Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Gv3n89SPdqTmSWYmSsfgfPYQgcE.roa
File: Gv3n89SPdqTmSWYmSsfgfPYQgcE.roa (raw, json)
Hash identifier: yyCEHNhSgeL/rB4oWLgeCaKzd3Ngx+3XeaQFBVlK9Qo=
Subject key identifier: 1A:FD:E7:F3:D4:8F:76:A4:E6:49:66:26:4A:C7:E0:7C:F6:10:81:C1
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DB0FD453FCA3568ECEB711A38CD07BDE1
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Gv3n89SPdqTmSWYmSsfgfPYQgcE.roa
Signing time: Tue 21 Apr 2026 17:01:21 +0000
ROA not before: Tue 21 Apr 2026 17:01:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21840
IP address blocks: 2.26.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 18:14:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:fd:45:3f:ca:35:68:ec:eb:71:1a:38:cd:07:bd:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 21 17:01:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1afde7f3d48f76a4e64966264ac7e07cf61081c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:96:7b:c7:36:6e:23:8f:4c:6a:ee:eb:4f:07:
e5:19:2d:65:04:33:d3:04:33:8b:60:cf:72:08:a5:
d1:82:ea:ab:3c:a8:b2:d6:8f:83:01:f3:66:d2:66:
7f:be:68:26:20:e5:69:68:ed:b9:c0:92:a0:87:0c:
36:9b:8e:a6:91:49:f9:7f:a7:6f:46:68:d1:20:a8:
e1:00:e4:00:7a:58:4c:b8:f0:52:4c:af:82:0b:6d:
ed:15:7a:45:b2:73:ca:8c:99:6f:ec:c3:4a:a4:d0:
79:a3:19:ff:a5:09:d8:09:e8:a1:86:38:c1:c3:f3:
6a:b9:04:b6:fd:d0:bf:11:3f:5f:68:cd:94:76:d9:
e6:73:3a:c9:9a:16:ea:4d:77:4f:6a:be:b9:71:95:
6e:83:d5:4f:9d:35:c9:93:d3:58:b0:59:c0:d4:93:
a3:90:a9:41:17:16:c9:69:13:dc:2d:f2:cd:c1:6c:
8a:e7:f0:3f:29:b9:45:96:35:0e:93:38:9c:62:ca:
0b:aa:ed:38:65:c9:58:49:7e:85:eb:8f:0c:ca:a6:
2e:34:26:39:b3:56:53:7e:24:78:16:78:9a:e5:b7:
6f:7c:0a:45:43:78:dd:1e:97:72:00:10:40:e7:e6:
4b:03:3b:70:30:ef:b3:98:ee:04:b2:55:e2:1b:31:
1c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FD:E7:F3:D4:8F:76:A4:E6:49:66:26:4A:C7:E0:7C:F6:10:81:C1
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Gv3n89SPdqTmSWYmSsfgfPYQgcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.221.0/24
Signature Algorithm: sha256WithRSAEncryption
79:5b:ca:bd:67:e7:f5:20:0e:5d:93:94:71:8d:6d:81:da:82:
42:20:cf:0b:49:c8:f7:d7:29:44:10:ee:6b:ef:37:43:86:4e:
f1:ed:66:2d:c0:fa:16:a1:4b:5b:56:6c:c0:21:1d:f3:4e:5c:
d9:f1:0a:6b:27:40:de:b8:5b:22:50:6f:39:3a:9c:d4:31:b0:
b0:9a:04:fd:0b:10:46:75:e5:31:b8:83:64:af:b3:44:29:fd:
63:df:c0:09:47:c3:b0:40:e6:76:0b:0a:ee:b4:ff:7b:ee:af:
28:e6:cc:44:9c:27:5a:bb:03:9b:07:cf:39:a8:48:50:c7:f2:
74:fc:d8:29:1d:ee:c1:be:ce:19:58:cf:ed:d6:09:18:a7:03:
3d:48:cd:59:75:fa:25:49:b4:fd:99:5b:0d:b7:e6:5f:20:07:
40:04:fd:03:36:a3:a0:08:61:9e:72:25:21:40:12:7e:2b:6f:
7c:bb:7a:6d:2d:1d:a3:cc:d6:e1:f8:6f:99:04:9c:f0:d3:30:
52:43:e4:c3:e2:31:79:52:3b:86:03:59:14:44:9d:62:33:66:
ef:f9:53:9c:98:a6:5f:35:b9:0b:06:0f:9e:a5:94:8f:af:fc:
c7:2a:6b:44:2b:9f:b8:1c:ad:90:93:e4:a8:db:fe:c8:74:a5:
a0:9b:cd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 02:53:56 2026 by rpki-client