Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/UGfpt_H5E0hS3QS7almkRa8lyS8.roa
File: UGfpt_H5E0hS3QS7almkRa8lyS8.roa (raw, json)
Hash identifier: 4iK2R+dI8npW+q0H6BMbJpk6eBUBlyCoXgV1yw526XM=
Subject key identifier: 50:67:E9:B7:F1:F9:13:48:52:DD:04:BB:6A:59:A4:45:AF:25:C9:2F
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019EDB94E87F721E23857CD1D4C10AF42539
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/UGfpt_H5E0hS3QS7almkRa8lyS8.roa
Signing time: Thu 18 Jun 2026 16:33:49 +0000
ROA not before: Thu 18 Jun 2026 16:33:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 2.26.200.0/21 maxlen: 24
2.26.208.0/21 maxlen: 24
2.27.218.0/23 maxlen: 24
2.27.220.0/23 maxlen: 24
2.27.222.0/23 maxlen: 24
2.27.239.0/24 maxlen: 24
2.27.240.0/24 maxlen: 24
2.27.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:db:94:e8:7f:72:1e:23:85:7c:d1:d4:c1:0a:f4:25:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 18 16:33:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5067e9b7f1f9134852dd04bb6a59a445af25c92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:47:e4:5d:c1:df:31:6b:5a:50:e3:d7:89:f4:
f9:63:45:5c:cb:81:97:86:b5:de:97:15:ba:31:de:
07:fd:4c:83:a1:62:a8:be:a9:b2:0d:49:3b:11:85:
b5:fb:a5:82:c1:2b:31:22:cd:91:0b:20:d2:cf:ec:
31:f2:e2:4b:9a:45:20:12:0a:54:15:3c:dc:1f:25:
5a:f6:67:8b:4a:2f:05:8c:63:0e:a9:06:22:14:7a:
dc:f3:16:3c:fb:26:20:6f:8e:45:d6:73:19:a3:3c:
11:35:a4:c4:ff:5b:0f:65:91:4a:c6:f7:0a:60:d3:
55:fd:99:de:be:98:ce:c8:ac:6f:c3:41:21:4a:31:
11:7e:9c:b2:ca:00:54:4f:f6:fa:6a:12:df:2a:af:
bb:ec:2d:78:6e:1d:30:1e:6b:af:fc:84:75:5a:d7:
89:9f:d1:1c:d4:84:65:a6:81:42:10:4f:8a:88:9d:
c3:8d:16:e7:7b:f0:95:92:f9:b8:50:fb:c5:8c:88:
00:f2:34:17:2e:3b:9a:7d:fd:af:70:15:cc:0c:79:
cd:d2:40:75:f3:c2:c4:a0:d3:7b:e5:63:0a:9c:be:
a6:5c:27:07:00:e0:fd:50:56:6f:a4:a3:70:93:5c:
dd:ff:5c:55:b7:57:73:80:04:0f:f5:0c:a6:b7:ee:
ee:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:67:E9:B7:F1:F9:13:48:52:DD:04:BB:6A:59:A4:45:AF:25:C9:2F
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/UGfpt_H5E0hS3QS7almkRa8lyS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.200.0-2.26.215.255
2.27.218.0-2.27.223.255
2.27.239.0-2.27.240.255
2.27.254.0/24
Signature Algorithm: sha256WithRSAEncryption
27:55:a1:b7:88:3b:4d:f7:5b:37:de:28:b3:97:90:a1:8a:f2:
a9:29:3e:a1:d3:55:3d:57:11:b2:02:b5:db:07:55:4f:50:94:
74:0b:64:db:d7:3e:31:f1:40:aa:39:e3:06:34:16:1c:5b:4f:
0c:49:f3:af:6e:b0:34:ac:8a:92:49:98:fc:cf:5f:2b:82:67:
7a:55:da:0e:9c:7c:d0:27:de:1d:e1:28:40:48:9c:7a:4b:86:
77:a9:55:73:f7:35:c2:7e:19:db:3a:54:2a:3e:89:bd:d5:db:
67:99:3a:7b:a8:40:0f:07:0a:44:14:7e:63:91:60:7d:6d:95:
7d:66:9f:c1:33:69:f5:a4:af:26:f0:98:4c:b7:f9:0e:75:8a:
10:06:34:67:5a:34:18:bf:81:8f:9f:14:0a:2b:6f:fb:88:8e:
cb:0d:50:49:b6:f0:36:5e:64:e0:54:d6:6c:09:e9:5e:68:3c:
46:8a:16:f1:88:10:dd:dd:13:5e:86:46:aa:e0:c5:2e:8c:1f:
ae:6a:8b:23:d9:99:59:fa:63:a2:c7:84:63:3b:b2:56:71:c8:
41:ac:bc:6a:9b:f0:26:db:e5:53:23:65:00:0c:3a:b0:e1:7a:
32:2a:8d:39:9f:4d:f7:e1:90:f6:36:78:6c:c8:87:be:dd:43:
5d:f4:5f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:05:20 2026 by rpki-client