Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Rdx6N0PAHd9hFHxjNvXGYgorzwk.roa
File: Rdx6N0PAHd9hFHxjNvXGYgorzwk.roa (raw, json)
Hash identifier: H61TGwzEKCeQxIFXP1iks7k81ui/+D37pc34LB+sspw=
Subject key identifier: 45:DC:7A:37:43:C0:1D:DF:61:14:7C:63:36:F5:C6:62:0A:2B:CF:09
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F6188D35F4AA758150838599BAACCBEC2
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Rdx6N0PAHd9hFHxjNvXGYgorzwk.roa
Signing time: Tue 14 Jul 2026 16:49:44 +0000
ROA not before: Tue 14 Jul 2026 16:49:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199180
IP address blocks: 2.26.12.0/24 maxlen: 24
2.26.13.0/24 maxlen: 24
2.26.14.0/24 maxlen: 24
2.26.15.0/24 maxlen: 24
2.26.144.0/24 maxlen: 24
2.27.6.0/24 maxlen: 24
31.76.36.0/24 maxlen: 24
31.76.92.0/24 maxlen: 24
31.76.121.0/24 maxlen: 24
31.76.254.0/24 maxlen: 24
177.1.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:61:88:d3:5f:4a:a7:58:15:08:38:59:9b:aa:cc:be:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 14 16:49:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45dc7a3743c01ddf61147c6336f5c6620a2bcf09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2f:00:e3:52:a8:e1:a5:5f:bd:f2:11:41:55:
4e:d7:1f:56:6f:1c:64:aa:da:a3:8a:25:4b:96:95:
b6:57:0a:44:0c:27:75:93:e9:c8:7a:99:48:1c:c0:
34:dd:25:7d:65:1a:19:00:44:19:39:57:d4:fd:b9:
44:39:ec:c9:7f:7f:d4:8e:62:83:c4:7c:a5:e0:d0:
d9:60:e9:a6:05:ca:c0:8a:e6:82:a1:2a:e0:2c:d3:
69:ab:5c:78:41:7c:eb:79:6f:2f:16:fe:d6:9f:c8:
5e:95:56:9c:02:9c:58:89:0f:95:7f:48:5b:a3:df:
b0:5a:9b:56:60:70:20:fa:94:b1:ec:21:41:b9:d0:
50:6c:43:32:ef:46:de:5d:07:3b:24:13:86:00:e8:
7a:51:f1:3a:8a:51:16:4e:f9:9d:f7:07:34:5c:a1:
bc:31:47:79:31:3a:a8:82:da:6d:fa:4f:ab:be:11:
cc:cf:be:f1:5c:7a:44:56:e2:05:d1:20:d7:8c:49:
31:9a:d9:ce:38:c8:9f:88:74:18:d3:86:ac:ba:06:
ed:15:ba:9b:65:c7:bb:d8:40:18:50:80:38:a8:05:
15:55:34:ab:ef:44:4a:9d:b4:bb:ab:d1:d2:12:de:
28:52:83:6d:bd:f6:62:74:6d:4b:63:2e:2a:17:96:
ee:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DC:7A:37:43:C0:1D:DF:61:14:7C:63:36:F5:C6:62:0A:2B:CF:09
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Rdx6N0PAHd9hFHxjNvXGYgorzwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.12.0/22
2.26.144.0/24
2.27.6.0/24
31.76.36.0/24
31.76.92.0/24
31.76.121.0/24
31.76.254.0/24
177.1.193.0/24
Signature Algorithm: sha256WithRSAEncryption
84:7a:f8:db:55:34:73:96:3f:b7:45:23:c8:36:15:7d:7e:2e:
8d:86:a6:37:26:cf:55:c4:a6:77:b2:d0:f1:25:2e:f8:24:73:
cd:89:d8:2f:ab:69:1c:9e:9c:51:a5:05:30:40:f1:e8:01:7b:
5c:af:03:e4:a6:6c:01:8d:40:37:28:d2:a9:8a:be:f2:6f:b6:
8a:c5:fe:e5:0d:1d:cc:c9:ff:3a:02:d4:4c:82:0e:d0:67:d6:
e8:c1:50:82:89:56:88:1e:23:7f:90:ab:41:a4:52:f0:69:05:
a6:b6:61:f6:29:e0:93:13:40:bf:5b:45:7e:b1:21:b3:55:40:
75:bb:ab:4a:e8:dc:b2:15:1d:ca:0e:3d:cb:ae:18:dd:86:68:
6f:6a:f0:f0:21:1c:ce:b3:20:bd:1f:f9:a9:aa:b6:c5:48:7c:
82:1c:dc:67:e0:75:1f:01:9d:d8:7c:7f:09:fb:30:99:73:cf:
0d:41:8d:90:ec:65:2b:a3:d3:61:b0:e5:a1:04:ed:48:d4:1f:
fb:2d:7f:d4:d5:a7:8f:65:ef:86:a8:09:3f:69:98:8b:fe:b6:
ad:0c:6a:e3:dd:fd:c1:81:03:32:d3:2d:ca:94:40:ca:6f:a5:
63:73:78:e1:a3:fe:cd:e8:2e:29:68:6e:48:b7:ff:f3:db:e3:
11:33:2b:77
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZ9hiNNfSqdYFQg4WZuqzL7CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNzE0MTY0OTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWRjN2EzNzQzYzAxZGRmNjExNDdjNjMzNmY1YzY2MjBhMmJjZjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri8A41Ko4aVfvfIRQVVO1x9Wbxxk
qtqjiiVLlpW2VwpEDCd1k+nIeplIHMA03SV9ZRoZAEQZOVfU/blEOezJf3/UjmKD
xHyl4NDZYOmmBcrAiuaCoSrgLNNpq1x4QXzreW8vFv7Wn8helVacApxYiQ+Vf0hb
o9+wWptWYHAg+pSx7CFBudBQbEMy70beXQc7JBOGAOh6UfE6ilEWTvmd9wc0XKG8
MUd5MTqogtpt+k+rvhHMz77xXHpEVuIF0SDXjEkxmtnOOMifiHQY04asugbtFbqb
Zce72EAYUIA4qAUVVTSr70RKnbS7q9HSEt4oUoNtvfZidG1LYy4qF5buCQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFEXcejdDwB3fYRR8Yzb1xmIKK88JMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvUmR4Nk4wUEFIZDloRkh4ak52WEdZZ29yendrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCAhoMAwQA
AhqQAwQAAhsGAwQAH0wkAwQAH0xcAwQAH0x5AwQAH0z+AwQAsQHBMA0GCSqGSIb3
DQEBCwUAA4IBAQCEevjbVTRzlj+3RSPINhV9fi6NhqY3Js9VxKZ3stDxJS74JHPN
idgvq2kcnpxRpQUwQPHoAXtcrwPkpmwBjUA3KNKpir7yb7aKxf7lDR3Myf86AtRM
gg7QZ9bowVCCiVaIHiN/kKtBpFLwaQWmtmH2KeCTE0C/W0V+sSGzVUB1u6tK6Nyy
FR3KDj3LrhjdhmhvavDwIRzOsyC9H/mpqrbFSHyCHNxn4HUfAZ3YfH8J+zCZc88N
QY2Q7GUro9NhsOWhBO1I1B/7LX/U1aePZe+GqAk/aZiL/ratDGrj3f3BgQMy0y3K
lEDKb6Vjc3jho/7N6C4paG5It//z2+MRMyt3
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:05:31 2026 by rpki-client