Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/NzhRQ-eUCA4XGsIfWj2tl_tLcPg.roa
File: NzhRQ-eUCA4XGsIfWj2tl_tLcPg.roa (raw, json)
Hash identifier: IaLm4WnP4o7Ljx/+kbPY1au8lplazqSSk90dCVBlaTI=
Subject key identifier: 37:38:51:43:E7:94:08:0E:17:1A:C2:1F:5A:3D:AD:97:FB:4B:70:F8
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A01C371DCAAF4F012AE3CCBD978B6BFA53
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/NzhRQ-eUCA4XGsIfWj2tl_tLcPg.roa
Signing time: Wed 19 Aug 2026 22:49:29 +0000
ROA not before: Wed 19 Aug 2026 22:49:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400402
IP address blocks: 2.26.167.0/24 maxlen: 24
2.27.140.0/23 maxlen: 24
2.27.196.0/22 maxlen: 24
13.143.52.0/22 maxlen: 24
179.254.64.0/22 maxlen: 24
193.23.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1c:37:1d:ca:af:4f:01:2a:e3:cc:bd:97:8b:6b:fa:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 19 22:49:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37385143e794080e171ac21f5a3dad97fb4b70f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:47:5a:c2:0d:ac:a9:fd:4b:75:04:b0:5a:47:
f8:e7:e5:4a:33:40:55:70:c0:7d:4b:62:03:df:40:
9d:f2:09:89:55:0e:d7:f2:ba:7a:e2:82:0d:3b:35:
a4:97:bc:70:66:cc:46:a7:37:1f:24:f1:0b:23:c5:
4b:e8:cb:9c:2b:9e:ce:da:ea:62:71:26:c6:9a:32:
a2:7a:39:96:d8:5f:9a:31:93:f3:2a:d6:38:87:22:
2f:f5:42:54:62:44:e8:08:41:93:47:0e:8e:8c:5f:
dd:94:9f:10:29:db:ba:09:39:c5:03:ce:15:54:8d:
dd:80:77:28:3f:b7:8c:ac:6b:b3:c7:bb:d7:ce:10:
ef:b4:cf:cc:90:59:c8:87:d1:d7:20:78:46:2b:c5:
fb:f1:d3:0b:35:dd:e9:07:f8:ff:00:7a:92:54:b9:
d2:a9:59:2e:d5:de:8e:71:79:f2:0c:9b:b0:ad:21:
3c:da:10:7c:53:fe:0f:a1:5d:ab:4e:0d:65:6a:f6:
e5:74:be:82:c5:9e:be:15:72:7b:a3:6b:71:21:01:
91:ae:cd:4a:ac:82:00:f1:72:54:9b:ab:07:4c:f2:
5e:3f:67:1f:1e:e5:94:12:48:be:22:fb:7a:2d:73:
64:30:eb:25:d7:a6:09:ec:32:59:47:42:89:e8:45:
3c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:38:51:43:E7:94:08:0E:17:1A:C2:1F:5A:3D:AD:97:FB:4B:70:F8
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/NzhRQ-eUCA4XGsIfWj2tl_tLcPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.167.0/24
2.27.140.0/23
2.27.196.0/22
13.143.52.0/22
179.254.64.0/22
193.23.212.0/22
Signature Algorithm: sha256WithRSAEncryption
87:42:c8:97:8f:f6:f5:0a:57:25:8c:3b:1e:79:52:a5:3e:13:
46:cc:4a:c3:69:a6:ef:97:c9:74:96:fa:53:38:96:4e:21:65:
a0:32:90:75:77:a4:f4:3c:da:81:d7:72:75:ba:79:1e:8f:54:
40:4a:ae:7a:8e:ee:4b:f8:ec:0f:8c:1c:dd:26:fd:17:aa:7d:
2b:8c:d9:46:9a:38:81:f6:86:bf:e0:1a:ef:55:1c:1d:8e:63:
48:0f:5c:4d:e8:11:b8:3b:ab:00:7c:90:c9:d7:ac:91:ff:bd:
88:c0:cf:82:10:9a:ef:11:96:b7:b9:70:b6:f5:18:06:7d:f7:
14:4e:b9:1b:da:71:94:54:f5:83:52:e5:a8:94:b4:04:d3:d8:
13:58:06:95:ae:1e:5b:f9:64:7f:ab:0b:97:19:71:61:2e:1a:
6f:c6:f5:26:ea:61:3f:d2:0f:5a:38:57:34:1d:5b:76:50:27:
9d:a5:0d:93:0d:00:91:0e:83:f4:f7:5e:2c:70:07:03:40:27:
ea:14:6e:7e:36:43:94:72:39:34:cb:a9:f3:64:b5:df:a9:7e:
dd:33:57:75:9f:56:c3:b0:6b:06:e3:27:53:74:22:5c:e9:b5:
d5:b2:f0:eb:39:76:87:07:63:fc:03:3d:d3:62:db:36:cd:fc:
b5:2a:db:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:10 2026 by rpki-client