Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Jl2EfWEz-G27J1C-xrLqqYj9w3A.roa
File: Jl2EfWEz-G27J1C-xrLqqYj9w3A.roa (raw, json)
Hash identifier: J031jmwJ/rE7Ij1lshu8q6kR9zr9WzGq4lk9yGOutn0=
Subject key identifier: 26:5D:84:7D:61:33:F8:6D:BB:27:50:BE:C6:B2:EA:A9:88:FD:C3:70
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FD91BA47C959BEA1FD5DAF161883332FD
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Jl2EfWEz-G27J1C-xrLqqYj9w3A.roa
Signing time: Thu 06 Aug 2026 22:04:55 +0000
ROA not before: Thu 06 Aug 2026 22:04:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26519
IP address blocks: 2.26.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Aug 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d9:1b:a4:7c:95:9b:ea:1f:d5:da:f1:61:88:33:32:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 6 22:04:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=265d847d6133f86dbb2750bec6b2eaa988fdc370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fb:2b:24:5f:e2:89:16:60:56:aa:fd:2a:dc:
c7:06:a4:92:d1:91:e9:ce:53:80:b9:f8:12:23:7c:
be:0d:f6:a5:7d:2d:8c:fe:9e:44:42:ee:3f:39:c9:
fc:d9:c2:6c:d6:bb:fa:70:16:03:4d:c2:cd:a4:c6:
ce:06:0c:f7:88:f6:21:56:d3:d3:51:cd:5a:e4:25:
14:7b:57:0f:ac:67:47:61:8d:f9:14:4b:35:0c:68:
f6:c9:c2:84:1c:b2:fb:47:fa:31:df:b1:42:90:ef:
f1:0b:0c:72:35:22:b1:d0:c9:3d:03:df:bb:30:c7:
df:f4:fe:84:d7:cc:c1:3a:d7:cb:27:2a:88:c5:d9:
fc:e4:e6:2e:65:88:11:bb:c6:c3:78:2f:09:55:c8:
93:bb:65:3e:7c:1e:85:0c:8d:75:c4:ad:0f:17:71:
aa:46:9b:c9:1c:38:ef:e1:88:cd:66:31:65:93:9e:
49:ad:92:86:78:aa:47:af:69:bd:2c:60:0e:57:fa:
a8:17:d7:9c:ce:33:de:34:79:b2:61:0b:62:5e:63:
9b:a8:f4:e8:b7:8a:f1:3b:0f:a7:47:a2:4c:23:e0:
b1:e5:57:ab:be:fb:39:d3:f8:d3:48:29:53:eb:47:
5c:07:94:c5:88:13:17:11:45:cb:61:61:65:32:2c:
13:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5D:84:7D:61:33:F8:6D:BB:27:50:BE:C6:B2:EA:A9:88:FD:C3:70
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Jl2EfWEz-G27J1C-xrLqqYj9w3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.208.0/21
Signature Algorithm: sha256WithRSAEncryption
20:57:e9:bd:d9:7c:93:c1:29:ed:9f:0e:66:d7:c7:b7:05:fb:
3d:8a:bd:ff:60:bd:05:fa:d5:52:8c:14:f2:72:35:ff:d9:bc:
1e:7d:ea:d4:ef:85:b5:80:04:43:68:ef:9c:9a:f0:a5:26:50:
82:b0:9a:cb:c1:d1:57:28:19:ee:e4:70:8f:dc:04:72:4a:29:
e8:83:23:bc:0f:dd:e8:72:cd:ce:11:78:c8:4e:d1:8a:a5:be:
ec:3d:13:3a:7c:f9:de:be:82:02:3b:29:b4:3c:92:6b:cb:61:
e4:23:2b:57:fe:14:e9:8e:aa:d6:61:e9:87:ce:81:6e:55:f8:
f5:85:1e:fa:a6:c8:b2:48:1e:b7:8f:12:6f:57:04:1b:d0:d6:
14:8d:e9:9c:b2:c1:d1:d6:ce:d8:e6:2b:6c:6d:ec:07:c4:53:
62:ce:ce:d0:c2:37:df:36:8d:0b:07:3e:5a:6c:a4:30:5f:f3:
9e:ff:22:e5:0e:3b:02:ca:eb:5a:b6:07:db:86:90:5b:54:8b:
14:83:39:cf:0d:45:05:93:05:97:64:f2:b5:48:b3:01:71:a3:
87:20:a2:21:55:8d:95:f8:59:8b:c3:75:f1:d3:73:3d:aa:b4:
0d:cb:b7:d5:05:ad:15:55:82:42:bf:56:fb:29:78:70:95:d9:
8f:70:0f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 20:02:23 2026 by rpki-client