Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ADMYLWUx5XF-CguvM5XR-UECeL8.roa
File: ADMYLWUx5XF-CguvM5XR-UECeL8.roa (raw, json)
Hash identifier: xGywaSmdb24+5nRhcOck1aWD0rus2YZbDoh5w7XeebA=
Subject key identifier: 00:33:18:2D:65:31:E5:71:7E:0A:0B:AF:33:95:D1:F9:41:02:78:BF
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E2D1567176B3390B34C045D0F43111FC3
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ADMYLWUx5XF-CguvM5XR-UECeL8.roa
Signing time: Fri 15 May 2026 19:20:37 +0000
ROA not before: Fri 15 May 2026 19:20:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215703
IP address blocks: 2.26.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 20 May 2026 13:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2d:15:67:17:6b:33:90:b3:4c:04:5d:0f:43:11:1f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 15 19:20:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0033182d6531e5717e0a0baf3395d1f9410278bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b0:26:c6:2a:98:20:b6:da:cc:2f:c1:21:8d:
7f:62:d5:74:75:2c:fb:5f:99:a1:d3:99:35:fd:ba:
4f:cf:c6:5f:45:9c:37:95:5d:6b:3d:a4:06:43:60:
f5:95:7c:6b:1c:a7:36:2b:ff:e3:68:9e:30:36:9d:
07:08:7d:76:da:99:b3:bd:46:27:e1:69:2c:7e:22:
52:6a:dc:d8:c7:81:5b:4c:a2:f5:9e:3c:63:e6:7e:
ad:55:cf:a5:89:7a:c2:0a:ef:29:09:33:6a:48:88:
a4:8b:34:69:b7:e0:89:6c:57:33:76:bb:59:69:60:
1b:e8:03:83:67:27:7b:fa:6f:75:79:57:82:07:8b:
e2:d7:4c:d5:79:0c:58:48:e0:3f:76:79:c0:bf:43:
01:69:b8:d2:fa:2d:ee:79:b2:50:05:66:ed:fa:44:
27:4a:7b:40:a5:4b:75:32:f7:71:2b:9c:7b:38:a8:
56:2d:3d:4b:41:18:16:e3:76:f2:2b:f6:53:53:eb:
a4:0b:7e:79:30:6d:68:5f:dc:48:fb:8f:b9:ad:c2:
8c:e4:da:6e:2c:03:d2:f0:9e:39:d4:c4:92:56:df:
50:f1:f5:23:05:12:3b:07:ed:0d:47:dc:bd:cc:b6:
5b:d5:64:43:cb:f2:7f:0b:7e:3a:cc:18:e4:b1:1b:
93:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:33:18:2D:65:31:E5:71:7E:0A:0B:AF:33:95:D1:F9:41:02:78:BF
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ADMYLWUx5XF-CguvM5XR-UECeL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.172.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:ef:d6:88:b2:3b:b8:d9:65:36:d9:fd:d1:43:18:28:a8:40:
ee:89:a4:f2:8a:7e:1b:51:32:d0:7e:8c:2c:94:ed:96:06:45:
17:fc:b4:d2:75:5b:9e:a9:a0:78:eb:00:7c:b5:c3:8b:bb:6e:
55:be:b6:ac:65:8f:20:26:37:1d:8c:79:72:d2:51:04:34:e9:
4a:3a:c9:f3:b1:dd:9c:29:ce:52:2b:be:66:be:99:52:57:cb:
52:6f:aa:e8:fd:4c:19:25:89:22:86:03:b7:9c:81:0e:b5:1e:
80:ca:5f:50:7a:e1:15:29:d3:28:f8:f4:b9:de:58:a8:39:6c:
67:1a:7f:fd:57:13:21:15:c6:2f:ae:71:d0:02:7d:e9:79:41:
27:0a:7f:80:8e:f3:60:d2:2d:37:01:94:40:f7:05:d2:b9:83:
4c:13:32:46:50:36:cc:f9:50:1f:e3:7c:bf:c5:f8:b5:5f:53:
82:5f:f6:e2:9c:00:ed:70:7a:aa:23:82:cd:56:ce:00:15:af:
90:11:b4:15:ac:c0:4a:76:4e:90:97:74:bc:e6:86:39:10:b2:
d5:38:9b:4c:73:4e:49:39:c5:70:3c:b9:47:83:fa:99:af:62:
16:56:ee:36:6e:1c:e9:33:89:da:06:f3:d6:f6:4c:30:84:2f:
eb:d7:3c:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ4tFWcXazOQs0wEXQ9DER/DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNTE1MTkyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDMzMTgyZDY1MzFlNTcxN2UwYTBiYWYzMzk1ZDFmOTQxMDI3OGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLAmxiqYILbazC/BIY1/YtV0dSz7
X5mh05k1/bpPz8ZfRZw3lV1rPaQGQ2D1lXxrHKc2K//jaJ4wNp0HCH122pmzvUYn
4WksfiJSatzYx4FbTKL1njxj5n6tVc+liXrCCu8pCTNqSIikizRpt+CJbFczdrtZ
aWAb6AODZyd7+m91eVeCB4vi10zVeQxYSOA/dnnAv0MBabjS+i3uebJQBWbt+kQn
SntApUt1MvdxK5x7OKhWLT1LQRgW43byK/ZTU+ukC355MG1oX9xI+4+5rcKM5Npu
LAPS8J451MSSVt9Q8fUjBRI7B+0NR9y9zLZb1WRDy/J/C346zBjksRuTHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAAzGC1lMeVxfgoLrzOV0flBAni/MB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvQURNWUxXVXg1WEYtQ2d1dk01WFItVUVDZUw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAhqsMA0G
CSqGSIb3DQEBCwUAA4IBAQAP79aIsju42WU22f3RQxgoqEDuiaTyin4bUTLQfows
lO2WBkUX/LTSdVueqaB46wB8tcOLu25VvrasZY8gJjcdjHly0lEENOlKOsnzsd2c
Kc5SK75mvplSV8tSb6ro/UwZJYkihgO3nIEOtR6Ayl9QeuEVKdMo+PS53lioOWxn
Gn/9VxMhFcYvrnHQAn3peUEnCn+AjvNg0i03AZRA9wXSuYNMEzJGUDbM+VAf43y/
xfi1X1OCX/binADtcHqqI4LNVs4AFa+QEbQVrMBKdk6Ql3S85oY5ELLVOJtMc05J
OcVwPLlHg/qZr2IWVu42bhzpM4naBvPW9kwwhC/r1zzu
-----END CERTIFICATE-----
Generated at Tue May 19 21:45:52 2026 by rpki-client