Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/YPNTuWtwOaYOX2E6ICDa0gVVyY0.roa
File: YPNTuWtwOaYOX2E6ICDa0gVVyY0.roa (raw, json)
Hash identifier: YN8WOB9ajgBtoQol4Y93bwA173QBJIH6KeCKFxITrhk=
Subject key identifier: 60:F3:53:B9:6B:70:39:A6:0E:5F:61:3A:20:20:DA:D2:05:55:C9:8D
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A150D93639E92BBE92313257E86376304D
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/YPNTuWtwOaYOX2E6ICDa0gVVyY0.roa
Signing time: Sun 18 Oct 2026 21:09:34 +0000
ROA not before: Sun 18 Oct 2026 21:09:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 2.26.132.0/24 maxlen: 24
2.26.153.0/24 maxlen: 24
2.27.87.0/24 maxlen: 24
2.27.97.0/24 maxlen: 24
2.27.164.0/24 maxlen: 24
31.77.120.0/24 maxlen: 24
144.31.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:50:d9:36:39:e9:2b:be:92:31:32:57:e8:63:76:30:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 18 21:09:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60f353b96b7039a60e5f613a2020dad20555c98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3f:ba:38:17:43:03:37:cf:e3:98:f2:96:d6:
39:cd:83:f3:9c:07:25:12:81:ef:02:d1:5d:28:ce:
08:11:bc:e9:cb:71:1b:88:94:4b:df:34:f9:f9:0c:
f7:ed:e4:08:90:9c:97:de:b2:8c:e2:47:e5:4d:37:
2b:a3:ad:8c:7c:d4:59:9c:b8:a1:cf:95:0f:6b:a7:
af:a7:30:8e:9c:49:81:1f:3e:9f:f7:45:77:df:af:
0a:b2:b1:b1:71:f0:3b:d2:79:2c:96:a8:3c:9d:9d:
15:9e:b4:6a:76:62:72:2c:6f:da:7c:26:d1:56:48:
75:c3:66:17:57:63:6f:f4:88:42:da:e1:bd:65:38:
14:94:19:42:5c:41:3c:47:66:1e:2f:9d:29:ab:f6:
2f:f8:ff:4a:b9:09:88:b8:84:65:f9:b5:ed:c9:62:
ca:4c:79:a2:03:a7:f3:42:c4:e4:9c:d7:7c:79:25:
a1:52:e4:57:cc:1f:d6:1a:d0:9e:36:56:94:22:3a:
1d:44:64:82:b6:9a:b4:25:90:6e:af:b5:bd:6d:b8:
45:8c:82:04:ef:fc:f5:67:0c:3f:96:f1:c5:0b:56:
bd:ff:5b:a3:84:5b:a1:70:37:ab:4c:74:ba:dc:0f:
1a:cc:2b:fe:08:73:5f:92:17:1a:19:88:85:9c:3f:
a4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F3:53:B9:6B:70:39:A6:0E:5F:61:3A:20:20:DA:D2:05:55:C9:8D
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/YPNTuWtwOaYOX2E6ICDa0gVVyY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.132.0/24
2.26.153.0/24
2.27.87.0/24
2.27.97.0/24
2.27.164.0/24
31.77.120.0/24
144.31.149.0/24
Signature Algorithm: sha256WithRSAEncryption
90:9b:a4:1d:6f:d5:f8:94:11:27:fd:ba:ca:4f:5e:e6:f8:5b:
c2:35:22:59:b3:f6:e8:2f:37:14:db:23:43:02:f7:ec:9f:e6:
d0:38:67:85:0f:66:b3:09:dc:b0:2b:21:30:46:37:f7:57:8f:
5f:33:41:29:52:da:31:d1:d9:20:4b:d0:53:05:f5:61:0e:06:
22:37:e5:f7:7c:1c:f1:a6:2a:98:bf:e1:d2:0c:d1:bd:2d:53:
5e:02:bb:20:86:ee:65:32:56:be:21:8d:69:3f:05:46:e6:12:
6f:ea:49:e4:96:84:03:bf:7e:d0:f9:5b:a5:f5:53:72:4e:56:
aa:a1:67:75:db:cc:cc:24:91:65:5e:96:47:05:9d:64:11:3e:
3d:48:85:ab:c8:6b:77:a0:57:05:fe:52:15:8e:45:b9:21:53:
a6:a0:17:b4:ed:1f:0a:a2:79:70:f0:85:14:1d:2c:b6:ea:c4:
82:45:06:8c:5d:7c:46:41:ad:3c:4b:4f:98:f8:d3:40:ac:16:
b9:0c:14:02:db:a9:7c:ab:57:25:72:3b:fa:b8:ad:e5:e7:8b:
a7:41:8f:5a:69:46:38:a2:34:2d:f6:a5:bf:93:bb:70:53:c7:
06:3a:00:16:67:79:42:b6:89:b9:04:e5:16:61:43:38:cc:4e:
ff:47:f0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:27:08 2026 by rpki-client