Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8dtKZMYDy4w7qsT0trfToFnX0WE.roa
File: 8dtKZMYDy4w7qsT0trfToFnX0WE.roa (raw, json)
Hash identifier: f0Zm69fNIAiU8vnv9J7tv/jgI3FBVFq6zNQrCtaBvvY=
Subject key identifier: F1:DB:4A:64:C6:03:CB:8C:3B:AA:C4:F4:B6:B7:D3:A0:59:D7:D1:61
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A082D455F4B6B4200F58B90553C185E1B7
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8dtKZMYDy4w7qsT0trfToFnX0WE.roa
Signing time: Tue 08 Sep 2026 21:02:28 +0000
ROA not before: Tue 08 Sep 2026 21:02:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204966
IP address blocks: 2.26.177.0/24 maxlen: 24
2.26.178.0/24 maxlen: 24
2.27.255.0/24 maxlen: 24
31.77.96.0/24 maxlen: 24
31.77.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:d4:55:f4:b6:b4:20:0f:58:b9:05:53:c1:85:e1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 8 21:02:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1db4a64c603cb8c3baac4f4b6b7d3a059d7d161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a2:83:23:0d:ae:36:cc:2f:3e:0c:0a:e2:75:
1b:7b:be:6a:da:f5:5d:36:93:f6:5e:ad:6c:39:5c:
0f:e7:cc:da:f5:c8:d3:4c:ca:b3:da:27:84:28:c1:
2a:5d:20:6a:99:b0:14:12:3c:7c:0a:fd:b1:16:5a:
82:b5:dc:b7:94:48:bc:5d:53:a5:79:de:7f:8f:ea:
80:57:fa:0a:40:fe:c7:5c:62:0b:35:6c:88:82:71:
a5:64:df:53:85:0c:18:c2:ba:05:0c:68:bd:bf:a3:
af:7f:b9:c4:e5:e9:72:c2:c1:a5:19:93:60:5d:67:
fe:67:6c:74:0f:5b:5a:ba:bb:eb:f6:60:5e:a5:1e:
80:3d:93:4f:5a:5a:55:90:55:53:d9:c0:41:70:0f:
2b:79:08:c8:4d:6b:1f:02:9f:61:62:a8:28:6f:51:
80:76:82:30:cd:ae:90:01:2e:19:61:6b:0e:18:e7:
01:b6:89:ec:aa:04:91:a3:19:4a:cc:c4:41:cf:21:
63:cd:fb:d3:f8:c0:ea:e1:e7:5e:2d:e3:91:49:d8:
8e:48:00:76:94:8a:29:51:61:f0:9d:6d:04:61:e4:
a2:27:93:ea:7d:ff:fa:8c:08:2f:23:81:33:9c:b4:
f3:0a:35:48:56:9c:94:a0:ed:2a:14:e6:fe:67:d3:
e0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DB:4A:64:C6:03:CB:8C:3B:AA:C4:F4:B6:B7:D3:A0:59:D7:D1:61
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8dtKZMYDy4w7qsT0trfToFnX0WE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.177.0-2.26.178.255
2.27.255.0/24
31.77.96.0/24
31.77.98.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:67:34:ed:c4:88:01:fc:63:e5:cd:57:bd:69:7a:13:07:41:
a8:f0:22:b5:31:0e:bf:8f:74:98:9d:0b:06:62:72:4e:38:75:
5f:04:50:7e:0d:02:63:63:65:7d:bb:12:91:d4:55:69:ca:61:
67:dc:dd:35:5c:3f:ac:8b:58:91:39:2f:c1:c6:cf:8a:5b:10:
e6:e3:96:b6:ac:6f:2b:88:59:2e:0c:74:2a:f3:f9:75:8a:e6:
89:c7:04:f8:3c:27:12:4d:a5:b3:1e:43:3c:af:be:bc:d0:8c:
91:a2:cc:e3:4f:b1:70:38:1d:a4:5e:29:36:12:e2:42:78:d0:
55:7c:42:20:5a:72:5c:2d:b2:98:38:f8:88:a7:31:76:72:9c:
7f:72:40:4a:0c:3a:ad:03:86:98:a7:4c:ff:09:08:26:1d:71:
6b:41:84:ea:0c:78:de:50:0a:42:83:34:f4:29:4a:0f:0c:12:
29:43:01:b3:ea:bc:8d:c5:39:46:4c:f4:61:f2:5f:8c:d6:d7:
60:9b:06:ef:d4:d1:5b:79:14:c6:7f:ad:ac:f3:cf:6e:aa:60:
02:af:d4:0b:28:b6:96:d6:3c:e6:cf:a7:af:17:0f:f6:fa:0b:
19:de:a4:69:e1:ba:82:68:5a:37:ac:4f:21:9b:49:00:96:e1:
6d:72:09:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:20 2026 by rpki-client