Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/2Fole_XkmmLvZIp1-F52deVqzxg.roa
File: 2Fole_XkmmLvZIp1-F52deVqzxg.roa (raw, json)
Hash identifier: giVMe7ps0ThJSBjJjdR8AMSy298g3AdH/ZsKc+jcRis=
Subject key identifier: D8:5A:25:7B:F5:E4:9A:62:EF:64:8A:75:F8:5E:76:75:E5:6A:CF:18
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DCFDFDA4FF306797D25458F678B515020
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/2Fole_XkmmLvZIp1-F52deVqzxg.roa
Signing time: Mon 27 Apr 2026 16:57:27 +0000
ROA not before: Mon 27 Apr 2026 16:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198550
IP address blocks: 2.26.124.0/23 maxlen: 24
2.26.254.0/24 maxlen: 24
2.26.255.0/24 maxlen: 24
2.27.12.0/22 maxlen: 24
31.76.240.0/23 maxlen: 24
144.31.215.0/24 maxlen: 24
150.241.65.0/24 maxlen: 24
150.241.68.0/24 maxlen: 24
150.241.92.0/24 maxlen: 24
193.23.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:df:da:4f:f3:06:79:7d:25:45:8f:67:8b:51:50:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 27 16:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d85a257bf5e49a62ef648a75f85e7675e56acf18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:be:5d:6b:8f:69:07:2b:73:9f:6b:9e:99:11:
ab:90:47:1a:08:ed:70:f4:ee:31:ec:ba:67:94:20:
38:6d:8a:40:19:65:ac:52:c4:40:c2:98:a5:6a:3e:
da:15:32:77:15:a3:e7:bf:a7:ba:45:5f:79:ad:12:
87:8d:c5:90:6c:0c:67:f4:eb:1c:1b:35:c5:80:7c:
10:98:b4:bd:e3:50:b8:81:cc:a8:fc:22:36:01:b7:
0d:97:21:7e:18:62:02:13:66:c4:3b:a0:80:56:fe:
7d:1b:fa:08:8d:43:30:86:b6:7a:05:ad:34:48:6a:
f0:a1:06:a3:bb:1a:e6:58:cd:4a:89:7b:22:c4:cc:
8d:b8:94:15:c4:c1:a9:b7:ba:46:f1:a9:3b:89:73:
77:6f:6d:c6:89:4a:c4:9e:e5:d5:33:1b:26:e8:89:
7e:1f:8e:9f:c7:be:88:04:a6:63:fe:7c:2b:23:d7:
4e:ee:5e:55:0b:f8:d6:49:68:aa:30:bb:f2:64:2e:
5b:c9:b7:dc:c1:f8:25:cb:62:07:3f:9a:4a:c8:12:
2e:2c:89:12:fc:b1:94:4e:87:f4:24:1a:10:6d:8e:
4f:70:21:f3:d9:a6:54:a4:a8:c1:c8:66:6d:e1:b7:
80:f7:e4:c8:08:ad:f5:d6:ac:dc:bc:54:46:f2:32:
ea:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5A:25:7B:F5:E4:9A:62:EF:64:8A:75:F8:5E:76:75:E5:6A:CF:18
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/2Fole_XkmmLvZIp1-F52deVqzxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.124.0/23
2.26.254.0/23
2.27.12.0/22
31.76.240.0/23
144.31.215.0/24
150.241.65.0/24
150.241.68.0/24
150.241.92.0/24
193.23.222.0/24
Signature Algorithm: sha256WithRSAEncryption
16:1d:62:58:d4:77:33:29:7a:53:04:e7:11:68:23:39:74:94:
3c:3b:c8:9c:b7:81:4a:a6:50:0c:4a:da:d3:24:b8:ce:ed:51:
93:a6:6c:75:80:6f:a1:19:03:d0:8e:09:e9:02:be:4a:8d:b7:
fd:08:03:a2:92:15:93:f6:ab:9d:16:c0:17:17:c1:9e:dd:6d:
ed:a6:d5:46:94:33:26:c5:42:46:64:7f:f3:21:ce:0f:ea:a0:
f6:73:94:14:52:68:70:4b:04:c0:47:ad:68:93:d1:a8:0f:c1:
38:dd:69:5a:80:b6:93:b9:ac:a7:c2:21:33:c9:eb:9a:4f:b7:
04:f8:bf:c3:eb:7a:52:22:5b:30:75:4f:c9:26:44:3f:08:43:
df:48:1c:91:b7:61:7b:85:ef:23:04:cd:ff:fa:22:a3:9a:41:
88:9b:9d:19:ab:1e:d7:f4:11:83:3a:16:dc:a8:8c:72:95:03:
ed:61:b4:87:74:02:27:fd:ff:d2:e0:ca:b2:c1:f0:fa:ba:48:
8a:2a:17:90:b8:55:70:37:8a:70:3d:01:0a:ae:85:73:44:8b:
57:f5:0a:cc:77:82:9e:9a:83:5d:61:17:9a:c2:8c:09:5d:31:
f4:44:b7:f3:c3:f8:e5:12:b0:b3:62:b5:db:dc:71:6f:d4:47:
d3:d6:33:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:51:00 2026 by rpki-client