Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Afp3X_TAnv_fr3eIDm1VHLbMivg.roa
File: Afp3X_TAnv_fr3eIDm1VHLbMivg.roa (raw, json)
Hash identifier: tlr2wUOP9B4f7KbcVd3UXqRZyNHkEoRHzbudKKh/CA8=
Subject key identifier: 01:FA:77:5F:F4:C0:9E:FF:DF:AF:77:88:0E:6D:55:1C:B6:CC:8A:F8
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A06E1EB64706F7F9BC799D942696B3E5D6
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Afp3X_TAnv_fr3eIDm1VHLbMivg.roa
Signing time: Fri 04 Sep 2026 20:31:41 +0000
ROA not before: Fri 04 Sep 2026 20:31:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207567
IP address blocks: 2.26.124.0/23 maxlen: 24
2.26.254.0/24 maxlen: 24
2.26.255.0/24 maxlen: 24
2.27.12.0/22 maxlen: 24
31.76.240.0/23 maxlen: 24
77.239.112.0/24 maxlen: 24
77.239.114.0/24 maxlen: 24
144.31.215.0/24 maxlen: 24
150.241.65.0/24 maxlen: 24
150.241.68.0/24 maxlen: 24
150.241.92.0/24 maxlen: 24
193.23.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:1e:b6:47:06:f7:f9:bc:79:9d:94:26:96:b3:e5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 4 20:31:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01fa775ff4c09effdfaf77880e6d551cb6cc8af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ba:40:92:96:37:15:00:bc:56:a3:db:0b:1b:
c8:24:7e:a5:ca:ff:ed:69:51:c1:7e:b2:91:3b:22:
6b:4e:23:42:a7:fd:da:72:1c:18:99:3f:f9:34:e3:
01:4b:af:90:4b:ee:7b:e9:3a:09:9b:7b:14:98:af:
40:47:e6:3f:8b:a3:a3:87:cd:8e:d6:89:da:62:61:
32:33:ac:3c:bc:ae:97:76:f8:d1:8e:b6:67:c7:88:
e9:d6:c3:95:e5:22:43:04:10:04:f7:6e:be:a1:1f:
35:c4:d2:24:53:bc:83:68:9b:36:47:5b:11:5d:c1:
3c:c3:8c:70:aa:fd:af:b8:12:86:54:16:17:f0:35:
cd:6c:9e:7a:e9:e4:49:e3:20:06:31:c5:0c:3b:eb:
64:a2:28:0d:e9:fa:af:22:2b:cf:ec:24:0c:89:23:
86:41:0f:c1:22:f8:11:ac:52:86:79:b5:3c:2f:03:
4e:18:e5:ce:24:6a:8a:ea:2e:01:3a:84:8d:f1:4e:
3a:6c:e4:55:fe:5a:08:07:0b:d2:db:b1:da:30:59:
42:4f:23:ed:81:c2:b9:c7:f2:fe:5a:8a:74:f2:de:
46:02:5e:38:6c:7b:5b:0d:92:9d:ab:23:c9:bf:2f:
29:0a:63:50:09:a1:3e:92:c9:48:fc:b1:fc:ac:a7:
21:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FA:77:5F:F4:C0:9E:FF:DF:AF:77:88:0E:6D:55:1C:B6:CC:8A:F8
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Afp3X_TAnv_fr3eIDm1VHLbMivg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.124.0/23
2.26.254.0/23
2.27.12.0/22
31.76.240.0/23
77.239.112.0/24
77.239.114.0/24
144.31.215.0/24
150.241.65.0/24
150.241.68.0/24
150.241.92.0/24
193.23.222.0/24
Signature Algorithm: sha256WithRSAEncryption
18:01:05:79:24:8d:ba:cb:0d:6c:08:25:66:5e:e4:c7:00:f4:
20:c2:3c:08:e8:3a:7e:d7:49:c1:80:60:67:e8:ca:a0:9a:2d:
c2:e6:35:b6:f2:94:1b:23:d2:b6:25:fb:d0:8e:80:a0:39:b4:
81:4e:01:04:fb:13:fb:be:ab:44:22:8d:f9:40:80:b3:59:70:
a4:48:1f:82:bb:c2:27:81:a6:1f:38:9e:c2:b6:d8:4e:84:5f:
ae:08:d4:18:11:38:4f:c6:bc:54:80:a2:d1:ce:66:a1:f0:bd:
bd:c6:11:7e:33:63:31:a3:95:e8:d2:89:a9:26:90:e2:47:9f:
8d:e7:3a:0f:38:4e:0d:f2:f4:f3:88:c8:c8:20:43:63:3f:c0:
61:58:52:58:c5:52:28:74:52:f3:5e:2a:33:10:06:25:36:63:
ab:9b:39:57:1d:e6:39:60:c3:0a:1f:9f:86:2e:31:41:44:69:
2d:d7:47:c6:46:fc:80:ca:ef:d8:ef:7b:80:d5:8f:09:a7:e3:
dd:d8:76:66:85:a3:f7:fb:a3:88:41:29:cc:08:77:ac:5e:02:
43:7b:07:c7:0e:89:20:88:e4:ab:ee:5b:f8:30:5b:47:b0:14:
f7:3a:7c:be:a8:42:5e:61:eb:98:73:99:0a:52:a6:93:72:90:
0a:bc:84:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:24:45 2026 by rpki-client