Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/UZYPz96Gw0c4B7GJD14HJYQ6LKI.roa
File: UZYPz96Gw0c4B7GJD14HJYQ6LKI.roa (raw, json)
Hash identifier: e7kqgmvcZuM5M/n5JfqQWGa+K7FsDIa3hsh51F5Cxs4=
Subject key identifier: 51:96:0F:CF:DE:86:C3:47:38:07:B1:89:0F:5E:07:25:84:3A:2C:A2
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FFC25947B57E8F335A1561606409A9FDE
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/UZYPz96Gw0c4B7GJD14HJYQ6LKI.roa
Signing time: Thu 13 Aug 2026 17:22:29 +0000
ROA not before: Thu 13 Aug 2026 17:22:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203154
IP address blocks: 2.26.4.0/24 maxlen: 24
2.26.5.0/24 maxlen: 24
2.26.6.0/24 maxlen: 24
2.27.56.0/24 maxlen: 24
2.27.137.0/24 maxlen: 24
31.76.25.0/24 maxlen: 24
31.77.150.0/24 maxlen: 24
177.3.210.0/24 maxlen: 24
177.3.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fc:25:94:7b:57:e8:f3:35:a1:56:16:06:40:9a:9f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 13 17:22:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51960fcfde86c3473807b1890f5e0725843a2ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e6:bb:86:30:c5:81:c3:bc:12:ac:a5:c3:31:
01:42:a1:22:ae:2a:62:99:0a:55:61:e2:6c:4b:86:
63:61:62:d6:45:a7:f8:68:17:fa:fc:c9:e9:c8:cc:
98:82:d4:12:a5:27:74:34:61:74:a6:de:ba:97:9e:
e1:ae:60:92:39:a7:43:0b:89:c5:11:c6:0e:5e:d9:
49:7d:7e:77:a3:ae:59:27:46:9c:63:44:b8:8b:63:
27:d7:12:c2:cd:47:28:14:a2:71:38:a0:df:c1:70:
02:32:ff:13:59:3e:fe:d9:95:44:6d:5e:15:3f:58:
73:d6:01:43:41:89:3d:d4:2b:36:3d:42:dc:7d:c5:
ab:ea:b6:78:64:a0:4b:db:bb:e1:ea:62:54:b8:5a:
fd:30:ee:3e:1a:cd:e7:5d:13:55:58:72:c5:96:13:
b0:af:b2:9e:62:14:f3:55:d6:c7:a7:35:73:10:e7:
b5:67:45:eb:2f:b3:27:1d:b0:02:a9:f2:1f:41:f9:
14:55:a3:6b:05:58:56:30:b5:2a:ac:1b:71:d4:c6:
3b:0b:51:87:8b:ee:3c:73:fd:51:e0:8d:48:b5:3c:
d3:5b:a4:b7:1e:97:c4:8b:c9:43:c7:7d:ac:9a:f3:
5f:55:45:50:f8:3c:f2:7e:9b:d3:9e:08:de:d6:89:
3b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:96:0F:CF:DE:86:C3:47:38:07:B1:89:0F:5E:07:25:84:3A:2C:A2
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/UZYPz96Gw0c4B7GJD14HJYQ6LKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.4.0-2.26.6.255
2.27.56.0/24
2.27.137.0/24
31.76.25.0/24
31.77.150.0/24
177.3.210.0/23
Signature Algorithm: sha256WithRSAEncryption
16:7e:63:60:41:4c:66:1e:d4:95:dc:bf:d9:8b:81:9d:04:7a:
55:fd:c4:31:28:00:f1:39:1d:d8:c2:e2:6c:14:18:a7:a9:c3:
f1:5f:bd:2f:76:81:5a:b0:a0:2a:90:77:51:6b:6d:0f:b4:7e:
c0:da:bc:05:df:4b:e2:a1:b2:52:80:51:15:fe:62:28:a9:58:
88:e6:98:f2:3e:0b:94:14:d3:39:8e:21:1e:d0:61:72:ea:d3:
55:64:ae:79:f6:37:4f:b3:a9:c4:c6:b8:61:00:d5:26:0e:eb:
f2:37:70:17:77:b7:0f:11:38:a2:ea:5b:27:02:ed:51:f2:ff:
a3:40:5e:c7:54:fc:3a:36:8e:c2:2b:f4:bc:1f:30:15:43:aa:
27:f1:2e:d7:c3:40:d9:a8:f8:20:ce:39:73:0e:5e:2d:cc:74:
7a:e9:6e:4e:28:b2:72:bf:4f:10:7e:ea:73:b2:9e:5d:60:7c:
45:01:12:ad:19:31:04:d9:17:14:67:14:15:6b:dd:a1:47:e4:
16:fc:3c:f3:61:6a:de:4d:ba:15:09:8c:f4:5b:2c:16:f2:3a:
a2:68:89:e9:36:75:a3:64:91:36:76:4f:03:5c:1c:29:1f:f6:
1f:58:4b:e8:9c:66:23:04:95:33:2b:aa:62:b4:44:c6:99:b2:
59:bb:1a:28
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZ/8JZR7V+jzNaFWFgZAmp/eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwODEzMTcyMjI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTk2MGZjZmRlODZjMzQ3MzgwN2IxODkwZjVlMDcyNTg0M2EyY2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjua7hjDFgcO8EqylwzEBQqEiripi
mQpVYeJsS4ZjYWLWRaf4aBf6/MnpyMyYgtQSpSd0NGF0pt66l57hrmCSOadDC4nF
EcYOXtlJfX53o65ZJ0acY0S4i2Mn1xLCzUcoFKJxOKDfwXACMv8TWT7+2ZVEbV4V
P1hz1gFDQYk91Cs2PULcfcWr6rZ4ZKBL27vh6mJUuFr9MO4+Gs3nXRNVWHLFlhOw
r7KeYhTzVdbHpzVzEOe1Z0XrL7MnHbACqfIfQfkUVaNrBVhWMLUqrBtx1MY7C1GH
i+48c/1R4I1ItTzTW6S3HpfEi8lDx32smvNfVUVQ+DzyfpvTngje1ok7cwIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFFGWD8/ehsNHOAexiQ9eByWEOiyiMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvVVpZUHo5Nkd3MGM0QjdHSkQxNEhKWVE2TEtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsMAwDBAICGgQD
BAACGgYDBAACGzgDBAACG4kDBAAfTBkDBAAfTZYDBAGxA9IwDQYJKoZIhvcNAQEL
BQADggEBABZ+Y2BBTGYe1JXcv9mLgZ0EelX9xDEoAPE5HdjC4mwUGKepw/FfvS92
gVqwoCqQd1FrbQ+0fsDavAXfS+KhslKAURX+YiipWIjmmPI+C5QU0zmOIR7QYXLq
01Vkrnn2N0+zqcTGuGEA1SYO6/I3cBd3tw8ROKLqWycC7VHy/6NAXsdU/Do2jsIr
9LwfMBVDqifxLtfDQNmo+CDOOXMOXi3MdHrpbk4osnK/TxB+6nOynl1gfEUBEq0Z
MQTZFxRnFBVr3aFH5Bb8PPNhat5NuhUJjPRbLBbyOqJoiek2daNkkTZ2TwNcHCkf
9h9YS+icZiMElTMrqmK0RMaZslm7Gig=
-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:41 2026 by rpki-client