Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8c7r_l6Jj24N7LGFAbuiRFZy6jw.roa
File: 8c7r_l6Jj24N7LGFAbuiRFZy6jw.roa (raw, json)
Hash identifier: 42707YF4ULyekh1puxGkZ7EN8DqvizHhAPLqgXyWjaA=
Subject key identifier: F1:CE:EB:FE:5E:89:8F:6E:0D:EC:B1:85:01:BB:A2:44:56:72:EA:3C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FC8673EDCFD1370021DBBA463CD30AB80
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8c7r_l6Jj24N7LGFAbuiRFZy6jw.roa
Signing time: Mon 03 Aug 2026 16:13:57 +0000
ROA not before: Mon 03 Aug 2026 16:13:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 2.26.173.0/24 maxlen: 24
2.26.184.0/24 maxlen: 24
31.77.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:67:3e:dc:fd:13:70:02:1d:bb:a4:63:cd:30:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 3 16:13:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1ceebfe5e898f6e0decb18501bba2445672ea3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:64:2b:f6:45:a2:89:c1:73:3a:a8:4f:c6:3e:
9d:90:5c:8d:98:22:8a:01:7f:1a:0b:cd:23:17:d4:
7e:72:b3:8b:be:37:3d:0f:95:c5:2c:32:7a:c6:ec:
b5:95:9a:29:99:aa:97:61:39:1e:22:39:6c:d6:bf:
35:49:7d:bd:6b:af:f9:8a:27:25:ce:64:6a:64:ab:
85:c2:cd:b4:9a:07:66:f3:da:ef:04:91:7f:1b:78:
44:b9:5d:c0:29:79:4e:3a:72:f5:fe:2d:6e:51:8f:
8b:8a:73:e9:25:26:b6:aa:50:65:94:2e:3d:74:fb:
fd:27:22:38:42:e1:f6:7d:ea:78:ca:7b:ed:3a:d9:
39:ba:b7:6d:5a:9f:cd:f6:38:47:54:fa:64:83:8c:
cf:e4:b1:a1:52:27:2c:39:3a:c1:51:b6:30:56:58:
6d:52:27:bf:76:44:30:85:72:d1:ee:f4:6e:aa:4a:
f1:af:3d:d0:6b:f9:88:20:e1:9e:b3:83:38:79:0f:
27:75:49:e2:a0:5a:8c:ef:96:89:af:91:a2:89:1c:
a4:b6:c2:8e:7a:be:30:3f:45:70:8c:e9:ae:cc:10:
c0:c4:26:cd:f0:70:5c:ba:93:83:ba:35:31:b6:c1:
0c:1f:c1:c0:a3:b8:3d:24:ed:0b:fb:0d:15:b5:96:
e9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CE:EB:FE:5E:89:8F:6E:0D:EC:B1:85:01:BB:A2:44:56:72:EA:3C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8c7r_l6Jj24N7LGFAbuiRFZy6jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.173.0/24
2.26.184.0/24
31.77.119.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:1c:a7:0d:58:8e:4a:6c:7d:a8:eb:0c:45:91:c0:b7:dd:0c:
71:36:9d:18:bb:b6:f8:c6:0e:f7:32:8f:23:f3:31:f8:84:a4:
1f:d4:37:c5:98:30:f7:d2:ad:a1:76:77:e3:4a:51:14:c8:74:
d5:c0:6b:cc:63:50:36:4c:a9:1f:1a:9c:01:10:8a:46:86:05:
40:8b:a8:c4:c5:7e:5a:98:7e:5c:bd:11:61:6d:44:8c:9e:45:
dd:78:c6:6e:f8:2a:40:21:be:fd:9f:85:cd:f0:18:de:cb:10:
f1:f0:85:a4:79:75:38:91:a6:4d:44:00:5c:44:4b:a2:f3:3e:
ae:1b:38:df:17:f3:f7:15:84:db:94:e4:ba:82:5a:58:d1:29:
27:c3:bd:90:b7:12:77:16:3a:ec:14:cc:f4:d3:14:ae:e5:0e:
7d:dc:28:a2:a0:5d:46:4e:63:cf:22:3f:37:6a:84:eb:ca:58:
f1:2c:6b:11:2d:e2:e4:b5:f5:0a:ad:3c:71:fb:44:7c:b0:30:
f3:76:69:76:4a:bc:fd:1e:5b:21:5b:06:4c:df:77:aa:b5:d4:
b9:4b:d1:50:e4:32:1f:fc:7a:b4:24:2d:28:0e:37:09:d4:af:
ce:fb:d2:27:23:54:71:bd:5b:fb:13:b9:fe:3d:c3:2a:86:03:
d6:3c:74:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:51:40 2026 by rpki-client