Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5GTJEUP7pl29A7RxaM3IASnI1Aw.roa
File: 5GTJEUP7pl29A7RxaM3IASnI1Aw.roa (raw, json)
Hash identifier: YHuGKEwmC5aGlae5IB8ZgGKg3cyHX1PmbqAx6HkBhY8=
Subject key identifier: E4:64:C9:11:43:FB:A6:5D:BD:03:B4:71:68:CD:C8:01:29:C8:D4:0C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A11D1AB8058B548743CDA2580D6D1A1FBB
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5GTJEUP7pl29A7RxaM3IASnI1Aw.roa
Signing time: Thu 08 Oct 2026 20:00:52 +0000
ROA not before: Thu 08 Oct 2026 20:00:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212701
IP address blocks: 2.26.192.0/21 maxlen: 24
31.76.72.0/22 maxlen: 24
31.77.132.0/22 maxlen: 24
31.77.174.0/23 maxlen: 24
144.31.154.0/23 maxlen: 24
144.31.180.0/22 maxlen: 24
144.31.188.0/23 maxlen: 24
179.254.164.0/23 maxlen: 24
191.217.218.0/23 maxlen: 24
191.217.226.0/23 maxlen: 24
191.217.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 21:48:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:1a:b8:05:8b:54:87:43:cd:a2:58:0d:6d:1a:1f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 8 20:00:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e464c91143fba65dbd03b47168cdc80129c8d40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9f:c8:a8:2d:3f:16:7a:50:15:70:32:03:c5:
6e:42:d4:fd:eb:23:b6:df:76:1e:60:b3:f9:b1:74:
67:f3:fc:71:e7:e3:23:1b:f3:40:01:ca:0e:ee:1f:
0d:d4:53:ea:af:f2:75:2d:e2:09:1d:fe:40:5b:15:
5d:e5:e7:96:b5:0e:f4:a2:c9:69:11:93:36:fb:e0:
13:4c:04:26:bd:0b:58:ca:8f:33:95:92:61:3e:35:
33:79:48:47:9e:16:82:89:35:93:3d:51:c1:d9:84:
51:f8:27:bd:a0:9d:8d:7a:a8:b9:9d:72:93:12:8d:
9a:b6:84:c4:48:40:ac:30:9e:fd:b2:5f:89:e5:f6:
9b:4f:7b:d3:e9:c7:9f:f8:aa:ae:3d:84:78:c0:f1:
ee:9d:ed:39:41:76:a8:08:e8:b5:a5:c5:13:95:c0:
ae:7a:41:24:f4:f4:58:1e:10:4a:97:95:5c:4e:08:
b1:dd:f3:c9:57:7a:24:c5:65:ad:e2:05:8e:95:00:
ff:0f:dc:9e:94:37:76:48:63:d8:3d:44:86:b2:bf:
0a:05:7e:53:80:3a:e3:59:61:6a:7a:e6:1e:71:2d:
2c:aa:d2:b5:0d:cb:10:4d:be:ed:7b:b7:6e:2e:f8:
16:03:11:f7:1d:6c:ec:71:f5:b0:26:76:fd:97:62:
f4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:64:C9:11:43:FB:A6:5D:BD:03:B4:71:68:CD:C8:01:29:C8:D4:0C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5GTJEUP7pl29A7RxaM3IASnI1Aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.192.0/21
31.76.72.0/22
31.77.132.0/22
31.77.174.0/23
144.31.154.0/23
144.31.180.0/22
144.31.188.0/23
179.254.164.0/23
191.217.218.0/23
191.217.226.0/23
191.217.230.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:3f:11:5d:94:2a:54:b0:44:95:f2:95:ca:41:2f:75:de:28:
56:e8:06:fd:a3:a5:44:60:4c:7b:31:77:15:66:a6:cf:4c:9e:
c9:66:32:f4:08:77:ab:d5:4a:f8:57:09:83:3e:35:51:53:60:
e5:16:4e:1e:c6:c3:f4:7f:b4:3a:9b:7f:f0:49:f0:f7:02:5a:
45:13:4e:c2:c8:4a:1c:ae:d4:f3:77:f1:cd:f1:cf:56:a4:21:
31:ee:24:c9:0b:e3:1d:0f:92:26:71:0b:06:d4:e5:d3:25:23:
54:89:91:85:b8:b6:0d:75:6a:5f:a2:87:33:66:40:c8:09:7f:
b8:b7:ba:c0:30:7f:3a:89:af:a5:e0:4a:95:e5:25:f8:c4:ed:
98:fb:c9:73:b0:e7:06:28:af:c7:6d:e0:25:d6:61:4f:23:9f:
e3:51:e1:d2:c0:31:8d:af:b0:4b:a9:13:6f:48:19:00:54:6c:
f6:be:e6:89:4e:5a:28:df:3c:13:8e:44:60:f3:ae:7e:f3:e6:
60:a8:ec:27:6c:0f:5c:1c:f5:e2:1b:45:45:77:f9:ac:54:9f:
a5:42:57:b6:2d:f3:f4:79:ce:71:41:f1:6d:46:e8:70:f7:82:
1f:91:e1:c6:4b:71:f1:5c:1f:6c:7e:8b:ed:92:9e:59:f4:a6:
c8:73:92:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 06:08:04 2026 by rpki-client