Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/IMqkyLbOIC_yZIJiUYZXtIu4F3Y.roa
File: IMqkyLbOIC_yZIJiUYZXtIu4F3Y.roa (raw, json)
Hash identifier: VCQvcS0lZynK3FshJrUygV8Gu7uKHpB31Zp4wGof0/M=
Subject key identifier: 20:CA:A4:C8:B6:CE:20:2F:F2:64:82:62:51:86:57:B4:8B:B8:17:76
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A082D455057B6174C5EC8868E2051A73AE
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/IMqkyLbOIC_yZIJiUYZXtIu4F3Y.roa
Signing time: Tue 08 Sep 2026 21:02:28 +0000
ROA not before: Tue 08 Sep 2026 21:02:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199529
IP address blocks: 2.26.94.0/24 maxlen: 24
2.26.127.0/24 maxlen: 24
2.26.177.0/24 maxlen: 24
2.26.178.0/24 maxlen: 24
2.26.188.0/24 maxlen: 24
2.27.255.0/24 maxlen: 24
31.76.90.0/24 maxlen: 24
31.77.96.0/24 maxlen: 24
31.77.98.0/24 maxlen: 24
31.77.116.0/24 maxlen: 24
31.77.124.0/24 maxlen: 24
31.77.127.0/24 maxlen: 24
31.77.211.0/24 maxlen: 24
31.77.217.0/24 maxlen: 24
31.77.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:d4:55:05:7b:61:74:c5:ec:88:68:e2:05:1a:73:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 8 21:02:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20caa4c8b6ce202ff2648262518657b48bb81776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:24:f9:11:91:03:0e:f4:c0:cf:df:d9:44:1f:
c0:99:47:e8:fa:90:b6:66:12:61:27:31:51:23:6c:
75:d3:82:f3:1e:20:03:1f:66:fb:b9:c4:2e:f8:03:
81:dc:f5:a0:eb:fe:35:ce:8b:ee:78:d3:3b:80:8e:
e0:7d:2e:ab:c0:22:ed:41:c6:2a:90:b7:14:11:23:
e3:9c:30:47:60:b7:dc:32:49:06:93:40:96:08:a4:
00:c8:6c:4d:8a:37:2f:be:34:03:63:a6:c8:47:43:
f9:95:a4:4a:b9:fa:30:2c:be:0d:f4:a4:69:02:1b:
73:12:be:06:cd:03:e8:3c:64:6a:ae:c0:5d:cc:db:
2b:05:d0:19:7c:ea:67:9d:1d:2b:04:e0:f1:09:a9:
52:55:9c:fb:82:ae:a8:a7:ea:d0:87:14:2b:2f:b0:
00:b6:4a:a3:75:2e:52:cb:c1:80:7c:4e:f0:0e:e5:
b7:0e:9d:98:93:68:4c:0f:72:4d:e1:74:f4:6a:fa:
67:57:48:84:1b:88:b2:4f:c0:20:cd:0f:e3:59:e3:
a4:72:56:b3:54:da:0b:90:52:f6:d8:8d:68:01:a9:
b7:b1:f5:27:22:9c:8c:f5:4f:20:67:b8:36:b5:41:
76:5d:51:fd:73:6f:b7:f7:c6:5a:e4:12:38:f2:bf:
f9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CA:A4:C8:B6:CE:20:2F:F2:64:82:62:51:86:57:B4:8B:B8:17:76
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/IMqkyLbOIC_yZIJiUYZXtIu4F3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.94.0/24
2.26.127.0/24
2.26.177.0-2.26.178.255
2.26.188.0/24
2.27.255.0/24
31.76.90.0/24
31.77.96.0/24
31.77.98.0/24
31.77.116.0/24
31.77.124.0/24
31.77.127.0/24
31.77.211.0/24
31.77.217.0/24
31.77.229.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:0b:f9:07:c8:34:0c:8c:70:09:6d:e3:65:87:81:56:44:6d:
19:ce:e4:67:43:35:e3:df:4b:3d:57:62:ee:07:06:3b:49:3a:
b5:96:52:42:6b:44:81:b3:45:90:e7:04:f6:b6:3a:c2:0c:86:
3e:86:54:5b:26:00:59:b5:30:8b:c5:79:1a:9e:40:bf:f5:3b:
b5:91:37:90:cb:52:34:1c:f6:ca:45:b5:bc:89:9f:5c:5b:c8:
17:f4:80:d7:79:21:82:2b:74:c7:8a:c4:a7:a8:af:80:de:83:
d2:d4:aa:5e:1f:27:c3:d3:d2:b2:17:20:d1:df:6b:ab:e0:0e:
75:67:ac:5c:82:bb:e9:68:92:e7:71:45:a9:7e:5c:a1:7f:1a:
08:e8:53:a6:34:81:f1:d6:e8:9f:ff:ac:15:84:df:96:12:0b:
37:ee:8d:a5:f4:54:c1:40:22:c1:44:fb:94:ce:6d:6e:1a:35:
e0:78:b0:ba:9b:a0:20:62:e9:ab:30:39:5c:e4:cc:ff:ba:f1:
0e:cc:fc:9b:f7:ca:19:bf:24:3d:1f:9c:54:55:0b:e7:8b:33:
bc:56:b8:8b:46:90:b9:87:c0:a9:8e:8e:36:7a:9a:dd:0f:52:
1c:1c:c6:32:eb:3f:c2:90:02:7e:98:f1:5e:5f:40:1b:ea:3e:
e7:15:6c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:25 2026 by rpki-client