Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/RYGam3FAOaBYW3HsD_q8Ofda-uU.roa
File: RYGam3FAOaBYW3HsD_q8Ofda-uU.roa (raw, json)
Hash identifier: iSpjb9XXaxePVtMnKmsvtKlXw77OkxbQ1oeilGoOF+s=
Subject key identifier: 45:81:9A:9B:71:40:39:A0:58:5B:71:EC:0F:FA:BC:39:F7:5A:FA:E5
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A19D06B686D5ED10761319FF6A75FA6204
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/RYGam3FAOaBYW3HsD_q8Ofda-uU.roa
Signing time: Mon 02 Nov 2026 16:10:25 +0000
ROA not before: Mon 02 Nov 2026 16:10:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50053
IP address blocks: 2.26.133.0/24 maxlen: 24
2.26.134.0/24 maxlen: 24
2.26.136.0/24 maxlen: 24
2.26.137.0/24 maxlen: 24
2.26.141.0/24 maxlen: 24
2.26.142.0/24 maxlen: 24
31.77.76.0/24 maxlen: 24
31.77.77.0/24 maxlen: 24
31.77.79.0/24 maxlen: 24
191.223.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:06:b6:86:d5:ed:10:76:13:19:ff:6a:75:fa:62:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 2 16:10:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45819a9b714039a0585b71ec0ffabc39f75afae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f9:9b:db:bb:88:e1:13:5b:86:41:a8:12:bf:
8e:40:b1:7d:48:28:ed:71:0c:d4:77:1c:12:35:a8:
12:19:8b:72:03:0d:93:6e:ed:78:2f:18:de:d4:5a:
f7:2c:8c:03:e4:ff:04:c1:e2:47:ce:36:08:8a:ea:
f8:da:86:b0:5a:a2:ef:31:da:b2:40:78:bc:33:61:
15:ec:aa:da:5f:4c:e2:03:b7:1d:66:76:aa:4d:d9:
46:be:17:a7:9d:89:87:ed:4f:4c:07:c4:f8:bf:67:
69:05:fd:df:d9:4a:0a:d3:ef:3d:b3:22:1d:ea:58:
c3:81:f4:fb:82:b0:da:d5:89:bb:ca:09:a7:8f:e5:
3c:6d:c1:c4:29:72:57:29:8a:e6:d0:02:57:f0:2b:
09:4f:32:c2:b3:b6:0d:a9:19:a0:27:ed:00:73:e9:
80:0d:37:74:9c:05:d6:3e:e8:c4:80:d3:ba:75:51:
d6:f5:fe:9b:24:a3:83:43:23:22:1d:57:4d:f8:87:
a7:ac:f4:3f:38:e9:82:a1:10:a9:e3:d0:6f:60:d8:
65:2a:49:36:6f:dc:7a:5c:fa:99:02:57:43:99:9d:
b1:36:df:68:1c:63:9d:cf:06:ca:74:f2:64:3d:71:
84:71:f6:e8:e4:fd:91:07:80:e8:f6:3f:d9:00:6e:
bb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:81:9A:9B:71:40:39:A0:58:5B:71:EC:0F:FA:BC:39:F7:5A:FA:E5
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/RYGam3FAOaBYW3HsD_q8Ofda-uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.133.0-2.26.134.255
2.26.136.0/23
2.26.141.0-2.26.142.255
31.77.76.0/23
31.77.79.0/24
191.223.141.0/24
Signature Algorithm: sha256WithRSAEncryption
78:1d:77:36:15:dd:e6:c0:4c:2f:96:09:c0:c5:6d:de:e3:d9:
6d:35:06:3d:ed:97:20:36:8f:b2:1c:30:6a:0a:04:26:61:6a:
97:5d:5a:11:1f:c0:00:fa:4c:69:47:ed:e7:a6:7f:a8:d7:75:
55:aa:35:78:95:f0:eb:43:94:eb:4e:5e:a9:91:93:61:94:47:
8f:ac:49:30:c6:02:cf:1a:3b:4f:28:70:cd:df:4c:7f:e0:27:
c0:76:46:6b:85:95:aa:ba:8e:2e:6e:e8:8e:d1:9e:90:f1:ea:
44:c1:13:fa:dd:71:fc:28:87:db:3f:3d:f7:08:62:3a:d5:50:
0d:c4:a2:13:38:ce:87:6c:35:6f:8f:1d:21:da:66:b7:e0:e8:
34:e7:11:4c:56:8b:9d:50:ba:57:33:5e:cf:46:24:b1:83:2e:
04:a0:5f:35:37:ff:6e:0a:76:80:c5:1f:61:11:de:cd:41:81:
f8:72:23:ff:8d:18:65:86:da:e5:ef:02:52:a4:f8:5c:2a:e1:
82:0f:73:2a:65:64:69:7e:f0:d4:65:e2:53:6d:09:d9:6c:b0:
6b:81:1b:ea:14:8d:f2:82:33:68:58:a9:3f:3c:58:b5:b8:66:
fd:71:e7:08:99:93:30:12:8f:31:89:8e:5a:60:af:fe:0c:42:
39:8a:95:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:27:33 2026 by rpki-client