Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/15eU7mgxw3zTUMPiUGW8UR8N1nQ.roa
File: 15eU7mgxw3zTUMPiUGW8UR8N1nQ.roa (raw, json)
Hash identifier: LDbN6AcRWXXG7x8H+8T9MBVUVrBywQNEZW7UXwjtIew=
Subject key identifier: D7:97:94:EE:68:31:C3:7C:D3:50:C3:E2:50:65:BC:51:1F:0D:D6:74
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A01093FB6AEFEA559C68BE875923CC2391
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/15eU7mgxw3zTUMPiUGW8UR8N1nQ.roa
Signing time: Mon 17 Aug 2026 16:35:28 +0000
ROA not before: Mon 17 Aug 2026 16:35:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212743
IP address blocks: 2.26.150.0/24 maxlen: 24
2.27.59.0/24 maxlen: 24
2.27.61.0/24 maxlen: 24
2.27.249.0/24 maxlen: 24
144.31.12.0/24 maxlen: 24
144.31.136.0/24 maxlen: 24
144.31.191.0/24 maxlen: 24
144.31.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:93:fb:6a:ef:ea:55:9c:68:be:87:59:23:cc:23:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 17 16:35:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d79794ee6831c37cd350c3e25065bc511f0dd674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:d5:66:68:6e:32:2a:03:b8:e5:c2:b4:1e:
b5:45:78:80:ef:9a:9c:74:60:eb:13:d1:f1:3f:77:
c2:07:11:5c:3d:a5:71:a8:8b:cb:6c:25:f7:b4:5f:
07:82:09:4f:28:89:b9:34:6b:cd:6f:f8:f9:28:2f:
a5:c8:24:ad:ed:6a:2c:40:cb:f7:03:35:73:72:ee:
11:7e:85:87:e9:a4:b6:44:42:aa:df:d2:fd:67:0e:
cf:b6:dd:47:0a:58:95:a0:37:09:cf:06:82:c3:a2:
41:e6:a8:33:90:19:62:79:33:25:6e:42:5b:3b:bc:
ec:58:64:1d:4f:5b:d6:c1:f6:b6:64:41:8a:ee:ca:
07:d3:de:61:c9:e3:0d:7f:bd:32:02:33:d8:2e:13:
09:14:df:d3:cd:f7:50:2c:50:ba:1c:74:aa:bf:9a:
db:1f:43:c0:15:a2:a9:d2:17:ec:31:2e:22:a0:ae:
d2:15:e5:6f:67:e0:89:e3:e4:64:0a:6e:29:41:1f:
5f:b0:b5:3b:ed:20:d1:71:b8:b7:5a:0c:7f:5c:97:
56:a8:b9:94:b2:f9:f8:db:51:5e:b6:11:07:18:a1:
48:c4:4a:11:41:0c:c5:19:fb:21:8b:95:2e:53:08:
3d:4b:e0:37:4a:79:67:20:cd:9a:40:72:d0:f1:e7:
21:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:97:94:EE:68:31:C3:7C:D3:50:C3:E2:50:65:BC:51:1F:0D:D6:74
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/15eU7mgxw3zTUMPiUGW8UR8N1nQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.150.0/24
2.27.59.0/24
2.27.61.0/24
2.27.249.0/24
144.31.12.0/24
144.31.136.0/24
144.31.191.0/24
144.31.237.0/24
Signature Algorithm: sha256WithRSAEncryption
83:96:c2:13:8e:d5:63:3b:8c:5e:99:be:5d:46:db:dc:a8:ba:
85:ef:e1:ec:63:4c:4a:dc:c0:9e:15:d8:b1:62:89:df:9f:46:
be:29:a0:c9:b4:99:f6:85:a2:65:e7:1a:e4:26:cc:aa:be:a4:
4f:9d:03:28:ce:ae:83:48:a8:2f:55:53:46:9e:28:9e:7e:4e:
db:52:7c:90:30:a0:aa:28:b0:d6:76:42:f8:5a:61:54:a8:e9:
b5:9a:d1:78:7a:a6:dc:f8:da:4c:c6:59:f6:8a:e9:06:d3:fc:
34:f4:2f:1e:42:5d:eb:a7:f1:ce:55:1e:ab:d3:28:97:4a:04:
96:c0:10:f0:56:02:60:6c:3a:69:a6:d7:c9:ed:0d:59:80:dd:
75:42:86:09:d3:eb:2a:22:89:5e:35:47:2e:bc:9c:5c:75:d7:
e1:74:c1:aa:f6:54:17:e0:a8:d7:3a:48:54:c1:34:e5:89:f7:
79:29:bb:ce:bb:a2:d9:5c:af:9a:5d:dd:70:64:2c:fc:8f:ba:
36:45:66:a3:41:a4:09:b8:68:ce:8b:33:e1:da:2b:17:ff:da:
15:45:df:fd:be:27:4e:d0:2b:17:cc:2e:47:5b:f9:ec:b0:8f:
6a:ae:2a:43:51:1f:fa:31:df:f6:ca:4f:63:3e:5c:b1:d6:2a:
72:8e:33:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:27:12 2026 by rpki-client