Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JCocP4wgKTYxiqDtUKFjRssby-4.roa
File: JCocP4wgKTYxiqDtUKFjRssby-4.roa (raw, json)
Hash identifier: bqcwIJwVvK7haf+Qgap5LOz2kV0anHYmflzhpZKiDqY=
Subject key identifier: 24:2A:1C:3F:8C:20:29:36:31:8A:A0:ED:50:A1:63:46:CB:1B:CB:EE
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DCFDFDAB5F89687779DC1F753767EDB00
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JCocP4wgKTYxiqDtUKFjRssby-4.roa
Signing time: Mon 27 Apr 2026 16:57:27 +0000
ROA not before: Mon 27 Apr 2026 16:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207567
IP address blocks: 2.26.124.0/23 maxlen: 24
2.26.254.0/24 maxlen: 24
2.26.255.0/24 maxlen: 24
2.27.12.0/22 maxlen: 24
31.76.240.0/23 maxlen: 24
77.239.112.0/24 maxlen: 24
77.239.114.0/24 maxlen: 24
144.31.215.0/24 maxlen: 24
150.241.65.0/24 maxlen: 24
150.241.68.0/24 maxlen: 24
150.241.92.0/24 maxlen: 24
193.23.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:df:da:b5:f8:96:87:77:9d:c1:f7:53:76:7e:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 27 16:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=242a1c3f8c202936318aa0ed50a16346cb1bcbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7d:e5:5d:6f:55:46:bc:ad:11:d8:6c:c4:7f:
09:d6:65:ae:be:c3:31:90:83:2e:bb:3f:79:65:59:
80:f1:02:9f:5a:6d:33:e4:3a:c0:7d:86:4f:67:5b:
03:27:3d:72:fa:53:e6:41:99:3a:69:cb:39:81:22:
4f:29:10:32:a4:82:0a:29:da:28:12:d4:07:0a:b3:
07:0f:6d:f3:70:e5:d5:c1:26:6d:3a:73:ce:7b:49:
a6:34:d2:38:6d:0b:a5:6b:23:cd:9b:c2:a6:f8:30:
4b:c5:3d:2e:7d:d3:40:ce:84:33:d3:0e:ee:37:b9:
05:ba:36:9d:8e:1e:a5:cd:47:a9:b7:e4:71:22:d4:
48:a6:b6:a0:bc:41:8a:02:8e:ff:88:81:21:12:73:
24:43:6b:e7:ff:d4:3f:fb:f3:aa:42:18:6f:ee:a3:
e2:3a:d5:2d:7b:03:f3:75:53:c6:1d:6d:1c:ee:ec:
8d:ac:e9:d6:ed:56:b3:b4:9c:42:62:72:0f:97:cf:
d8:0f:c2:b1:64:15:8f:a7:0d:b8:94:d0:fc:62:b4:
42:18:27:c9:1a:14:29:39:29:3c:e7:63:09:ab:18:
a5:df:b9:9b:f7:e4:21:3b:43:17:99:b6:c9:96:3a:
1c:16:30:e3:c8:33:a6:91:f1:ad:11:4a:4d:79:70:
7a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2A:1C:3F:8C:20:29:36:31:8A:A0:ED:50:A1:63:46:CB:1B:CB:EE
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JCocP4wgKTYxiqDtUKFjRssby-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.124.0/23
2.26.254.0/23
2.27.12.0/22
31.76.240.0/23
77.239.112.0/24
77.239.114.0/24
144.31.215.0/24
150.241.65.0/24
150.241.68.0/24
150.241.92.0/24
193.23.222.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:bd:ce:6c:f9:f5:7b:61:a6:aa:9f:32:83:4c:46:2e:65:a0:
b6:8c:01:48:be:a6:9f:b4:cd:f3:94:c1:c0:cb:64:5c:6d:21:
01:92:0d:04:1b:6b:f7:f2:36:cc:d9:10:a4:a3:22:6e:4d:c4:
f3:68:21:dd:38:ca:68:f1:9d:30:9f:ea:8c:6b:df:65:13:96:
bd:9b:6a:ec:43:3e:53:be:dc:73:f8:c1:3d:a2:9e:25:b1:86:
ed:a4:7c:74:78:1a:45:ca:c4:87:e3:86:c5:66:00:31:e2:cb:
92:1e:5b:44:82:30:9c:60:cc:15:34:e7:e7:c9:1b:53:84:a4:
8a:9b:95:32:dd:88:7f:13:5d:f5:dd:bf:2c:0f:68:f8:40:2c:
6e:cb:c4:12:d1:4c:9b:67:12:ee:8f:e3:7b:be:48:55:3e:d5:
a4:ce:76:ce:5a:82:1f:d6:b3:86:5a:f2:50:6e:a1:ee:5d:08:
fc:ff:00:e2:81:eb:d5:67:be:06:74:a7:44:2a:e6:7c:be:f1:
65:0c:3c:cb:d1:75:93:90:3c:c6:88:ad:8a:15:cc:57:74:02:
35:1d:75:fc:ae:ab:2d:97:98:d0:ca:47:e9:79:e8:a3:13:50:
4e:53:3d:a1:60:eb:a2:d5:e4:f3:75:a4:14:30:76:84:f0:fd:
c8:93:5b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:50:59 2026 by rpki-client