Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OS5Xc6KE2YrE4OtnoQa4kaiBzv4.roa
File: OS5Xc6KE2YrE4OtnoQa4kaiBzv4.roa (raw, json)
Hash identifier: oqoVAPLjS5ZOtyNH/HnsNaga5aE7EGQvxbMk6J1IIO0=
Subject key identifier: 39:2E:57:73:A2:84:D9:8A:C4:E0:EB:67:A1:06:B8:91:A8:81:CE:FE
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0830EECB85B6CF358039FCEFEC90B71AE
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OS5Xc6KE2YrE4OtnoQa4kaiBzv4.roa
Signing time: Tue 08 Sep 2026 22:06:28 +0000
ROA not before: Tue 08 Sep 2026 22:06:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215411
IP address blocks: 2.26.171.0/24 maxlen: 24
31.77.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:83:0e:ec:b8:5b:6c:f3:58:03:9f:ce:fe:c9:0b:71:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 8 22:06:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=392e5773a284d98ac4e0eb67a106b891a881cefe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f2:16:4f:32:0b:dc:e8:99:f8:7d:a4:cb:38:
94:90:ef:54:82:0c:ee:69:01:aa:a2:06:8e:e2:dc:
93:4f:78:fd:b8:23:f4:2e:16:22:e9:d9:ac:3a:36:
ae:a1:21:e8:0e:f5:2e:92:2b:55:a7:89:1d:cb:da:
2c:da:9f:20:5e:60:a0:8c:09:ae:6b:57:bf:85:0c:
d7:7e:0b:df:86:59:53:db:64:90:3d:f1:ac:eb:7d:
c9:d8:c4:10:ad:84:35:93:ed:27:f6:4f:da:13:c5:
54:b9:c5:f4:c4:12:28:cc:ef:92:e5:dd:46:94:20:
2a:8c:47:4e:07:7f:ea:9e:b2:7c:78:8a:0a:39:e0:
b1:35:0e:95:dd:c1:76:a7:32:6c:1a:37:7e:32:2b:
d1:9c:94:4a:41:c1:f2:27:1b:be:95:4c:b3:f7:19:
7e:40:11:7d:ad:2b:e7:6f:07:29:f9:a0:eb:b7:00:
75:95:95:f0:83:a3:6a:1c:e7:0b:30:fa:67:58:68:
d4:27:01:a3:67:91:8e:e8:bf:2a:fb:bb:90:83:5c:
70:91:24:06:78:be:0d:61:8c:43:a0:16:ee:b6:52:
a3:8c:7a:52:b5:10:b3:f2:35:9a:2a:a8:df:ea:ef:
19:06:65:bf:09:6a:16:93:4d:16:9b:18:b3:6e:b1:
79:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2E:57:73:A2:84:D9:8A:C4:E0:EB:67:A1:06:B8:91:A8:81:CE:FE
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OS5Xc6KE2YrE4OtnoQa4kaiBzv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.171.0/24
31.77.63.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:e3:c1:9e:5c:5f:bf:53:37:2a:89:7a:d3:48:56:8e:f0:9b:
20:52:d4:d9:67:59:13:14:be:ee:33:bf:40:0d:4b:35:45:0b:
7c:dd:9c:73:b2:f0:fb:05:c1:42:ec:49:c9:d7:7b:71:df:8a:
c0:31:f8:15:b5:2a:3d:a0:8d:ec:ec:57:4d:54:56:ab:a0:fc:
cf:34:5a:ac:e8:e1:75:ca:64:65:e9:1f:d9:8a:ec:53:27:40:
d3:cd:cd:66:72:69:0e:96:cb:a1:da:31:1f:cb:3e:c4:b5:09:
a8:ad:13:ea:49:30:32:d9:3d:4a:4f:cb:3e:cc:26:eb:92:43:
47:c1:8f:b6:cf:ec:db:b1:54:bb:5b:69:68:7c:40:b6:81:e1:
e8:70:cd:08:3e:75:24:21:77:dd:08:27:80:0b:19:59:4e:d9:
e8:65:ac:2a:3b:bf:88:ba:f0:f4:5d:a1:17:c8:41:ed:3d:f3:
82:ff:51:fd:99:20:95:ab:c3:4a:51:dd:22:5c:71:69:28:25:
b6:07:19:af:b5:58:2e:46:fd:b7:52:89:fc:be:cb:da:f2:7a:
2c:e6:e8:59:c1:f9:5a:94:75:ea:71:9b:75:9a:a7:a5:36:16:
ac:b6:f3:1d:d7:2b:f8:28:7c:41:56:53:a2:76:3a:f6:a2:8e:
d0:ff:d2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:27 2026 by rpki-client