Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1ZuCKZDiHT3mHiQiYSNjuD3ssdY.roa
File: 1ZuCKZDiHT3mHiQiYSNjuD3ssdY.roa (raw, json)
Hash identifier: p9FS20qQzpoT0zzvFkS6a/F+FRpOgR1VKa2wR2o8oCo=
Subject key identifier: D5:9B:82:29:90:E2:1D:3D:E6:1E:24:22:61:23:63:B8:3D:EC:B1:D6
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FB3D51F6A9B1A22A21863F1634DF651CF
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1ZuCKZDiHT3mHiQiYSNjuD3ssdY.roa
Signing time: Thu 30 Jul 2026 16:21:56 +0000
ROA not before: Thu 30 Jul 2026 16:21:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199180
IP address blocks: 2.26.12.0/24 maxlen: 24
2.26.13.0/24 maxlen: 24
2.26.14.0/24 maxlen: 24
2.26.15.0/24 maxlen: 24
2.26.144.0/24 maxlen: 24
2.27.6.0/24 maxlen: 24
31.76.36.0/24 maxlen: 24
31.76.92.0/24 maxlen: 24
31.76.121.0/24 maxlen: 24
31.76.254.0/24 maxlen: 24
177.1.193.0/24 maxlen: 24
177.1.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:d5:1f:6a:9b:1a:22:a2:18:63:f1:63:4d:f6:51:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 30 16:21:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d59b822990e21d3de61e2422612363b83decb1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f7:12:ad:51:91:c7:db:d7:b8:2f:80:1c:c4:
dc:d6:33:e8:7b:80:d4:46:ad:36:7c:cd:06:ff:d7:
ac:cc:dc:98:d7:e7:07:74:ff:cc:8e:39:fb:e3:02:
ba:de:75:be:d9:52:b7:53:0f:ec:4f:0c:13:df:c4:
22:d9:5a:20:45:19:02:c9:76:58:16:59:ab:dd:61:
7b:43:3d:8e:23:19:7c:e1:40:2e:aa:4d:29:f5:a5:
12:43:eb:55:ce:48:70:c7:36:e4:c3:3a:97:f9:58:
a0:f0:9c:fa:a9:eb:ec:d4:fc:ff:21:f6:eb:bd:15:
9e:97:14:c0:ad:91:2d:d8:a7:01:24:5d:7e:c5:4f:
19:02:72:78:8f:aa:70:fc:05:eb:b5:46:7c:77:12:
75:5b:7f:ee:28:3e:4a:99:0f:22:8e:e6:96:dd:48:
f4:fe:a7:b7:23:47:49:4f:f7:79:04:63:bd:61:11:
9b:14:2d:9b:b5:b0:b5:f8:7c:69:e0:33:be:be:85:
04:7d:05:33:b8:5d:5e:a8:c8:4f:31:ef:41:fe:2b:
30:56:61:33:fd:4b:a8:4a:18:36:a4:bd:8d:48:88:
d1:2c:7a:05:4e:d7:14:d2:e6:f1:41:6d:68:08:f6:
d3:8c:d5:34:e6:ac:be:24:30:dd:4f:a6:d2:e3:35:
07:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9B:82:29:90:E2:1D:3D:E6:1E:24:22:61:23:63:B8:3D:EC:B1:D6
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1ZuCKZDiHT3mHiQiYSNjuD3ssdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.12.0/22
2.26.144.0/24
2.27.6.0/24
31.76.36.0/24
31.76.92.0/24
31.76.121.0/24
31.76.254.0/24
177.1.193.0/24
177.1.198.0/24
Signature Algorithm: sha256WithRSAEncryption
59:a1:33:72:52:44:5b:36:ef:f3:f8:c3:30:68:12:9e:aa:79:
a4:45:c5:a4:e4:86:b4:c2:53:41:a1:f1:c9:c7:8f:9e:e5:af:
28:f7:cb:1f:86:cc:2e:13:79:de:28:48:bb:95:a3:c2:af:ac:
44:79:b4:4e:9b:0f:8b:e2:30:af:3d:ae:83:37:3f:91:80:bd:
28:46:e8:ae:5e:01:6f:f6:4e:73:fd:f7:18:16:00:f5:2c:5c:
40:c1:af:d7:aa:39:e2:2b:d9:d2:8a:c3:11:15:7c:e4:97:4b:
20:f3:e6:41:c0:ae:3b:84:98:e5:dc:f6:4d:89:94:a3:c5:d8:
e5:03:81:65:e5:12:eb:43:80:bb:4f:1b:6c:3f:8c:1b:63:f1:
35:81:a5:b1:03:7a:f4:ac:63:f5:d0:9a:be:8d:4e:5c:be:8e:
8c:db:57:7d:4b:a8:f5:ad:65:51:83:70:5e:71:7f:3a:62:09:
38:50:78:28:ca:a3:80:8a:29:5a:da:de:bd:ee:f9:8c:bd:10:
8d:52:d4:e6:54:ff:da:34:80:fc:9c:ad:05:a6:79:be:9b:bf:
ba:6b:95:e3:62:23:7d:e6:85:78:d7:95:66:87:6d:5f:5d:9c:
10:04:1b:79:c9:f3:10:56:5c:b7:50:cd:22:1d:3d:04:2f:b2:
1a:90:a7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:51:01 2026 by rpki-client