Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/758mdF1TkZbh-lEbaJLGsmLRoZU.roa
File: 758mdF1TkZbh-lEbaJLGsmLRoZU.roa (raw, json)
Hash identifier: 3LKeDQdQZEdeB2x7ekf3scjnW7KMObqgnxOwiC9bFNU=
Subject key identifier: EF:9F:26:74:5D:53:91:96:E1:FA:51:1B:68:92:C6:B2:62:D1:A1:95
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A19DC9B55307BEF178B23DFFAA6D11DC29
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/758mdF1TkZbh-lEbaJLGsmLRoZU.roa
Signing time: Mon 02 Nov 2026 19:43:24 +0000
ROA not before: Mon 02 Nov 2026 19:43:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200203
IP address blocks: 2.26.120.0/23 maxlen: 24
2.27.2.0/24 maxlen: 24
2.27.167.0/24 maxlen: 24
31.77.240.0/24 maxlen: 24
179.254.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:c9:b5:53:07:be:f1:78:b2:3d:ff:aa:6d:11:dc:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 2 19:43:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef9f26745d539196e1fa511b6892c6b262d1a195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:35:0b:73:d2:14:1b:a6:e3:82:0e:10:39:74:
25:06:8f:c2:77:81:9c:af:ed:c2:ca:e4:3b:b6:68:
57:45:7c:c4:dd:51:2d:88:c4:c3:2a:4b:b9:c9:bd:
23:a1:1a:6b:0a:7b:2e:cd:10:65:40:8c:fa:5c:0f:
05:e4:6a:45:a2:48:5c:d7:57:41:cf:21:1f:46:68:
12:61:ea:9f:9d:df:ae:26:a9:1b:c8:91:95:6c:aa:
31:80:a3:47:68:ca:85:c9:02:79:f5:0c:94:38:fc:
99:6e:23:5e:60:f5:6e:4c:b8:9a:f9:cf:bf:2e:87:
70:8f:43:0e:fc:ad:22:90:9a:d0:ab:89:ef:96:51:
19:4b:18:eb:f1:58:6a:e9:53:f1:8b:4c:57:dd:7e:
09:5e:e2:3f:b1:db:09:10:f9:1f:0d:96:53:da:96:
c4:0a:b6:9f:df:b1:15:ca:07:54:26:44:2f:48:62:
47:b3:76:83:c1:3c:35:73:c9:b6:e6:7d:2a:5e:ab:
cd:f5:6d:ef:ec:84:af:d2:62:3d:d9:db:c4:ef:52:
23:0c:4a:05:ae:e0:2a:37:97:bc:8e:eb:b3:27:fb:
21:ba:62:35:f4:e6:d4:a5:30:db:03:aa:bb:12:c1:
73:c1:d7:9a:92:b5:d8:43:26:eb:27:cc:17:10:33:
2f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9F:26:74:5D:53:91:96:E1:FA:51:1B:68:92:C6:B2:62:D1:A1:95
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/758mdF1TkZbh-lEbaJLGsmLRoZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.120.0/23
2.27.2.0/24
2.27.167.0/24
31.77.240.0/24
179.254.160.0/23
Signature Algorithm: sha256WithRSAEncryption
40:1b:51:7c:30:08:be:83:94:f9:5a:eb:f8:c7:6a:01:7c:7e:
83:5c:95:9e:a7:ed:cb:54:88:92:98:09:5e:3a:45:8a:0f:9c:
be:0f:b4:b8:74:c6:8a:c2:dd:bf:59:38:49:43:4c:d9:e5:5a:
00:a9:07:6a:43:06:94:5b:a8:2b:fb:45:9f:59:7c:f7:74:9f:
ad:15:25:b9:d2:82:b5:3a:68:f5:06:cd:64:94:95:54:e7:28:
29:58:a9:50:d8:05:7a:04:74:c4:b6:be:99:f1:31:25:b5:b8:
0f:f6:d6:1a:99:e4:84:0c:66:c3:a8:d5:0f:a3:27:e7:98:41:
42:a6:8b:bd:4c:52:7a:f1:18:15:8f:04:f4:60:e5:9e:ed:fa:
37:42:5d:2c:8c:69:89:20:b7:82:69:6f:cf:7c:d7:08:d2:36:
01:91:bb:da:e7:5e:85:26:cb:a2:f4:c3:57:e0:51:3a:c3:c5:
ce:e1:0d:9f:f7:89:13:47:af:ad:bd:2b:21:9c:fb:2e:66:a9:
e3:62:e6:c9:42:56:7f:1a:86:d5:ca:01:a7:d0:9e:91:bd:fa:
dd:91:4c:83:f5:27:44:4d:36:a4:dc:9d:cb:4c:e7:e6:98:34:
5d:c7:66:05:23:05:dc:d8:b1:9a:29:4b:da:d8:25:f2:10:ae:
19:08:8d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 22:19:36 2026 by rpki-client