Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1rB9GzwSVSyYlYx_APQ-IMTRz5U.roa
File: 1rB9GzwSVSyYlYx_APQ-IMTRz5U.roa (raw, json)
Hash identifier: S8Ls+XtdbOkpkqfxvOr2wKykUflEuc62LLIFY1/nqKw=
Subject key identifier: D6:B0:7D:1B:3C:12:55:2C:98:95:8C:7F:00:F4:3E:20:C4:D1:CF:95
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DC5E3B4BAE4D2DEE131D599442BAD9601
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1rB9GzwSVSyYlYx_APQ-IMTRz5U.roa
Signing time: Sat 25 Apr 2026 18:25:27 +0000
ROA not before: Sat 25 Apr 2026 18:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202051
IP address blocks: 2.26.160.0/24 maxlen: 24
2.27.105.0/24 maxlen: 24
144.31.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c5:e3:b4:ba:e4:d2:de:e1:31:d5:99:44:2b:ad:96:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 25 18:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6b07d1b3c12552c98958c7f00f43e20c4d1cf95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:eb:fd:ad:cb:c0:b3:1d:3a:c6:4f:80:90:
df:ef:b6:52:d3:06:cb:50:e0:3d:f9:96:1d:e0:80:
ea:a7:1a:94:c8:2c:e9:36:64:e6:e1:f2:7b:a6:e5:
f4:d8:2e:e4:17:1b:3b:72:1a:01:aa:95:dd:73:7d:
24:4e:2b:52:1a:d5:a1:46:88:26:52:55:e2:75:ab:
23:ae:69:e8:71:17:f8:0b:0f:ab:b4:4c:f0:a2:eb:
ad:b0:24:53:f1:62:dd:8a:57:d3:e4:ff:8d:ab:30:
05:a8:d0:a0:9b:1f:a6:b8:eb:0c:76:4f:03:d1:b0:
9e:c3:3c:7a:30:42:a2:e6:20:b3:8e:c8:89:1c:2e:
b0:e9:d0:e7:af:ae:a6:e7:07:f1:0d:cb:b5:85:31:
c8:40:28:da:0c:ef:ad:dc:75:e1:0e:78:30:62:88:
67:7f:33:87:2f:87:b6:ec:6c:52:e2:b5:d1:f1:73:
bb:0e:b0:b6:1f:d3:1c:2f:7d:e4:fd:dd:5f:ac:55:
9e:4c:05:c2:5b:e4:09:b6:eb:3d:30:02:b5:b0:c2:
34:a5:91:b7:5e:28:01:45:e5:2c:58:7d:6f:27:0b:
22:d7:0e:6e:f2:fb:4e:fa:93:f2:3b:18:22:bb:9e:
e6:70:65:a8:ca:6b:81:c0:1c:77:1a:75:09:cd:ca:
7c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B0:7D:1B:3C:12:55:2C:98:95:8C:7F:00:F4:3E:20:C4:D1:CF:95
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1rB9GzwSVSyYlYx_APQ-IMTRz5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.160.0/24
2.27.105.0/24
144.31.159.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:91:71:79:c0:4d:9b:db:2c:4f:8f:ca:cf:10:34:85:f8:70:
bb:48:bf:b9:12:2f:74:25:81:16:ac:af:d9:5b:14:e1:d6:78:
97:4f:16:8c:2a:a3:75:b5:eb:30:28:38:cf:42:9a:08:00:1d:
d7:e3:50:db:aa:60:c9:17:71:03:ec:74:14:14:6e:8e:fd:6e:
7f:b2:25:a5:72:bb:31:b5:8a:69:e0:7a:ac:78:83:e3:a6:d7:
5c:5e:6b:04:5a:51:6c:fc:a0:56:e0:4d:36:7f:d1:10:10:62:
40:72:87:98:07:ca:35:ff:fe:8e:1c:86:ae:a4:7d:5d:f5:83:
49:b4:fc:2f:51:2e:14:c4:0f:8f:be:b2:26:74:66:41:28:e9:
74:9a:f7:05:ba:96:47:de:9b:20:67:63:ce:48:dc:a8:74:07:
0f:24:d7:c7:57:a3:b9:16:ad:7e:f7:6e:f3:a7:f3:77:47:b8:
ad:cc:69:7b:fe:99:8f:3e:12:5c:20:1a:12:6a:0a:ff:73:75:
65:e7:10:8a:18:56:e5:6b:45:79:76:50:15:41:a1:88:15:ba:
2e:65:47:f8:15:04:7b:4d:4a:23:5d:ea:bb:87:40:9f:f8:11:
bb:43:c4:2b:b4:a4:3c:a7:a9:f5:95:89:33:42:d9:ed:63:03:
3d:55:35:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:50:45 2026 by rpki-client