Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/LSL3ufIRHMIcvg6FwKz2LTxgwGU.roa
File: LSL3ufIRHMIcvg6FwKz2LTxgwGU.roa (raw, json)
Hash identifier: PgOiq8DhQE4Iz0ItelJmvxS6+jVk3mWShzH4lJ0jkNM=
Subject key identifier: 2D:22:F7:B9:F2:11:1C:C2:1C:BE:0E:85:C0:AC:F6:2D:3C:60:C0:65
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D6E6BA1C6990800E9DAD8E0F55D3E7367
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/LSL3ufIRHMIcvg6FwKz2LTxgwGU.roa
Signing time: Wed 08 Apr 2026 18:47:20 +0000
ROA not before: Wed 08 Apr 2026 18:47:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199529
IP address blocks: 2.26.78.0/24 maxlen: 24
2.26.79.0/24 maxlen: 24
2.26.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Apr 2026 16:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6e:6b:a1:c6:99:08:00:e9:da:d8:e0:f5:5d:3e:73:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 8 18:47:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d22f7b9f2111cc21cbe0e85c0acf62d3c60c065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6e:81:ef:18:62:2b:35:22:ee:18:3d:aa:de:
01:0d:65:95:4f:3f:e5:50:9c:77:91:a8:f3:e7:f3:
cd:79:b6:7c:79:df:96:02:b9:72:d7:5d:aa:24:bd:
69:73:0b:40:43:a1:33:ca:83:3d:51:aa:c6:09:16:
e2:d6:03:84:b9:10:27:0f:0b:5b:b6:b4:fc:2e:67:
f0:17:a4:c3:51:f1:71:dc:73:cc:6f:da:51:31:ca:
2c:04:2f:6f:7e:70:97:5f:0f:8c:97:f2:0f:6a:df:
2d:7a:8b:01:ad:ae:97:d8:ef:cf:79:80:e4:3e:9c:
62:a2:ad:c7:d0:f8:ec:ad:22:cd:a6:d9:06:7b:d1:
0e:1f:b2:48:4a:6c:92:40:c2:ef:73:ca:71:c4:c0:
e8:e8:99:4f:ca:e4:16:e0:e0:40:a5:a2:75:5b:c7:
d3:56:9d:71:13:7c:f3:f6:41:6b:dc:74:c3:8e:4b:
e1:bf:c7:21:6e:0a:a5:f3:21:a5:74:e6:b5:ea:a1:
63:49:0a:b6:ec:e5:b1:cd:29:00:9a:2e:55:5c:6d:
df:20:f1:03:05:09:a1:db:99:8f:28:6e:d8:42:ff:
22:0b:55:b5:9b:00:d0:35:6b:ff:bc:7e:b3:30:ea:
49:04:f8:9c:9a:25:20:3b:13:1c:ac:a9:de:1d:c1:
83:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:22:F7:B9:F2:11:1C:C2:1C:BE:0E:85:C0:AC:F6:2D:3C:60:C0:65
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/LSL3ufIRHMIcvg6FwKz2LTxgwGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.78.0/23
2.26.127.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:d0:cc:f1:86:d0:c2:0d:69:52:e1:bc:41:0a:6c:4f:d8:a5:
5f:ad:19:bc:2f:58:7f:65:88:93:fa:73:80:f1:33:93:79:6e:
4e:e9:6c:c5:de:28:15:39:41:28:31:93:f1:85:8e:b9:d5:70:
4c:f1:13:38:1f:1b:2b:f6:f3:19:96:4b:f2:1e:ca:15:13:25:
99:c7:c2:e9:f3:b3:c1:2f:3e:93:56:72:64:26:b8:f2:c8:8f:
5b:ad:f2:39:95:6a:84:a8:b8:49:2c:46:29:97:67:b7:f1:26:
f0:1a:cb:37:7f:7b:22:c7:84:a2:50:ad:19:23:99:19:b6:9e:
98:93:bb:42:33:8b:13:02:76:64:e7:54:00:33:40:e0:a4:b3:
e3:74:90:42:9a:1a:cf:b8:c7:e9:d6:37:f9:ae:19:37:49:c3:
22:38:db:eb:93:d1:68:9a:fb:ba:16:d4:62:51:5e:de:d8:46:
1d:e6:8e:b5:ae:4c:e3:af:37:18:12:3a:72:33:00:87:0f:e3:
a0:08:85:ea:c1:9f:17:57:77:7b:ee:e6:4b:07:28:43:32:83:
22:17:b6:90:2a:05:fa:11:76:4d:07:e5:4f:15:1b:96:fa:31:
32:fa:b0:fb:6e:d3:bc:3b:cb:d6:29:b5:50:60:51:bb:a7:c1:
4b:10:1e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 01:30:24 2026 by rpki-client