Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/X2Es2YcMha0-s_pkX35lgf9aSmU.roa
File: X2Es2YcMha0-s_pkX35lgf9aSmU.roa (raw, json)
Hash identifier: HvtBzW13QH1bbx+pRy3zg8j8ckJPltzIVtvgy4GT8OY=
Subject key identifier: 5F:61:2C:D9:87:0C:85:AD:3E:B3:FA:64:5F:7E:65:81:FF:5A:4A:65
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1798E3706CE2F728959D36EA707738215
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/X2Es2YcMha0-s_pkX35lgf9aSmU.roa
Signing time: Mon 26 Oct 2026 18:52:05 +0000
ROA not before: Mon 26 Oct 2026 18:52:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51765
IP address blocks: 2.26.94.0/24 maxlen: 24
2.26.127.0/24 maxlen: 24
2.26.177.0/24 maxlen: 24
2.26.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:8e:37:06:ce:2f:72:89:59:d3:6e:a7:07:73:82:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 26 18:52:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f612cd9870c85ad3eb3fa645f7e6581ff5a4a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:86:45:ff:b7:79:16:09:11:70:d6:2f:ce:e2:
f1:c6:01:76:ac:f2:16:3a:7a:4f:fe:cb:e6:fb:8e:
fc:58:c3:b9:8a:90:18:98:bd:a5:e7:0b:b0:42:74:
0a:08:b0:54:8d:b3:0c:d8:dd:f0:d6:c4:fd:aa:58:
cc:fb:08:92:2b:42:f6:81:d9:58:85:3b:f2:2e:1a:
83:af:5f:1a:b4:c9:b8:5c:3e:86:7e:ec:86:8c:21:
4a:53:ff:a8:f0:2a:81:56:c9:86:19:6e:a9:b4:52:
78:94:98:15:45:2e:06:10:5e:ef:19:5a:f0:1a:0f:
9c:a3:d3:8c:23:b6:31:00:4a:80:14:e8:7d:a6:c6:
a4:e4:d1:a1:ef:c4:a6:d1:ea:d1:d8:be:d0:3e:1b:
81:65:4a:c2:0b:e5:5b:4e:8a:a7:a5:0f:2e:70:1a:
14:d5:97:de:96:b5:c6:db:15:28:d0:4c:36:13:fb:
7d:30:8e:97:6d:a1:b9:88:9d:b6:a5:d0:20:52:6f:
69:c2:d0:f8:02:91:97:c2:a1:1a:93:f5:cb:eb:9d:
bd:0e:75:37:e7:bc:b5:4c:54:3f:91:55:83:90:fc:
58:2e:68:ec:1d:31:cb:df:60:59:10:80:a2:55:9d:
3b:ad:23:85:bc:3b:46:a5:c5:4a:03:01:b3:25:b9:
2b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:61:2C:D9:87:0C:85:AD:3E:B3:FA:64:5F:7E:65:81:FF:5A:4A:65
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/X2Es2YcMha0-s_pkX35lgf9aSmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.94.0/24
2.26.127.0/24
2.26.177.0/24
2.26.185.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:81:e0:66:ff:64:05:de:74:c3:33:73:0e:2c:44:50:ba:3f:
a4:a8:4e:4c:98:4b:88:aa:09:1f:93:d4:67:1d:ff:8d:e9:81:
16:aa:ca:29:68:30:70:43:d3:e4:66:46:9e:ff:04:a8:2c:55:
54:ff:55:03:2b:1d:ef:71:17:3a:17:92:7b:3c:da:f3:a2:33:
56:ff:5b:95:59:21:6b:86:5e:59:2e:7a:80:db:52:2d:f6:00:
53:be:f1:71:37:28:88:d8:8d:95:3c:4b:d4:a7:91:a0:37:f0:
9e:5b:07:c2:62:05:d0:5c:72:dc:f2:15:6d:86:de:0d:b3:92:
5e:e2:48:71:99:b1:b0:8d:f1:5f:ba:f6:9b:b5:2d:0c:fc:60:
44:d7:87:52:81:f4:4e:f5:ba:d5:b5:8e:9c:63:a0:2a:12:39:
86:f6:5e:1e:f8:b8:c1:09:4a:9f:47:eb:50:5f:47:a6:f2:f8:
5d:bc:23:a2:08:68:97:ad:54:1d:4a:0b:15:c6:20:aa:c9:d9:
6b:d4:08:a1:51:18:4a:ce:68:d5:b2:f5:60:10:be:3b:d4:4f:
5a:06:55:28:25:11:24:3d:97:5c:9d:21:62:c8:ca:59:5a:5e:
f7:d2:a8:f8:b2:85:d1:8e:6d:c0:0f:fe:ca:b1:51:91:70:43:
7c:96:dc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:29:15 2026 by rpki-client