Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JmKygutTJcVKGOWqISyjGkuILpU.roa
File: JmKygutTJcVKGOWqISyjGkuILpU.roa (raw, json)
Hash identifier: OmG8P+MNnKXKqkWmw8rzutqcKbrmkkzIOIUbqgcBnpA=
Subject key identifier: 26:62:B2:82:EB:53:25:C5:4A:18:E5:AA:21:2C:A3:1A:4B:88:2E:95
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DCFB7944B0B2E580C9ECC686608A2CF1E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JmKygutTJcVKGOWqISyjGkuILpU.roa
Signing time: Mon 27 Apr 2026 16:13:27 +0000
ROA not before: Mon 27 Apr 2026 16:13:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 2.26.151.0/24 maxlen: 24
2.26.177.0/24 maxlen: 24
2.26.178.0/24 maxlen: 24
2.26.179.0/24 maxlen: 24
2.26.180.0/24 maxlen: 24
2.26.181.0/24 maxlen: 24
2.26.184.0/24 maxlen: 24
2.26.187.0/24 maxlen: 24
2.26.191.0/24 maxlen: 24
2.27.108.0/24 maxlen: 24
2.27.142.0/23 maxlen: 24
2.27.146.0/23 maxlen: 24
2.27.249.0/24 maxlen: 24
144.31.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:b7:94:4b:0b:2e:58:0c:9e:cc:68:66:08:a2:cf:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 27 16:13:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2662b282eb5325c54a18e5aa212ca31a4b882e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a6:01:52:f7:1f:1e:73:50:fd:4d:6e:19:d7:
a4:64:2b:b4:c2:f0:94:ff:27:2f:a3:70:01:7c:c2:
b9:ce:9a:23:92:72:06:41:c5:a5:51:d1:8d:51:54:
b6:6d:ee:c4:06:40:8a:c5:e0:fa:09:66:61:e7:83:
75:26:96:d4:04:bf:77:3b:86:54:ee:9e:47:ad:7d:
df:28:fd:b4:8f:a7:9d:64:ab:da:27:99:ae:79:cf:
06:12:4c:c0:fc:dd:05:25:96:4d:ba:b9:a8:58:ca:
2a:db:c4:59:a6:6f:fe:88:5c:a6:81:6b:4a:4f:c7:
04:a2:95:3d:ce:02:d1:2d:d9:94:3c:b6:52:5b:79:
fc:4d:0e:29:55:99:a8:79:47:f6:c7:97:59:4b:b9:
94:2e:55:14:2f:aa:f8:a6:17:b0:b3:e7:99:44:3d:
e0:6c:5c:51:0d:47:1d:bc:b0:81:9c:f5:ed:a9:87:
53:88:5b:b8:b9:1d:54:61:4a:bb:17:9b:0a:33:90:
f2:b6:c8:e4:07:06:b6:57:a1:df:17:7a:a9:5f:b0:
2c:45:e1:5b:74:5e:be:37:f0:b6:96:00:1c:cf:9f:
9e:ae:12:eb:1e:40:b7:0f:7d:98:08:29:fe:1a:1c:
08:e9:28:f4:f1:b5:26:bb:88:58:e8:1a:68:0c:a2:
b4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:62:B2:82:EB:53:25:C5:4A:18:E5:AA:21:2C:A3:1A:4B:88:2E:95
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JmKygutTJcVKGOWqISyjGkuILpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.151.0/24
2.26.177.0-2.26.181.255
2.26.184.0/24
2.26.187.0/24
2.26.191.0/24
2.27.108.0/24
2.27.142.0/23
2.27.146.0/23
2.27.249.0/24
144.31.43.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:80:60:1a:b1:94:49:94:a2:9e:0a:34:45:84:a7:7b:2c:7f:
14:1f:63:c4:90:84:4f:a4:16:fd:48:18:10:3b:02:b4:8c:eb:
fe:25:b9:f7:7f:e0:eb:20:0d:6e:d1:01:24:ea:c5:33:38:45:
0c:94:74:02:8e:24:34:30:29:6a:a9:93:5e:91:9d:4b:17:2e:
d8:99:b0:85:7b:e9:82:c0:41:e9:b1:40:43:fb:17:2f:5d:61:
59:44:31:b7:52:32:e6:13:70:e2:17:92:6f:69:46:3f:be:88:
cf:06:1f:f9:a2:f0:fb:32:96:24:57:a0:a7:43:a7:3d:4e:32:
bc:b4:75:25:e0:94:8d:bf:6c:7d:0c:4e:04:8e:18:01:5a:4f:
34:62:cf:4c:58:c8:d2:2f:43:10:a8:13:07:c4:36:f0:7a:73:
e7:cd:9f:d9:fe:70:87:46:d1:97:be:d9:66:01:0d:a0:53:90:
ef:16:91:43:10:2e:6a:ed:2d:25:94:4f:38:b2:4f:f7:e9:cf:
43:32:ed:a4:91:7a:b4:c0:60:18:26:a7:1f:27:1f:8e:cd:1d:
9a:5d:50:f3:4a:9f:8c:91:36:03:2b:f4:cb:e2:66:5b:cd:24:
95:41:d4:7c:7a:a1:14:da:f7:a3:45:6f:42:50:9b:38:9a:07:
69:c2:10:52
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 5 16:51:24 2026 by rpki-client