Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/IhYp_UJ9MJFISh2pjXvwCtzAHzo.roa
File: IhYp_UJ9MJFISh2pjXvwCtzAHzo.roa (raw, json)
Hash identifier: jZTzvibzffF63Eub/AYplleSUCgWABmpKkcekaS2DvI=
Subject key identifier: 22:16:29:FD:42:7D:30:91:48:4A:1D:A9:8D:7B:F0:0A:DC:C0:1F:3A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A11D1AB771784E0714CC3F046016103F7B
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/IhYp_UJ9MJFISh2pjXvwCtzAHzo.roa
Signing time: Thu 08 Oct 2026 20:00:52 +0000
ROA not before: Thu 08 Oct 2026 20:00:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200775
IP address blocks: 2.26.192.0/21 maxlen: 24
179.254.164.0/23 maxlen: 24
191.217.218.0/23 maxlen: 24
191.217.226.0/23 maxlen: 24
191.217.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:1a:b7:71:78:4e:07:14:cc:3f:04:60:16:10:3f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 8 20:00:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=221629fd427d3091484a1da98d7bf00adcc01f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:aa:6a:0a:12:36:e4:a7:1e:86:b4:d3:8e:25:
2f:64:a8:9b:8f:fe:1c:a4:36:b4:dd:82:d8:d9:ce:
4b:7b:77:ac:ff:ba:1f:e2:36:7a:81:03:c3:cb:02:
56:36:58:e5:43:4a:41:7e:b6:ac:1a:6b:ea:29:4e:
4b:85:09:ef:3e:48:3a:02:f5:2c:cc:cb:0d:09:49:
bf:72:9e:2f:c8:98:54:68:5b:11:8b:a2:d2:05:d7:
73:54:28:4d:2e:2a:d0:b4:10:d3:39:d7:eb:ec:ce:
70:32:2e:ad:85:7b:3c:f1:99:c0:70:39:5d:ff:c7:
ee:09:ac:b3:97:62:5e:4f:6d:bc:dd:1d:ef:2e:59:
92:28:61:1e:c7:44:93:29:f8:c1:08:c7:bc:6c:40:
f9:34:9e:a8:f0:47:9b:35:81:4e:87:b5:b2:87:15:
f7:4c:19:f1:17:f6:ab:5c:b9:18:c0:f1:d5:ca:2d:
9a:55:f5:f3:0f:1e:87:91:b4:d5:15:70:7b:58:ed:
ea:64:63:22:65:2f:c0:30:d5:ac:c6:2c:4d:eb:f7:
3e:13:29:02:ec:48:20:dc:87:f8:24:50:72:26:4c:
7c:1f:ea:c3:19:78:0e:d4:27:dc:13:89:15:49:6f:
2e:8d:ef:f1:b2:ba:20:ae:7d:a0:35:5a:88:41:8e:
51:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:16:29:FD:42:7D:30:91:48:4A:1D:A9:8D:7B:F0:0A:DC:C0:1F:3A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/IhYp_UJ9MJFISh2pjXvwCtzAHzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.192.0/21
179.254.164.0/23
191.217.218.0/23
191.217.226.0/23
191.217.230.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:df:e8:a4:44:41:6c:17:54:88:7a:55:61:f7:71:e0:ad:ee:
3c:90:5d:c8:38:50:76:e1:55:f8:5c:32:b0:9f:53:e9:0b:13:
b9:88:b1:95:e7:60:46:90:35:89:46:21:a1:35:a9:a9:e8:b9:
57:ab:cf:2b:10:f8:40:63:f8:35:4b:a9:e7:60:1e:af:c4:ed:
e4:5a:8c:db:ed:aa:f1:25:d2:89:23:d6:5d:7c:bb:9d:98:01:
fd:b2:bc:24:ee:76:18:4a:0f:48:66:ba:07:c6:11:69:a4:15:
bb:9f:02:42:76:3a:5f:43:a4:3e:d4:2f:b8:38:64:6b:0c:9d:
61:eb:0a:b3:e0:33:0b:31:fb:3b:93:3e:61:89:ed:32:7d:5b:
8c:36:7c:3f:ea:68:c3:b2:ab:b8:a8:27:74:11:45:a2:5d:16:
e4:2e:f6:52:30:5a:a5:af:66:20:e2:2f:d4:c0:d2:59:c1:d9:
85:ba:36:39:b8:4a:47:ba:fd:6a:05:98:91:8e:35:c6:d1:d9:
fc:ad:b4:88:03:71:88:a5:71:2c:07:a2:e0:36:79:2a:42:47:
dc:b3:5d:b0:e3:70:bc:64:6a:b2:c0:ac:69:9c:05:05:80:8c:
41:49:a1:2c:0f:b0:70:70:fa:3d:2e:08:43:77:10:77:9c:92:
44:7b:71:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:15:11 2026 by rpki-client