Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/F6Vn_InusNWbzs88ehuiDDZyc5M.roa
File: F6Vn_InusNWbzs88ehuiDDZyc5M.roa (raw, json)
Hash identifier: WpL5RiE1Z0A5zK+uhAwP+m7g3U+Yz9imA0AV+jlJFqE=
Subject key identifier: 17:A5:67:FC:89:EE:B0:D5:9B:CE:CF:3C:7A:1B:A2:0C:36:72:73:93
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A05F6924A66EAF99C188CEB68E00E5AFB2
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/F6Vn_InusNWbzs88ehuiDDZyc5M.roa
Signing time: Tue 01 Sep 2026 23:58:41 +0000
ROA not before: Tue 01 Sep 2026 23:58:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204966
IP address blocks: 2.26.175.0/24 maxlen: 24
2.26.177.0/24 maxlen: 24
2.26.178.0/24 maxlen: 24
2.26.191.0/24 maxlen: 24
2.27.82.0/24 maxlen: 24
2.27.163.0/24 maxlen: 24
2.27.255.0/24 maxlen: 24
31.77.96.0/24 maxlen: 24
31.77.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5f:69:24:a6:6e:af:99:c1:88:ce:b6:8e:00:e5:af:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 1 23:58:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17a567fc89eeb0d59bcecf3c7a1ba20c36727393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:06:25:2d:17:d5:d1:0e:f4:15:41:16:0a:78:
9c:4f:91:e2:31:eb:48:01:e7:19:a9:86:c0:2c:24:
14:12:52:d4:6f:f7:5c:4e:6d:41:07:33:67:f5:3e:
3d:37:5a:87:e9:de:7e:cc:f8:43:4d:aa:1e:0c:6b:
4b:0f:bd:b8:c8:f7:20:93:43:27:b6:80:7c:4f:f3:
b4:86:83:be:fb:b6:3d:c9:c8:d7:df:b7:2f:e0:b0:
3e:a8:2f:8a:63:11:42:11:47:55:8d:be:6b:da:55:
0c:d6:c8:21:88:74:ee:ea:57:2c:93:27:4a:48:fc:
cf:f9:6c:b7:67:fd:87:76:7b:32:c4:89:6b:01:3a:
c3:59:06:91:e6:e3:9e:e5:28:29:39:f3:30:0c:d9:
54:c0:c5:66:a9:46:f3:06:71:46:fd:da:cb:c6:16:
c1:ac:5a:8b:99:5b:95:62:ae:8f:50:16:86:41:df:
4b:9b:d1:27:f7:28:d1:ba:b1:8a:21:d5:c8:34:72:
d2:78:fa:5e:a0:ae:e5:67:4a:5b:21:14:c2:cb:2a:
07:ad:dc:81:53:06:e7:cc:8d:e5:4a:32:41:9d:92:
ee:93:2a:29:44:9a:46:91:94:57:8b:63:07:7e:96:
d5:fc:e8:83:a2:a0:60:c0:5a:9e:2f:bb:06:65:c3:
5f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A5:67:FC:89:EE:B0:D5:9B:CE:CF:3C:7A:1B:A2:0C:36:72:73:93
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/F6Vn_InusNWbzs88ehuiDDZyc5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.175.0/24
2.26.177.0-2.26.178.255
2.26.191.0/24
2.27.82.0/24
2.27.163.0/24
2.27.255.0/24
31.77.96.0/24
31.77.98.0/24
Signature Algorithm: sha256WithRSAEncryption
52:37:22:8c:33:d5:03:c5:ce:76:72:55:6e:5e:26:04:76:47:
6a:fe:ab:57:8b:b6:a8:7c:61:9e:6e:dd:9f:04:76:31:d5:ba:
e5:42:95:e0:8c:0a:3d:60:01:8c:a3:ae:c6:8b:99:25:a5:14:
9b:55:fc:a7:63:13:81:49:03:d0:27:b3:54:e6:0c:ce:41:83:
d2:b6:3e:2f:db:29:be:f4:94:9f:23:eb:b4:e3:9f:6f:2a:fb:
45:2b:ee:86:e4:ab:7c:c7:7f:f3:ed:4e:fc:d2:7b:d0:0c:59:
9a:c3:e1:87:94:4e:37:0a:cb:e7:2f:77:e9:39:f4:65:a7:23:
48:fb:40:97:f7:56:9f:c9:7c:c1:52:dd:41:c2:9a:4f:cb:b3:
f2:b2:c6:d0:61:25:4a:d4:be:66:bb:49:aa:5c:8a:13:5b:af:
b1:cb:3a:b7:97:04:b8:46:fe:e0:36:2e:e1:ed:e4:80:37:74:
d9:ee:02:ab:68:4d:8a:cc:2f:d9:11:79:9d:84:32:85:b6:db:
d6:c4:ae:c1:9a:3c:c5:cb:d9:2d:c8:cc:53:93:69:64:a1:bd:
ea:86:5c:c7:ae:d6:5e:42:1c:fd:4f:ef:85:14:e2:21:56:60:
11:de:c8:0a:3c:22:54:5c:a1:17:52:0a:17:15:3f:fd:1f:8a:
6e:f3:31:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:44:04 2026 by rpki-client