Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Euv5x_w0k6chW9j7KQUvQFHJqB8.roa
File: Euv5x_w0k6chW9j7KQUvQFHJqB8.roa (raw, json)
Hash identifier: VoM+Mdm8b5fOTaiPETEPXynAz2ohJZmPnzjz12JT2P0=
Subject key identifier: 12:EB:F9:C7:FC:34:93:A7:21:5B:D8:FB:29:05:2F:40:51:C9:A8:1F
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DDF59AFE24C570AAB7B3AAAB8A07CB4ED
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Euv5x_w0k6chW9j7KQUvQFHJqB8.roa
Signing time: Thu 30 Apr 2026 17:04:50 +0000
ROA not before: Thu 30 Apr 2026 17:04:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198250
IP address blocks: 2.26.152.0/24 maxlen: 24
2.26.154.0/24 maxlen: 24
2.26.172.0/24 maxlen: 24
2.27.165.0/24 maxlen: 24
144.31.39.0/24 maxlen: 24
144.31.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:df:59:af:e2:4c:57:0a:ab:7b:3a:aa:b8:a0:7c:b4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 30 17:04:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12ebf9c7fc3493a7215bd8fb29052f4051c9a81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:38:64:5b:00:b3:c2:3a:27:cd:7e:32:ca:a0:
2f:d4:66:2b:a3:55:59:81:4d:9e:5a:99:47:38:22:
b5:06:b6:16:ed:37:64:6a:92:8b:34:f6:b2:dd:f1:
df:2d:37:e5:7d:a1:bc:f7:a3:d6:0f:f0:d2:6d:c0:
1d:ca:22:a3:b6:d9:f3:cd:db:89:8f:94:1d:58:5e:
8e:8b:86:79:c2:39:5a:3b:e4:8f:ad:c0:d4:3a:a8:
93:81:bf:3f:a6:ad:20:7c:88:6d:75:25:97:93:a4:
96:8a:b0:6f:ad:cc:8f:ee:6b:b8:4d:57:4c:e2:01:
e9:a9:19:22:bd:b3:ef:32:44:f3:91:b0:a7:b5:e8:
61:fb:9a:0a:75:6f:d9:1a:ba:7b:da:d8:29:b5:33:
f4:94:8c:23:9c:8e:88:bb:0f:24:7f:5d:27:0b:8f:
11:e3:fc:3c:6e:25:e7:cf:1e:fd:3b:5f:59:d2:4b:
25:83:bc:38:14:e5:df:e8:2b:cc:54:db:0a:9c:11:
b7:5a:88:87:be:43:0e:c8:0c:5d:09:98:d1:17:ee:
d8:2e:61:d7:78:6c:f5:44:2c:06:92:3c:61:10:e0:
20:18:fa:92:f7:7d:1b:3c:d2:40:13:63:ee:a6:d0:
26:ab:30:b8:5e:4d:f8:92:32:ac:d9:cf:14:9c:a0:
0b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EB:F9:C7:FC:34:93:A7:21:5B:D8:FB:29:05:2F:40:51:C9:A8:1F
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Euv5x_w0k6chW9j7KQUvQFHJqB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.152.0/24
2.26.154.0/24
2.26.172.0/24
2.27.165.0/24
144.31.39.0/24
144.31.146.0/24
Signature Algorithm: sha256WithRSAEncryption
42:bc:13:f2:e0:c2:f5:b7:0a:78:97:bb:e4:4e:97:f8:d4:e3:
6d:0e:97:89:97:d4:6e:a2:9f:2b:6d:f8:ea:b3:3c:4a:2b:68:
10:fd:08:5f:fa:8c:8f:9d:af:9c:8c:fd:c9:2d:9d:64:2b:5f:
b2:65:f7:64:2c:91:b3:32:08:b1:75:8e:81:56:99:2b:9e:fa:
ae:2f:6e:ed:77:e9:38:bc:fb:b7:7f:b3:88:26:a9:52:65:2e:
ee:ef:24:de:2a:89:f7:ee:85:44:cc:b3:e2:f9:ed:cb:f6:81:
8d:a6:25:04:05:a8:ac:ad:b6:15:53:b8:6d:f9:45:e5:57:bf:
39:72:4e:ad:05:0d:9a:55:f1:76:9c:69:1d:04:7f:ca:5a:3e:
68:b0:6d:7a:09:db:87:58:e4:34:aa:ed:78:c9:c3:0f:c3:40:
de:9b:72:c2:ba:0c:94:4c:7d:7c:1f:9c:a6:f9:51:33:e3:1d:
af:3e:87:e5:f2:b4:31:e7:4b:dd:3f:c1:c4:09:65:8b:53:2f:
c4:66:97:2d:e0:88:f5:65:b1:6d:03:8f:ce:35:1f:48:72:67:
5b:a4:56:15:26:d0:20:ae:db:56:3a:e9:70:4d:f2:9f:76:58:
68:bd:64:e6:da:67:19:6c:21:b2:af:12:00:4e:9a:5f:4c:f4:
1b:ac:f9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:52:00 2026 by rpki-client