Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/II9SfH1sPZcRvc4M5KArK8JbZtA.roa
File: II9SfH1sPZcRvc4M5KArK8JbZtA.roa (raw, json)
Hash identifier: eVKWeHq/DaKOKGm0FSMjw6DQxCgciDi57/omaPpEi8c=
Subject key identifier: 20:8F:52:7C:7D:6C:3D:97:11:BD:CE:0C:E4:A0:2B:2B:C2:5B:66:D0
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0D4B12A56FADBB0CD81588D201C274BB3
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/II9SfH1sPZcRvc4M5KArK8JbZtA.roa
Signing time: Thu 24 Sep 2026 18:32:55 +0000
ROA not before: Thu 24 Sep 2026 18:32:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216475
IP address blocks: 2.26.138.0/24 maxlen: 24
2.27.64.0/22 maxlen: 24
31.77.32.0/23 maxlen: 24
31.77.40.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:b1:2a:56:fa:db:b0:cd:81:58:8d:20:1c:27:4b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 24 18:32:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=208f527c7d6c3d9711bdce0ce4a02b2bc25b66d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:67:57:22:ec:9f:4b:80:3e:27:10:9b:9b:85:
51:54:d3:42:0c:5c:7c:c0:85:80:b6:a7:ff:e4:5a:
83:62:5d:ce:04:f9:4a:32:72:3a:77:ab:fd:43:d6:
38:b5:4b:98:f5:b5:20:38:76:66:ce:79:d3:7c:ed:
00:f1:28:b6:2a:e8:77:da:dd:8c:b6:74:f0:b1:f0:
ac:d8:dd:07:e4:c0:5e:d5:c7:38:6a:6d:ca:5f:3b:
be:64:16:9f:59:8b:a3:27:0e:4b:44:56:c6:24:65:
e5:8f:88:c1:74:17:0a:f1:e2:f3:52:a1:29:9c:e8:
e4:9b:41:7e:58:d6:9a:0e:61:61:f5:9a:1a:ca:57:
fa:98:c1:29:9f:62:90:73:af:c4:d9:69:11:a2:19:
b2:89:f2:78:d9:f8:17:81:38:55:28:8c:81:2a:07:
31:a9:41:39:18:b1:04:d3:cb:4e:ee:c6:96:0f:c0:
9c:55:a8:f1:a7:41:cf:53:f4:4c:9e:66:d7:4e:bb:
9a:4f:fa:1f:1f:90:f8:4e:9b:0b:7d:94:03:55:3f:
54:b3:b7:9e:43:ed:c2:84:33:0d:9d:da:6a:b5:8f:
63:21:17:0c:ee:86:38:63:9f:b6:8c:5d:a1:06:0b:
7b:8a:16:02:6c:ec:20:5a:ef:8a:58:d9:7e:fe:2e:
ba:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8F:52:7C:7D:6C:3D:97:11:BD:CE:0C:E4:A0:2B:2B:C2:5B:66:D0
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/II9SfH1sPZcRvc4M5KArK8JbZtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.138.0/24
2.27.64.0/22
31.77.32.0/23
31.77.40.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:ff:37:f1:9a:95:29:45:f8:ec:52:53:fd:d0:a8:b6:9f:d8:
13:e5:8e:17:71:68:05:42:6c:5d:cf:ee:2b:12:b2:71:c8:32:
d9:c1:65:31:48:bf:a5:10:e4:16:f8:2a:1d:69:e5:35:42:5c:
cd:1a:30:e8:2f:99:e1:22:d9:f8:75:b8:c4:60:ac:63:a3:d2:
3c:4a:97:50:f7:b4:e8:ec:16:be:ff:db:e6:7f:a3:a7:27:64:
36:0c:4e:34:72:7b:ce:bf:6e:e0:af:5d:44:5b:27:79:a5:26:
dd:a8:b1:6a:7c:cb:3c:01:bb:33:b7:1f:89:c1:4a:51:af:2b:
73:2a:25:bf:87:3d:29:5e:de:70:ac:a9:cd:f5:77:95:5c:19:
86:8a:40:f0:a1:1a:73:7a:4c:1a:99:e8:e6:4c:f2:8c:09:15:
67:48:ee:bf:23:d5:4f:93:a1:4d:26:ae:d8:13:0c:a7:ae:da:
29:b3:a2:ed:ee:21:1a:8c:17:c6:66:01:97:bf:b7:84:97:62:
5e:45:f2:b6:f8:60:8d:ed:fa:de:88:a1:c4:da:cd:b4:e1:11:
65:d6:85:3a:cb:8c:4c:12:94:e4:f1:58:d8:59:14:c0:b6:50:
73:83:37:80:ee:11:e1:09:8a:1b:c6:8e:5c:6a:e9:97:c5:d5:
c8:08:96:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:51:46 2026 by rpki-client