Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/PgPVlBwwULNCUxHyovLdOPtvm-o.roa
File: PgPVlBwwULNCUxHyovLdOPtvm-o.roa (raw, json)
Hash identifier: vIttPqH1DrmNJWv0dUKmnWtLR238f77ByS/nX2EoTdE=
Subject key identifier: 3E:03:D5:94:1C:30:50:B3:42:53:11:F2:A2:F2:DD:38:FB:6F:9B:EA
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E2C6DDC067BA27D54785532D3C912BC65
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/PgPVlBwwULNCUxHyovLdOPtvm-o.roa
Signing time: Fri 15 May 2026 16:17:37 +0000
ROA not before: Fri 15 May 2026 16:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20326
IP address blocks: 2.26.240.0/22 maxlen: 22
2.26.244.0/22 maxlen: 22
2.27.200.0/21 maxlen: 21
2.27.208.0/22 maxlen: 24
2.27.224.0/21 maxlen: 21
31.77.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2c:6d:dc:06:7b:a2:7d:54:78:55:32:d3:c9:12:bc:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 15 16:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e03d5941c3050b3425311f2a2f2dd38fb6f9bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:35:5c:14:c9:ca:b3:03:7c:78:15:b3:3d:56:
23:7a:ea:d1:08:22:9f:09:bf:5b:c2:63:6d:d4:cd:
b8:9d:78:4a:79:63:34:e6:79:0c:dc:b1:e3:cb:2d:
b6:1b:dc:49:80:a9:e8:8c:4c:87:58:26:31:21:14:
93:5f:7b:16:35:c1:94:30:39:82:09:eb:b7:0b:31:
a6:8f:16:d1:91:77:87:be:9f:8c:0e:b1:57:82:ca:
95:45:fd:09:ed:bd:43:1a:04:a4:e9:41:bc:1a:20:
5f:bc:22:78:75:5b:cb:0f:c4:4c:2b:8f:f6:c7:1f:
80:ce:13:b4:81:2e:d8:c9:8b:13:14:c1:23:0f:3c:
80:bc:ba:eb:b4:c8:4f:e7:8f:09:bb:ef:0b:d1:c4:
98:d8:f7:c8:0e:16:6c:d2:68:26:85:28:b3:72:00:
13:d6:5b:85:5f:15:92:d2:c0:16:5a:d0:44:fd:f8:
14:be:1c:93:9a:f3:ff:35:7d:8c:7f:8b:03:78:d8:
1e:9b:68:ba:c0:0c:5f:86:ec:4a:40:41:86:3c:06:
4c:ae:0e:de:4d:06:0e:ed:1a:44:07:26:10:50:77:
e8:da:66:1d:14:cf:ca:68:31:2d:84:13:f7:5b:07:
08:42:6c:eb:60:15:bd:b6:92:70:05:3c:e2:46:68:
97:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:03:D5:94:1C:30:50:B3:42:53:11:F2:A2:F2:DD:38:FB:6F:9B:EA
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/PgPVlBwwULNCUxHyovLdOPtvm-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.240.0/21
2.27.200.0-2.27.211.255
2.27.224.0/21
31.77.80.0/20
Signature Algorithm: sha256WithRSAEncryption
b4:b8:06:cb:d8:d1:b2:96:c5:52:9f:8a:c1:19:02:2c:86:5b:
5d:8d:50:d3:ad:87:23:a0:e1:27:db:a9:8a:5c:74:71:70:36:
c2:62:ad:e2:34:be:f0:9f:73:e4:7f:9e:b6:ee:08:31:ef:d4:
9c:0c:d4:bf:a6:21:40:a6:ed:66:05:23:78:36:a9:b9:ce:0d:
4b:29:66:2c:ba:bc:26:45:28:25:da:9a:56:3b:a8:38:28:f5:
85:5a:94:20:5a:53:e6:12:79:f0:3f:1b:03:b6:4d:e5:49:9f:
56:6b:01:8b:f1:ca:ee:fe:5b:f4:1d:f9:3d:16:f7:15:e5:ce:
25:33:b8:49:cf:66:71:dc:5f:67:5f:33:ba:3a:1d:0d:19:0d:
cb:0e:f3:09:c2:d9:25:a0:fc:f1:4b:67:d5:ba:e6:3a:86:ec:
72:4e:e9:85:8e:11:99:07:1c:22:f0:ab:fa:df:57:54:17:a1:
c1:1f:c5:fb:b0:79:97:88:ce:82:65:9c:6d:5d:2d:a4:a2:eb:
66:b1:37:87:ad:6f:09:cd:bd:6e:76:3b:69:ce:74:2a:1e:3f:
ae:77:de:48:63:24:e7:31:de:41:82:71:75:0e:0a:ed:70:b6:
69:3e:86:3c:54:5d:ee:6f:4f:a8:08:0e:84:fa:2a:7e:d7:40:
48:66:02:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:36:00 2026 by rpki-client