Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Mj_JvJ_UHbr-xteT-B-RPwBLeCM.roa
File: Mj_JvJ_UHbr-xteT-B-RPwBLeCM.roa (raw, json)
Hash identifier: zfg9mHIIlpE7XKmtCVyH7ZBVhKsM4wFWZo3M63rG0eE=
Subject key identifier: 32:3F:C9:BC:9F:D4:1D:BA:FE:C6:D7:93:F8:1F:91:3F:00:4B:78:23
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0081DD9BACEF5C61712F6DC20959AC1CC
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Mj_JvJ_UHbr-xteT-B-RPwBLeCM.roa
Signing time: Sun 16 Aug 2026 01:09:29 +0000
ROA not before: Sun 16 Aug 2026 01:09:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 2.26.132.0/24 maxlen: 24
2.26.153.0/24 maxlen: 24
2.27.97.0/24 maxlen: 24
2.27.164.0/24 maxlen: 24
31.77.120.0/24 maxlen: 24
144.31.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:08:1d:d9:ba:ce:f5:c6:17:12:f6:dc:20:95:9a:c1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 16 01:09:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=323fc9bc9fd41dbafec6d793f81f913f004b7823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:53:f3:d0:4b:73:c1:3b:a2:37:b1:2b:44:02:
4a:54:af:35:b8:71:5f:9a:01:93:6b:4b:fa:f2:7f:
5f:da:36:f3:5c:62:9f:97:8f:3e:49:0c:c4:32:cb:
a3:6c:60:7f:57:3c:ad:0b:4e:f3:6d:3a:9c:d4:db:
19:4d:b5:0c:44:da:ae:5a:f3:98:9d:fb:0a:56:41:
c8:36:02:2b:2f:10:cb:6c:fe:00:db:59:a7:c9:2d:
c0:09:b0:62:51:60:66:09:4c:07:8b:95:a0:01:ed:
59:c5:cc:6f:3d:ed:2d:27:88:44:e4:98:b4:df:f1:
67:a8:ea:51:e5:ef:f3:ea:5f:d8:fa:a2:ef:3a:4f:
75:c2:a8:ea:f1:9a:65:b1:bb:fc:9e:fd:ac:4c:17:
2b:91:cb:2b:75:1d:8d:77:df:b6:80:bd:c3:11:58:
95:a7:d5:a1:8e:23:73:57:d5:b7:fc:b1:3d:43:fb:
d6:8d:8f:c4:62:8f:c6:6f:ef:32:17:54:da:70:dd:
2e:6b:89:b9:9b:2b:31:ec:57:03:0c:5e:ea:91:0e:
c9:a4:86:1d:f5:6b:bc:9b:e7:e0:d6:b7:4b:df:32:
a9:e9:bc:3a:ac:86:64:e7:f5:cf:97:4b:9a:1b:1e:
09:92:10:8e:83:97:5b:fd:e3:71:ad:ef:c7:81:9c:
a8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3F:C9:BC:9F:D4:1D:BA:FE:C6:D7:93:F8:1F:91:3F:00:4B:78:23
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Mj_JvJ_UHbr-xteT-B-RPwBLeCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.132.0/24
2.26.153.0/24
2.27.97.0/24
2.27.164.0/24
31.77.120.0/24
144.31.149.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:71:db:a3:bf:eb:95:27:dc:86:25:54:17:5c:24:eb:2f:8c:
5d:d4:ef:1d:e0:c1:88:6a:27:83:3e:d9:6e:de:fb:57:e0:38:
34:04:df:e1:ee:32:a0:4e:a8:dc:02:57:4d:20:5a:f7:df:9a:
bc:1d:ec:b7:2e:b8:ce:7f:f0:44:f7:30:0a:24:4b:0b:db:b0:
bd:03:86:e6:1f:3c:bd:39:57:9d:cf:38:c5:1f:d4:4e:7c:2a:
b5:47:f6:82:d0:2f:57:fa:01:5a:93:76:8f:43:ea:7b:15:98:
a5:33:87:27:2d:cb:33:e2:5d:84:b4:0a:12:8d:65:cc:20:2d:
60:3d:a7:0b:27:7e:87:00:52:30:04:40:ed:3b:3b:23:1d:2c:
33:d4:81:03:d9:d7:2d:63:b7:53:a1:64:ea:64:0d:d8:3f:29:
a4:26:25:d1:50:12:ff:7f:85:c5:41:1b:94:e0:22:90:43:bb:
c8:1d:62:24:f1:d9:e2:e9:e6:96:b6:4b:94:b1:77:90:60:95:
7d:8f:3c:a7:20:fc:c6:f5:9e:4a:e9:0d:21:32:49:94:7f:6d:
21:04:35:12:f8:c8:e7:44:09:ae:95:e8:c4:a5:14:e3:d7:a6:
ed:81:b0:a8:f2:68:1c:34:8e:60:3d:1e:e8:73:53:77:4d:5c:
99:48:5c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:31:06 2026 by rpki-client