Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_u-fsu2Zqb7HaB3XxBbaXVL6HtY.roa
File: _u-fsu2Zqb7HaB3XxBbaXVL6HtY.roa (raw, json)
Hash identifier: EmgEr9i10OTTbmB/NvnzDRYdcUZSqBoIuvpN9qNilUY=
Subject key identifier: FE:EF:9F:B2:ED:99:A9:BE:C7:68:1D:D7:C4:16:DA:5D:52:FA:1E:D6
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1A2989356391F0E7B773EF243F2E31482
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_u-fsu2Zqb7HaB3XxBbaXVL6HtY.roa
Signing time: Tue 03 Nov 2026 18:07:50 +0000
ROA not before: Tue 03 Nov 2026 18:07:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6939
IP address blocks: 2.26.32.0/22 maxlen: 24
31.76.172.0/22 maxlen: 24
64.188.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a2:98:93:56:39:1f:0e:7b:77:3e:f2:43:f2:e3:14:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 3 18:07:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=feef9fb2ed99a9bec7681dd7c416da5d52fa1ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:11:1a:de:af:81:ff:33:b8:ae:4b:1a:2f:8f:
2a:cb:e6:c8:8f:7a:18:78:06:be:dc:61:71:75:bd:
4b:51:9b:26:3d:43:00:54:0b:92:34:13:8c:f2:6c:
71:4c:c2:1a:6e:75:cf:19:24:a1:56:16:08:1a:21:
67:4b:1a:f6:57:e2:82:9d:4d:19:e1:2c:9e:f6:f3:
c8:be:c2:82:e8:41:49:3b:44:cb:b4:d8:b2:91:00:
d9:8b:05:33:00:e0:cd:3d:d6:5b:67:ca:3f:9a:2b:
63:9f:a6:95:d0:86:87:c5:bb:be:29:10:96:89:db:
0e:61:e6:4a:55:2d:5f:d0:20:c9:a9:9b:2c:85:6c:
65:eb:a2:8a:55:69:6a:46:dc:85:af:c9:98:81:53:
65:fd:32:ce:bb:65:5c:8c:2d:be:49:ff:79:8e:76:
2c:0a:c5:34:e8:97:6b:c0:4d:62:6e:05:e9:e2:0d:
3b:8b:50:7e:98:85:ff:f2:05:44:92:13:d1:4c:1f:
7e:a8:03:f8:77:c3:52:03:df:40:53:7c:f8:45:e4:
59:00:58:b0:df:d6:9d:fb:8a:52:37:92:e5:26:16:
4f:8a:9c:f3:8b:0b:db:e3:8c:90:5f:3d:9f:30:eb:
2a:e9:b0:26:a5:eb:b4:9f:19:ea:9e:05:07:6f:22:
80:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EF:9F:B2:ED:99:A9:BE:C7:68:1D:D7:C4:16:DA:5D:52:FA:1E:D6
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_u-fsu2Zqb7HaB3XxBbaXVL6HtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.32.0/22
31.76.172.0/22
64.188.108.0/22
Signature Algorithm: sha256WithRSAEncryption
28:54:56:e1:4b:be:91:e9:d4:77:10:d7:54:39:fa:5d:ba:e7:
67:e9:c0:36:a7:14:3c:ab:1c:f6:95:f2:4c:9a:ad:7c:a6:46:
66:1c:fc:46:e6:6b:33:ae:5e:62:c5:c9:31:7d:15:20:dc:63:
df:80:28:d5:8a:50:8f:21:33:fa:65:a2:a8:0f:c5:30:d5:d7:
6f:2f:0e:e4:bd:8a:ef:f9:6b:4a:aa:62:b2:22:8f:23:2a:ab:
3b:d7:88:e6:ed:23:e5:22:71:71:56:09:fe:75:bd:d4:1c:a3:
4e:36:26:5e:4a:b1:bf:52:f6:f8:7a:52:74:78:34:a7:3e:19:
fe:9d:e2:40:f8:68:ac:2f:ab:02:b0:a6:ae:94:2c:c8:a4:86:
33:8b:57:a1:e9:92:39:09:ff:b6:af:6b:25:86:45:40:5d:e8:
36:50:ee:ac:f5:de:aa:a7:a3:2c:52:e7:63:80:76:3c:08:21:
e4:f6:43:24:72:8a:96:3b:d9:c5:64:da:ea:cf:ce:75:a5:13:
b0:1d:06:0d:d0:c0:56:66:b6:4c:43:cf:1f:ec:35:e6:04:9a:
46:9d:9f:c4:e4:80:33:b9:86:91:43:aa:53:96:f6:53:a3:84:
af:99:41:27:de:4b:7e:b9:34:9e:82:bc:d8:cf:fc:e2:97:f4:
31:81:c5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:28:39 2026 by rpki-client