Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/U4MRYoHGnchggXvFHjhLZ8U35hc.roa
File: U4MRYoHGnchggXvFHjhLZ8U35hc.roa (raw, json)
Hash identifier: 0Me6kM7TQowuizHwCz5ty+i0zj/hd9yG6J8d7VH3qbY=
Subject key identifier: 53:83:11:62:81:C6:9D:C8:60:81:7B:C5:1E:38:4B:67:C5:37:E6:17
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DB0FD45F156FF1318D19A04AB7CBD4FA4
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/U4MRYoHGnchggXvFHjhLZ8U35hc.roa
Signing time: Tue 21 Apr 2026 17:01:21 +0000
ROA not before: Tue 21 Apr 2026 17:01:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22427
IP address blocks: 2.26.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:fd:45:f1:56:ff:13:18:d1:9a:04:ab:7c:bd:4f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 21 17:01:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5383116281c69dc860817bc51e384b67c537e617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7b:92:7a:92:27:88:d9:c2:51:dc:24:18:ba:
35:ab:7d:21:16:42:31:6d:5e:86:cf:5d:f7:8a:19:
03:68:79:82:e7:fe:c2:aa:ba:ab:4c:24:ea:23:ec:
84:f4:70:1a:62:6c:52:78:eb:32:f1:50:f4:b2:78:
83:f1:df:ba:20:20:a8:b9:89:8c:99:e4:23:a9:c0:
bd:d0:9b:54:34:b8:69:78:04:ce:c6:29:22:f8:87:
24:0f:09:7e:24:16:4c:41:b6:af:d6:ed:f7:6d:04:
7b:a5:92:3a:c6:b0:a2:81:98:8e:95:4d:7a:16:cc:
b4:9b:1d:e5:bb:a4:f4:46:27:85:48:ab:46:35:a9:
b8:fa:c6:19:5f:5c:5e:82:fa:21:bf:ce:19:05:1d:
40:6e:4b:3f:d5:41:8c:07:23:63:f3:58:bd:f5:cb:
3e:3d:1a:07:7f:8b:cf:e2:14:36:17:d5:ab:f6:ac:
6c:fc:d4:e7:e5:8f:95:e0:55:83:4e:70:35:e0:5f:
1c:3d:a5:13:bb:6d:e6:f3:6d:88:1e:03:fe:77:e9:
97:e6:01:85:d1:65:5f:49:75:89:ca:66:df:22:f3:
a7:47:18:74:9e:40:0a:67:28:6b:73:87:a3:5a:f4:
37:ea:87:7b:b2:e7:d7:d0:36:35:50:33:a1:ed:31:
cc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:83:11:62:81:C6:9D:C8:60:81:7B:C5:1E:38:4B:67:C5:37:E6:17
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/U4MRYoHGnchggXvFHjhLZ8U35hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.186.0/24
Signature Algorithm: sha256WithRSAEncryption
51:3d:87:24:6f:61:5c:d0:6f:ea:77:11:53:b8:3d:47:c1:7b:
75:1d:e4:b5:83:aa:80:41:75:54:b8:2c:02:3e:e0:cd:1e:82:
90:03:70:ca:de:3f:c7:6c:d3:e4:ce:6d:55:59:e2:5f:6f:b1:
52:34:47:8c:68:cb:78:0b:66:1d:08:e3:84:8d:1a:06:27:86:
a0:74:5d:73:6a:d2:1d:5d:4e:f8:a4:70:82:a3:b9:e3:31:e0:
0b:f8:75:43:38:5c:17:fd:4e:d8:c2:b1:20:e2:2d:19:86:f6:
00:a2:4b:8a:3c:ad:e7:ec:d4:70:ea:a9:9d:1c:70:49:e0:5a:
ff:94:99:cd:b4:0a:77:cb:a1:7d:f4:02:7e:31:26:1a:b5:cf:
26:83:bf:bc:65:63:f7:b5:74:9f:df:64:63:dc:47:b6:da:5d:
d7:a1:db:3a:dc:bf:01:90:35:2d:65:cf:2d:02:87:c8:e4:dd:
ac:1d:ab:d3:a2:9f:5c:5d:71:d3:3c:67:30:4d:6e:cd:93:dc:
d9:e9:12:8a:89:9d:34:44:ba:80:2a:57:8e:0a:e9:5e:4e:07:
ef:35:e4:c0:ed:95:b6:8c:3f:a1:5e:b8:e7:f7:c7:26:c4:5d:
ad:07:d7:a4:bc:1c:bc:8d:90:e5:8b:3e:62:48:58:42:12:fe:
5e:80:0b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:51:23 2026 by rpki-client