Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/KRpdTpxC_uMI2jQNmU2qkEczLOs.roa
File: KRpdTpxC_uMI2jQNmU2qkEczLOs.roa (raw, json)
Hash identifier: uMmDFQtD5bazOuRBU/+BmkOA9M3cF7b2pLxiTaYOgF8=
Subject key identifier: 29:1A:5D:4E:9C:42:FE:E3:08:DA:34:0D:99:4D:AA:90:47:33:2C:EB
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A06E1EB5584B1B180F87B1A7671D6A51DC
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/KRpdTpxC_uMI2jQNmU2qkEczLOs.roa
Signing time: Fri 04 Sep 2026 20:31:41 +0000
ROA not before: Fri 04 Sep 2026 20:31:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198550
IP address blocks: 2.26.124.0/23 maxlen: 24
2.26.254.0/24 maxlen: 24
2.26.255.0/24 maxlen: 24
2.27.12.0/22 maxlen: 24
31.76.120.0/24 maxlen: 24
31.76.240.0/23 maxlen: 24
144.31.28.0/24 maxlen: 24
144.31.215.0/24 maxlen: 24
150.241.65.0/24 maxlen: 24
150.241.68.0/24 maxlen: 24
150.241.87.0/24 maxlen: 24
150.241.92.0/24 maxlen: 24
193.23.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 13:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:1e:b5:58:4b:1b:18:0f:87:b1:a7:67:1d:6a:51:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 4 20:31:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=291a5d4e9c42fee308da340d994daa9047332ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:94:70:e8:75:7d:43:dc:0d:7c:eb:38:c8:04:
df:fd:52:f2:58:0d:a1:0f:0f:07:63:50:c8:52:1e:
e6:7a:f0:bc:cb:7a:47:1f:73:cb:bd:78:4a:53:2e:
b3:ea:20:58:bc:64:9a:78:f9:b3:7a:43:30:f7:3e:
97:6f:2a:90:46:57:c5:8a:bf:c3:97:41:b0:97:9e:
be:35:74:6a:d7:7c:92:61:0d:af:92:07:4b:7d:55:
d9:9f:d6:e8:df:2f:56:57:1b:e7:0f:e5:0b:75:63:
60:22:48:af:54:92:f2:d1:73:b0:f0:cf:f6:30:d2:
ba:11:61:d4:35:25:34:bc:7e:63:81:86:74:be:31:
3c:ca:22:66:11:05:dc:61:a4:0e:d5:6f:bc:38:c3:
bd:78:a1:73:9a:aa:0a:2e:27:86:94:6c:0d:b5:9d:
b1:e6:c4:eb:c0:8c:db:16:55:54:b8:d8:47:c5:5e:
f6:cc:d2:58:b6:b0:48:c3:fa:2b:a2:25:31:0a:6d:
f8:35:0f:3a:5c:26:45:64:3d:7a:31:dc:d6:9d:e3:
37:1f:fa:32:47:10:ba:26:06:c7:76:fd:1a:be:c6:
c4:fd:01:24:56:20:9a:24:60:95:8b:75:57:64:16:
3e:54:63:12:d6:ad:76:69:6a:b9:d8:fe:21:d4:dc:
15:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1A:5D:4E:9C:42:FE:E3:08:DA:34:0D:99:4D:AA:90:47:33:2C:EB
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/KRpdTpxC_uMI2jQNmU2qkEczLOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.124.0/23
2.26.254.0/23
2.27.12.0/22
31.76.120.0/24
31.76.240.0/23
144.31.28.0/24
144.31.215.0/24
150.241.65.0/24
150.241.68.0/24
150.241.87.0/24
150.241.92.0/24
193.23.222.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:e6:b6:c0:47:3a:41:e7:f4:53:fd:38:2c:f7:29:80:4d:68:
88:85:c1:1b:70:a1:24:e3:2e:a7:1b:b0:f6:95:69:db:19:64:
88:25:80:00:69:8e:31:93:a5:2b:d4:3b:7c:b3:f7:6b:0b:7a:
0a:9f:4a:90:3b:c5:4f:c8:d7:12:4f:9d:a7:2c:7f:0a:36:df:
94:13:ee:bc:1d:9f:87:95:c6:97:cd:6d:b2:43:8e:86:d0:e7:
ab:a7:9c:9a:14:d8:c8:fd:7c:48:15:21:42:53:c0:1b:a1:5d:
99:9e:f9:01:7e:57:cc:32:18:df:f6:96:12:db:87:3e:47:c8:
17:e8:d6:b2:6c:7f:8d:61:cd:14:aa:6b:ce:31:e2:28:d3:12:
76:bd:20:13:9b:94:b4:71:dc:fb:e3:df:97:82:56:3c:52:92:
42:06:0c:ad:14:6a:8f:ce:c4:ee:30:00:85:b7:60:1b:12:71:
2e:28:45:7f:72:73:40:76:27:3a:8d:d3:4f:1d:d2:59:dc:bf:
a6:08:0c:86:6d:68:f1:3a:b0:81:be:16:6f:96:ba:95:42:10:
ad:bb:bf:a8:51:56:72:d2:0c:b6:1f:23:22:29:ea:12:d8:5b:
34:ee:3e:bf:ed:14:f9:46:5a:ae:b5:21:08:ac:19:61:31:a4:
ac:0d:0f:de
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAaBuHrVYSxsYD4exp2cdalHcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwOTA0MjAzMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTFhNWQ0ZTljNDJmZWUzMDhkYTM0MGQ5OTRkYWE5MDQ3MzMyY2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJRw6HV9Q9wNfOs4yATf/VLyWA2h
Dw8HY1DIUh7mevC8y3pHH3PLvXhKUy6z6iBYvGSaePmzekMw9z6XbyqQRlfFir/D
l0Gwl56+NXRq13ySYQ2vkgdLfVXZn9bo3y9WVxvnD+ULdWNgIkivVJLy0XOw8M/2
MNK6EWHUNSU0vH5jgYZ0vjE8yiJmEQXcYaQO1W+8OMO9eKFzmqoKLieGlGwNtZ2x
5sTrwIzbFlVUuNhHxV72zNJYtrBIw/oroiUxCm34NQ86XCZFZD16MdzWneM3H/oy
RxC6JgbHdv0avsbE/QEkViCaJGCVi3VXZBY+VGMS1q12aWq52P4h1NwV1QIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFCkaXU6cQv7jCNo0DZlNqpBHMyzrMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvS1JwZFRweENfdU1JMmpRTm1VMnFrRWN6TE9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQBAhp8AwQB
Ahr+AwQCAhsMAwQAH0x4AwQBH0zwAwQAkB8cAwQAkB/XAwQAlvFBAwQAlvFEAwQA
lvFXAwQAlvFcAwQAwRfeMA0GCSqGSIb3DQEBCwUAA4IBAQBu5rbARzpB5/RT/Tgs
9ymATWiIhcEbcKEk4y6nG7D2lWnbGWSIJYAAaY4xk6Ur1Dt8s/drC3oKn0qQO8VP
yNcST52nLH8KNt+UE+68HZ+HlcaXzW2yQ46G0Oerp5yaFNjI/XxIFSFCU8AboV2Z
nvkBflfMMhjf9pYS24c+R8gX6NaybH+NYc0UqmvOMeIo0xJ2vSATm5S0cdz749+X
glY8UpJCBgytFGqPzsTuMACFt2AbEnEuKEV/cnNAdic6jdNPHdJZ3L+mCAyGbWjx
OrCBvhZvlrqVQhCtu7+oUVZy0gy2HyMiKeoS2Fs07j6/7RT5RlqutSEIrBlhMaSs
DQ/e
-----END CERTIFICATE-----
Generated at Sat Sep 12 22:57:17 2026 by rpki-client