Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4iI9HPjOftw1OCReciCHbqORaLo.roa
File: 4iI9HPjOftw1OCReciCHbqORaLo.roa (raw, json)
Hash identifier: U7D/XK+wO1i+vc1a0Te+T+WkGjycqiKtStqwLqcilT4=
Subject key identifier: E2:22:3D:1C:F8:CE:7E:DC:35:38:24:5E:72:20:87:6E:A3:91:68:BA
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FC86827C3746DFDDBF9A30EEB98539837
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4iI9HPjOftw1OCReciCHbqORaLo.roa
Signing time: Mon 03 Aug 2026 16:14:56 +0000
ROA not before: Mon 03 Aug 2026 16:14:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402643
IP address blocks: 2.26.187.0/24 maxlen: 24
31.77.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:68:27:c3:74:6d:fd:db:f9:a3:0e:eb:98:53:98:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 3 16:14:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2223d1cf8ce7edc3538245e7220876ea39168ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5f:ae:e8:c6:6a:aa:8a:2e:3c:b5:88:68:78:
1b:87:61:28:59:0a:7d:5b:2b:03:5b:0b:6a:16:94:
a7:24:48:8d:98:52:0c:46:b6:4f:50:a1:b7:29:30:
b2:b8:99:eb:0c:e5:38:a7:8f:38:35:9b:fe:01:81:
93:bd:38:af:01:65:34:bc:9a:61:13:e5:eb:cb:2b:
44:60:e5:0e:b6:e5:ac:f3:eb:c9:14:fd:71:c5:36:
02:fd:6e:76:32:01:0d:9d:5a:62:fb:74:0d:bd:c3:
b4:35:3f:e4:88:0e:cf:4a:75:f4:93:a4:49:eb:de:
c1:cf:83:a4:59:be:23:78:ef:e0:9f:0a:86:12:60:
72:87:16:88:09:32:1e:57:7c:ba:5f:7e:40:8d:31:
cd:c2:b1:c9:7b:5d:21:47:a7:19:6b:91:5d:53:76:
c2:3c:cb:f1:58:95:6e:38:36:d1:cf:1d:a2:a0:3a:
fa:50:3a:46:98:15:84:a9:b0:ba:17:49:a4:f3:a5:
ba:d0:de:c2:55:b3:92:40:5d:df:c8:3b:69:07:f3:
25:88:79:b9:4c:57:ae:92:59:83:40:52:7f:2a:d3:
73:83:70:b4:d8:4e:3a:a3:55:22:2e:22:61:6f:d5:
dc:22:e2:3f:ab:4d:8d:ff:12:e9:8d:29:d9:7d:a7:
10:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:22:3D:1C:F8:CE:7E:DC:35:38:24:5E:72:20:87:6E:A3:91:68:BA
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4iI9HPjOftw1OCReciCHbqORaLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.187.0/24
31.77.224.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:21:04:b8:41:73:49:3f:a6:0c:48:24:bf:fe:01:7b:9d:c0:
f4:8b:2b:0d:c1:10:fd:53:e6:76:b3:72:85:2d:f3:44:50:4b:
02:fb:0f:f7:45:b7:d8:29:65:08:46:3f:e1:19:7e:0d:6a:78:
17:43:78:1f:27:69:ec:dc:57:66:99:bb:1a:f3:de:98:10:93:
c0:84:2a:9f:87:e6:9c:a0:d1:57:fe:a5:cf:f4:fd:3c:d9:22:
ba:3e:d3:d0:ab:a3:dc:4c:5a:95:2f:4e:62:86:7f:6d:bf:40:
b7:47:18:a7:1b:8c:d7:21:db:ee:b6:32:8f:35:c5:9a:bf:16:
c5:62:e2:a0:30:c0:72:5e:6e:b9:00:db:7f:8e:8a:0e:6b:44:
2f:9d:c9:bc:d8:0e:07:a2:bc:1a:8a:93:a0:e8:d1:59:e7:1a:
8b:0d:4f:6f:19:b5:63:e9:6f:b5:76:c2:bd:d6:e1:a5:90:93:
02:c8:37:10:72:dc:9f:46:95:4f:71:08:db:ea:6d:c1:aa:a0:
d2:75:83:4c:91:84:94:60:fd:b9:2c:2d:a4:de:47:7b:92:28:
9f:4d:b3:34:df:bb:cc:3d:73:8f:8c:d7:fb:63:7c:b6:49:0c:
6c:ba:df:88:f7:fa:d3:d5:56:73:79:c6:b0:e8:61:e0:53:1c:
ca:a7:fc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:51:04 2026 by rpki-client