Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MUl71X7Ss5D6mYsDp6GQzcNEiRU.roa
File: MUl71X7Ss5D6mYsDp6GQzcNEiRU.roa (raw, json)
Hash identifier: AnYVL1uAnzdUSHMVdRb6fSPafV+NUQgG65ZDj8gAEQo=
Subject key identifier: 31:49:7B:D5:7E:D2:B3:90:FA:99:8B:03:A7:A1:90:CD:C3:44:89:15
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FD91BA4D5A454777B364CDB5242608A77
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MUl71X7Ss5D6mYsDp6GQzcNEiRU.roa
Signing time: Thu 06 Aug 2026 22:04:55 +0000
ROA not before: Thu 06 Aug 2026 22:04:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26639
IP address blocks: 2.26.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Aug 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d9:1b:a4:d5:a4:54:77:7b:36:4c:db:52:42:60:8a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 6 22:04:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31497bd57ed2b390fa998b03a7a190cdc3448915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2a:61:37:53:4e:1c:1c:2a:1c:60:9b:79:a5:
26:63:42:db:3c:06:21:e1:71:d4:c8:93:63:f3:35:
cc:ab:fd:6c:35:96:74:66:32:62:2a:f5:44:a3:7e:
ea:d1:cb:d6:5f:4c:2e:74:48:cc:62:4e:ed:e5:99:
4a:cd:c8:84:13:e7:d4:32:90:a9:f6:40:c8:71:3b:
0c:38:70:08:bf:e3:9b:0c:c7:05:71:d4:f8:29:67:
c6:db:53:6e:bb:21:60:1c:1f:35:8b:e6:71:bf:ba:
1c:1e:ba:ee:89:f1:46:34:dd:be:2c:3b:5e:1b:06:
38:88:be:7e:87:38:f1:db:87:0d:69:4c:c5:df:ca:
fd:54:87:f9:93:42:a3:2e:ca:d5:67:a9:52:64:6e:
f7:b8:bd:72:de:8e:f4:63:15:d7:95:46:af:e7:1b:
0a:24:01:6e:7e:13:39:14:76:f2:51:43:cf:4f:e6:
70:18:5e:38:da:7b:fc:8e:04:eb:b2:29:17:eb:da:
5f:f1:13:f1:fb:8c:79:7b:41:2e:f4:2c:61:51:6f:
75:4a:9a:f5:65:1a:d3:31:79:a3:23:e1:db:dc:e0:
85:45:a2:4e:55:db:ce:8b:9e:a1:b1:0c:f6:68:24:
42:c8:85:49:c0:f0:08:76:84:fe:75:c6:05:ce:d0:
ff:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:49:7B:D5:7E:D2:B3:90:FA:99:8B:03:A7:A1:90:CD:C3:44:89:15
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MUl71X7Ss5D6mYsDp6GQzcNEiRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.208.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:5e:9e:ed:5f:c5:08:fc:ba:1a:a9:80:c6:f4:ef:c8:ac:ee:
3c:0a:ae:a2:4b:63:40:31:98:d4:8c:e9:f5:1f:3f:db:e8:c9:
0e:ec:94:b8:fe:2f:ef:39:48:07:65:34:0f:7c:a5:c7:6b:68:
41:21:d8:75:c2:e1:dc:30:0c:c5:a3:e7:8d:c7:f5:6d:f0:a3:
20:01:62:e2:71:64:31:f2:27:c9:51:ba:99:43:5d:b7:a5:59:
b7:33:6f:46:4b:9d:20:ef:1c:68:a6:c5:c1:07:5c:ea:08:c1:
b6:21:fc:c5:cc:92:e7:b8:04:5c:55:52:fe:3b:b5:0e:9c:68:
f6:fa:1e:18:6b:68:c7:b3:a8:a2:61:a7:72:22:7f:48:69:1c:
d3:03:40:55:57:2f:a8:b5:c0:b1:e8:d0:58:e5:f2:6f:0d:11:
35:f6:1f:98:03:16:10:eb:91:2f:0a:8f:4d:bb:e7:6b:2e:ce:
2e:76:df:38:f6:7f:63:4d:12:81:cc:2b:1c:7f:f7:42:de:c6:
7b:40:62:9e:86:fe:c8:bc:85:d5:41:47:e1:ac:46:52:ff:99:
16:0d:a7:36:32:6d:30:74:9e:f0:f8:9a:a3:dc:db:d7:94:68:
dd:7f:1e:77:59:eb:9c:29:9d:36:8b:8c:d8:d3:24:ab:e7:9d:
ec:eb:1d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 19:55:33 2026 by rpki-client