Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/SMQP36XOd2xV2YrY-TmMciJXS3c.roa
File: SMQP36XOd2xV2YrY-TmMciJXS3c.roa (raw, json)
Hash identifier: OHVunXlahkTm4vy56+UOpF3fSoikrFYQ+GS4g8hPc+E=
Subject key identifier: 48:C4:0F:DF:A5:CE:77:6C:55:D9:8A:D8:F9:39:8C:72:22:57:4B:77
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DB0FE48FE073849FFD1AC6282AB12D20A
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/SMQP36XOd2xV2YrY-TmMciJXS3c.roa
Signing time: Tue 21 Apr 2026 17:02:27 +0000
ROA not before: Tue 21 Apr 2026 17:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137517
IP address blocks: 2.26.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:fe:48:fe:07:38:49:ff:d1:ac:62:82:ab:12:d2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 21 17:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48c40fdfa5ce776c55d98ad8f9398c7222574b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:26:7f:78:cc:f3:33:04:5a:5c:4c:ef:77:6b:
b2:1a:22:6a:f8:9c:75:b4:69:d4:6d:b3:d0:a2:93:
c2:a8:52:39:69:4e:31:48:23:7e:3f:a3:16:30:25:
ee:df:89:8f:51:f9:f7:b8:88:d8:d8:26:c9:11:a5:
73:ad:bf:9a:31:b5:c1:42:56:33:ff:71:1b:5f:6c:
2c:b7:12:62:9c:58:44:3b:d4:23:e2:71:93:17:e4:
07:4a:db:67:b8:92:40:00:38:d9:19:d5:6d:c4:f7:
41:d0:9b:f8:c7:61:1a:bd:ec:69:54:c4:e4:fb:9c:
d9:fe:99:06:ae:fd:83:37:1d:51:b6:7f:81:68:45:
db:b6:95:e0:72:bc:24:be:d7:05:df:7a:b2:ba:69:
b7:75:de:e3:19:8d:88:f0:26:74:5b:d4:91:ef:14:
04:2a:a7:98:6b:9b:16:61:97:17:44:5c:50:23:b2:
11:30:b5:37:54:ad:b8:a3:6c:e8:91:2b:bb:c5:e7:
ba:4f:dd:77:b0:07:fb:9e:55:b3:96:a4:19:09:51:
0e:d1:b3:f7:54:23:10:ca:ee:01:b6:2d:6b:e3:32:
16:93:4e:d5:b7:c3:3b:f2:91:aa:3c:4f:c1:13:67:
85:b9:af:bc:b6:fb:4b:38:5c:ee:ad:76:5c:52:ca:
05:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C4:0F:DF:A5:CE:77:6C:55:D9:8A:D8:F9:39:8C:72:22:57:4B:77
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/SMQP36XOd2xV2YrY-TmMciJXS3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.223.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:05:29:6b:f4:25:9c:a4:03:0b:b1:f1:e0:0c:dd:8e:19:f1:
2a:6e:fc:f8:7e:2c:dc:00:79:80:bb:d9:53:9c:10:10:dc:df:
3a:67:51:a0:0b:6c:10:14:a9:c6:6b:1b:51:e4:57:03:f2:20:
93:80:be:a5:3b:b1:5b:da:9c:76:1f:b5:90:e3:1a:ae:4a:d0:
8c:b6:f6:0f:ec:48:b8:4d:96:92:80:4d:6c:d9:7d:dd:5f:77:
79:e6:a5:4b:b0:a5:10:bb:e6:ec:da:40:89:8b:65:69:95:08:
fb:c7:82:c9:ef:19:e6:b5:f9:b0:b0:39:87:05:54:e3:62:4d:
a2:53:b8:d4:1a:2a:a8:43:d0:41:c4:a5:ad:6a:7e:2c:42:57:
00:de:fc:5a:16:7b:1d:54:52:c6:a4:e4:14:b6:cc:d0:1c:01:
23:97:bf:cf:8a:73:45:af:7c:dc:e1:99:bc:54:fc:1e:c5:5e:
b9:f0:0e:44:3b:92:d5:5f:b7:25:0c:a2:a9:0f:42:9c:c8:00:
08:b7:22:c8:3e:c1:7f:cd:41:bc:18:8d:15:83:6e:ae:27:f8:
47:60:81:bd:2e:87:6d:98:7a:71:c5:1c:8c:e7:cb:03:f4:cb:
a4:92:22:06:c5:cc:f7:2c:29:a9:a8:37:aa:d6:7a:bf:c1:8a:
67:9a:8e:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2w/kj+BzhJ/9GsYoKrEtIKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNDIxMTcwMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGM0MGZkZmE1Y2U3NzZjNTVkOThhZDhmOTM5OGM3MjIyNTc0Yjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSZ/eMzzMwRaXEzvd2uyGiJq+Jx1
tGnUbbPQopPCqFI5aU4xSCN+P6MWMCXu34mPUfn3uIjY2CbJEaVzrb+aMbXBQlYz
/3EbX2wstxJinFhEO9Qj4nGTF+QHSttnuJJAADjZGdVtxPdB0Jv4x2EavexpVMTk
+5zZ/pkGrv2DNx1Rtn+BaEXbtpXgcrwkvtcF33qyumm3dd7jGY2I8CZ0W9SR7xQE
KqeYa5sWYZcXRFxQI7IRMLU3VK24o2zokSu7xee6T913sAf7nlWzlqQZCVEO0bP3
VCMQyu4Bti1r4zIWk07Vt8M78pGqPE/BE2eFua+8tvtLOFzurXZcUsoFgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEjED9+lzndsVdmK2Pk5jHIiV0t3MB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvU01RUDM2WE9kMnhWMllyWS1UbU1jaUpYUzNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAhrfMA0G
CSqGSIb3DQEBCwUAA4IBAQBLBSlr9CWcpAMLsfHgDN2OGfEqbvz4fizcAHmAu9lT
nBAQ3N86Z1GgC2wQFKnGaxtR5FcD8iCTgL6lO7Fb2px2H7WQ4xquStCMtvYP7Ei4
TZaSgE1s2X3dX3d55qVLsKUQu+bs2kCJi2VplQj7x4LJ7xnmtfmwsDmHBVTjYk2i
U7jUGiqoQ9BBxKWtan4sQlcA3vxaFnsdVFLGpOQUtszQHAEjl7/PinNFr3zc4Zm8
VPwexV658A5EO5LVX7clDKKpD0KcyAAItyLIPsF/zUG8GI0Vg26uJ/hHYIG9Lodt
mHpxxRyM58sD9MukkiIGxcz3LCmpqDeq1nq/wYpnmo6W
-----END CERTIFICATE-----
Generated at Tue May 5 16:50:49 2026 by rpki-client