Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/V5bix4gTfEs3hipLCClAAP5t3kQ.roa
File: V5bix4gTfEs3hipLCClAAP5t3kQ.roa (raw, json)
Hash identifier: C2MdcJsjiYqGNCLK4wL1Y+IQpt6utQApij00Ii8FifU=
Subject key identifier: 57:96:E2:C7:88:13:7C:4B:37:86:2A:4B:08:29:40:00:FE:6D:DE:44
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DC5E0F40A542E9A7D7A36FEB5F9FDF678
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/V5bix4gTfEs3hipLCClAAP5t3kQ.roa
Signing time: Sat 25 Apr 2026 18:22:27 +0000
ROA not before: Sat 25 Apr 2026 18:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 2.26.158.0/24 maxlen: 24
2.26.188.0/24 maxlen: 24
2.26.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c5:e0:f4:0a:54:2e:9a:7d:7a:36:fe:b5:f9:fd:f6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 25 18:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5796e2c788137c4b37862a4b08294000fe6dde44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8d:6a:57:07:8a:6f:e3:4a:47:a3:d5:70:2e:
81:3c:7b:1d:fb:3a:37:9b:3e:57:28:69:a9:cf:67:
99:1b:9d:bd:b0:05:4a:e5:7c:35:2b:51:94:5b:cb:
18:8b:d5:6c:fe:51:5d:04:e8:4d:ef:90:a2:10:90:
31:05:8f:24:b4:2f:de:05:67:48:7c:f0:35:4b:8f:
a0:af:46:f2:30:24:32:95:66:89:bf:c2:a1:ff:63:
88:da:61:20:0a:58:7c:1e:e2:31:3c:67:05:26:8a:
79:21:3c:48:05:7e:66:c2:0a:3b:11:99:7d:79:21:
c3:ea:5a:1e:66:56:8e:3a:30:86:a8:d0:c6:4e:47:
45:4d:11:3d:bb:9d:75:48:af:c1:12:9a:b6:03:d7:
ac:d9:09:ea:67:d4:03:8d:8e:95:71:be:97:34:38:
4d:76:3c:a6:07:98:1e:f4:fb:4c:45:98:ad:5e:4c:
cf:6c:fa:75:f3:50:f8:88:61:6c:1e:a9:f1:b8:da:
d9:9b:8a:ee:a8:70:fb:b4:13:97:9f:10:c9:d0:26:
99:8a:e4:e1:03:cc:e1:73:8f:6f:db:68:e5:7f:c4:
f4:62:c2:6f:8c:2b:ce:f3:38:c7:3c:fb:90:4a:77:
83:29:ac:dd:19:3b:67:b0:a8:40:60:ac:18:3d:29:
82:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:96:E2:C7:88:13:7C:4B:37:86:2A:4B:08:29:40:00:FE:6D:DE:44
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/V5bix4gTfEs3hipLCClAAP5t3kQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.158.0/24
2.26.188.0/23
Signature Algorithm: sha256WithRSAEncryption
49:41:be:39:18:83:ab:c4:6f:2e:59:37:a8:0f:92:a8:06:42:
75:34:3a:44:80:5f:d3:3a:15:ad:39:8e:e7:4e:f2:20:49:27:
17:86:9a:e6:ff:fc:75:bd:3a:51:41:01:b9:98:2e:b3:74:c4:
50:6b:34:8b:74:eb:ea:00:ab:43:02:49:71:cd:0b:f6:b2:20:
96:8d:d4:b6:89:76:38:6d:8b:50:15:3a:b1:ee:1f:0e:df:57:
4e:66:66:95:bf:c1:6a:0a:fb:4a:cd:ca:ed:5d:e2:ca:7c:eb:
2b:57:65:97:2e:44:6b:59:72:58:d8:3f:ac:ae:69:6a:0a:91:
68:ed:44:a9:5a:55:d7:76:2c:cc:48:02:43:26:3c:89:18:9f:
7e:5e:ce:86:88:d0:cc:08:7d:b3:f4:be:dc:30:e0:5f:cc:74:
e0:9f:ed:65:b6:a9:7f:a1:51:d5:26:f5:cc:85:e5:d1:2e:5b:
79:4e:b8:6b:71:35:9f:77:5d:03:7a:4f:a0:60:b9:e0:ee:66:
0a:f8:b6:00:52:d3:eb:f2:ac:81:e2:dd:a0:e9:85:9c:36:f4:
56:67:06:6f:22:4d:bb:80:46:b6:ff:d8:aa:df:be:b9:ee:7b:
49:e9:8f:98:6d:96:4a:f3:9d:f5:f5:f6:18:86:2f:ab:05:2e:
f3:b1:54:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:49:03 2026 by rpki-client