Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5WeUPEJVgefXgpxQUpFqOuNfSnA.roa
File: 5WeUPEJVgefXgpxQUpFqOuNfSnA.roa (raw, json)
Hash identifier: yq7uKMjABZXyDEMcZZrSDMEdYUrFiQUYd15hmkB75hM=
Subject key identifier: E5:67:94:3C:42:55:81:E7:D7:82:9C:50:52:91:6A:3A:E3:5F:4A:70
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FD91BA43E9285714C28CBCE98CF9072E6
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5WeUPEJVgefXgpxQUpFqOuNfSnA.roa
Signing time: Thu 06 Aug 2026 22:04:55 +0000
ROA not before: Thu 06 Aug 2026 22:04:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25868
IP address blocks: 2.26.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Aug 2026 17:53:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d9:1b:a4:3e:92:85:71:4c:28:cb:ce:98:cf:90:72:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 6 22:04:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e567943c425581e7d7829c5052916a3ae35f4a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:34:bb:2b:04:43:48:bc:14:3a:68:98:1b:
61:48:09:53:65:e8:65:58:f6:be:1a:ca:5a:a4:ea:
a5:0c:66:52:86:f3:71:19:02:75:81:68:f9:fe:cc:
01:e6:b8:b2:6d:a6:d3:54:6a:72:02:be:27:85:8e:
44:c6:f1:41:ea:68:33:ec:0d:b4:d4:5a:44:f8:c9:
71:78:d5:4f:72:9f:e2:9e:e1:2f:54:1c:5b:c7:68:
4f:4c:d8:22:18:70:6d:02:ad:cf:5f:e6:1a:bd:dc:
67:3f:a7:17:14:ae:ec:62:d8:9c:04:6d:d2:4a:de:
ee:a5:ec:52:16:fd:66:31:61:43:74:b6:a5:dd:aa:
22:71:06:a2:e4:aa:fd:ef:b1:2d:b4:bc:5f:4d:32:
b5:e0:a3:da:73:cf:ac:5f:82:39:8c:f3:31:36:1f:
71:fa:98:c1:ae:91:c6:51:f8:8f:94:36:ac:1a:ce:
0b:35:68:f4:d2:bb:26:bb:e0:99:14:fa:c9:84:aa:
60:a0:30:02:7a:22:41:0d:ac:9c:4c:50:57:67:64:
d8:aa:d0:1f:9e:0b:05:d1:d2:71:51:bf:75:07:7b:
a3:97:73:29:ff:23:a5:0c:ab:86:b1:6e:79:d0:37:
78:f3:ec:fc:45:66:d6:a6:e8:2a:2a:37:5f:74:13:
78:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:67:94:3C:42:55:81:E7:D7:82:9C:50:52:91:6A:3A:E3:5F:4A:70
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5WeUPEJVgefXgpxQUpFqOuNfSnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.208.0/21
Signature Algorithm: sha256WithRSAEncryption
90:44:8f:7e:82:0d:c5:0c:ce:ae:87:d4:a3:09:3f:c1:3d:83:
d3:d7:50:a9:6a:e5:a6:95:50:c5:84:42:08:cc:2e:8a:75:5c:
26:62:e7:a1:08:18:3a:52:f0:32:22:82:95:e4:6e:2b:61:7e:
d2:25:36:a5:34:23:7d:ae:e1:6f:b0:c0:1e:ce:4a:6b:10:a9:
04:65:55:a5:ad:d1:9b:7d:c9:47:1b:d3:e9:dd:b0:6f:cf:ba:
41:89:95:db:28:b1:29:6f:2c:72:29:56:dd:23:8d:3f:37:90:
47:4a:2b:13:e7:a2:0d:ec:1e:de:19:a6:fb:b6:14:71:5d:83:
97:c4:83:d8:d9:ce:44:7a:b6:8f:c6:d0:ba:f9:84:2f:3a:1f:
82:16:55:7e:0b:a9:da:37:f4:37:34:37:38:bd:22:78:c1:86:
12:5a:25:4a:39:86:84:80:21:64:6d:fd:63:b8:8a:bf:fd:06:
35:67:4e:16:84:95:64:5d:95:e7:43:45:2a:1b:57:8f:a9:ba:
65:d2:b1:ab:ca:f3:95:52:f7:e0:25:56:b8:c2:06:3e:32:7d:
36:09:91:af:9d:aa:b9:67:80:51:50:57:3e:95:1f:9b:27:29:
a5:df:18:c2:94:b7:3a:22:0d:f3:59:86:12:93:55:1d:1a:3a:
3b:9a:90:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/ZG6Q+koVxTCjLzpjPkHLmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwODA2MjIwNDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTY3OTQzYzQyNTU4MWU3ZDc4MjljNTA1MjkxNmEzYWUzNWY0YTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9A0uysEQ0i8FDpomBthSAlTZehl
WPa+GspapOqlDGZShvNxGQJ1gWj5/swB5riybabTVGpyAr4nhY5ExvFB6mgz7A20
1FpE+MlxeNVPcp/inuEvVBxbx2hPTNgiGHBtAq3PX+YavdxnP6cXFK7sYticBG3S
St7upexSFv1mMWFDdLal3aoicQai5Kr977EttLxfTTK14KPac8+sX4I5jPMxNh9x
+pjBrpHGUfiPlDasGs4LNWj00rsmu+CZFPrJhKpgoDACeiJBDaycTFBXZ2TYqtAf
ngsF0dJxUb91B3ujl3Mp/yOlDKuGsW550Dd48+z8RWbWpugqKjdfdBN4AwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOVnlDxCVYHn14KcUFKRajrjX0pwMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvNVdlVVBFSlZnZWZYZ3B4UVVwRnFPdU5mU25BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDAhrQMA0G
CSqGSIb3DQEBCwUAA4IBAQCQRI9+gg3FDM6uh9SjCT/BPYPT11CpauWmlVDFhEII
zC6KdVwmYuehCBg6UvAyIoKV5G4rYX7SJTalNCN9ruFvsMAezkprEKkEZVWlrdGb
fclHG9Pp3bBvz7pBiZXbKLEpbyxyKVbdI40/N5BHSisT56IN7B7eGab7thRxXYOX
xIPY2c5EeraPxtC6+YQvOh+CFlV+C6naN/Q3NDc4vSJ4wYYSWiVKOYaEgCFkbf1j
uIq//QY1Z04WhJVkXZXnQ0UqG1ePqbpl0rGryvOVUvfgJVa4wgY+Mn02CZGvnaq5
Z4BRUFc+lR+bJyml3xjClLc6Ig3zWYYSk1UdGjo7mpAT
-----END CERTIFICATE-----
Generated at Sat Aug 8 20:28:33 2026 by rpki-client