:fc:cc:52:
04:6b:3f:5d:5f:db:c9:20:1d:09:8a:6e:e0:07:59:
12:1d:95:ef:63:9a:a0:f3:f6:48:d1:42:6b:04:56:
15:bc:be:b3:c7:49:77:83:e5:95:0e:60:33:02:7e:
5c:a1:84:58:89:fc:60:80:f7:76:ca:16:38:18:71:
8d:2b:36:60:c6:8f:6a:71:e8:ed:c4:dd:43:f1:1d:
f9:c1:ec:ed:09:b0:78:ff:84:74:8c:45:5a:4a:82:
62:d6:80:fc:51:80:a0:6c:af:8d:f7:e3:cc:6c:b7:
ad:24:14:61:18:66:9e:54:69:c1:bd:80:58:10:a4:
66:8f:66:6a:48:69:29:0f:95:c8:6c:f4:34:a8:f2:
c2:10:ee:4e:a9:ec:e0:8f:53:06:a0:ab:4e:3b:02:
e8:ea:2d:ac:28:b3:9b:3b:c4:73:b0:55:9c:80:89:
55:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:EE:F5:3E:A5:F5:FB:EF:A0:90:D4:74:97:EE:BF:FC:F5:E7:33:F3
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-e71PqX1---gkNR0l-6__PXnM_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.191.0/24
2.26.222.0/24
2.27.98.0/24
2.27.214.0/23
31.77.98.0/23
31.77.104.0/23
31.77.109.0/24
31.77.206.0/23
31.77.217.0/24
31.77.240.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:b3:d8:26:ff:d2:2a:07:31:4d:31:7c:d8:3f:0e:38:bf:e0:
65:69:0a:af:32:dc:1f:82:c6:a3:e0:7c:d3:4a:40:fd:b1:2b:
0c:ac:6f:53:a0:f4:09:0d:16:6c:2d:7a:d4:e4:70:70:67:71:
13:78:0c:0e:5d:56:3a:19:ee:1c:30:9d:b4:61:af:74:88:a2:
79:84:c4:ee:5c:a7:dc:aa:6f:00:3e:53:74:40:04:e2:48:a0:
76:fb:ec:43:2d:7e:ff:38:38:27:1b:68:c4:42:d4:a6:3a:f0:
f7:c0:d7:46:b3:72:fd:19:33:be:0e:eb:92:e5:54:c0:df:22:
43:c7:18:e5:af:85:98:21:57:67:b2:19:c3:ee:a8:b7:e6:cf:
86:33:4a:04:35:2f:9c:7c:34:f7:77:e3:a5:fc:3e:96:86:18:
49:b8:8c:a1:50:4c:e5:2c:9b:95:73:b4:af:e0:bf:11:6c:fb:
46:51:2e:1b:52:f3:a7:bf:43:75:6e:d0:e0:ac:a3:f6:e3:18:
3a:b8:c7:49:2c:91:3b:f6:33:d4:4f:c9:f1:61:9f:29:83:b2:
ea:93:ac:bf:60:a0:9a:42:30:bf:0d:ce:b0:bb:d4:0f:64:dc:
27:c6:c3:04:27:a3:7a:05:5c:37:6a:f4:ab:93:12:40:95:9f:
46:89:12:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:51:00 2026 by rpki-client