Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_wjmqv1K8HWpNnWZ_i2AxL7ahcU.roa
File: _wjmqv1K8HWpNnWZ_i2AxL7ahcU.roa (raw, json)
Hash identifier: alM1bU+m3oULlaKcfvxg6DOTkI+jRXEEP5ZjwHMGteM=
Subject key identifier: FF:08:E6:AA:FD:4A:F0:75:A9:36:75:99:FE:2D:80:C4:BE:DA:85:C5
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A155B97228353657AACF503D57AB8F59D5
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_wjmqv1K8HWpNnWZ_i2AxL7ahcU.roa
Signing time: Mon 19 Oct 2026 19:52:59 +0000
ROA not before: Mon 19 Oct 2026 19:52:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199180
IP address blocks: 2.26.12.0/24 maxlen: 24
2.26.13.0/24 maxlen: 24
2.26.14.0/24 maxlen: 24
2.26.15.0/24 maxlen: 24
2.26.144.0/24 maxlen: 24
2.27.6.0/24 maxlen: 24
31.76.36.0/24 maxlen: 24
31.76.92.0/24 maxlen: 24
31.76.121.0/24 maxlen: 24
31.76.254.0/24 maxlen: 24
177.1.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:b9:72:28:35:36:57:aa:cf:50:3d:57:ab:8f:59:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 19 19:52:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff08e6aafd4af075a9367599fe2d80c4beda85c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e4:df:f4:cf:9d:9e:71:4a:ed:60:52:87:6a:
03:52:5e:e2:c6:93:f5:71:d6:b4:a3:c1:b2:47:75:
6b:0c:ed:dd:a0:19:ab:cf:e8:3a:62:e1:ba:e2:66:
c1:79:e6:5c:4b:d0:bf:c1:41:df:5d:58:88:ea:7c:
64:b9:57:09:bd:f8:d1:cc:8c:b7:a8:2c:7f:79:98:
88:05:e5:3d:b3:2f:e3:36:c0:51:13:c5:2f:73:d7:
0c:8b:d7:37:6a:12:0a:30:e5:9d:0b:22:a7:c1:e3:
69:6a:15:29:e5:ba:df:bc:90:4b:86:9b:d9:4c:31:
28:be:16:b7:da:ac:1d:6e:86:b5:67:73:d2:fb:66:
54:ef:98:55:31:7b:9c:75:b3:8c:95:fc:25:21:80:
d1:2f:7e:02:20:71:3f:78:80:65:66:a6:41:d3:11:
d7:ec:14:ff:cb:19:66:97:50:0c:1d:3e:74:39:88:
27:40:77:53:32:b8:96:82:b1:1a:bb:db:be:b2:1d:
fd:e1:56:4e:2a:24:e5:70:2d:ce:44:0b:7f:13:9f:
58:6b:40:01:c9:55:9b:8f:7c:1d:77:59:31:06:b0:
70:ee:1b:d9:90:5f:dd:94:ba:d7:e5:8f:7a:e1:36:
35:ab:df:11:cf:99:77:1c:a8:7d:7d:52:1a:e2:c0:
67:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:08:E6:AA:FD:4A:F0:75:A9:36:75:99:FE:2D:80:C4:BE:DA:85:C5
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_wjmqv1K8HWpNnWZ_i2AxL7ahcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.12.0/22
2.26.144.0/24
2.27.6.0/24
31.76.36.0/24
31.76.92.0/24
31.76.121.0/24
31.76.254.0/24
177.1.198.0/24
Signature Algorithm: sha256WithRSAEncryption
22:2c:d4:b2:fa:a6:14:13:c1:eb:7b:ad:6a:b9:5a:66:2d:5b:
a9:06:a6:98:bf:09:99:17:ce:bf:ea:3e:4c:cf:1b:b4:5e:d7:
25:64:0f:3e:3a:d7:7a:ef:ad:85:a9:2b:6b:ce:d3:08:4b:b1:
74:0a:2c:34:5f:93:77:76:f6:d8:ff:89:f1:71:48:2c:ad:5b:
7a:06:be:82:0f:b5:fa:61:47:ad:6f:d6:03:81:ad:e9:6e:30:
0d:7c:66:2c:05:5d:56:75:d1:61:f0:4d:8c:8f:02:50:de:5d:
46:c0:ca:3f:7d:b9:03:e7:70:2e:20:c5:cc:cf:2e:a2:f9:1b:
b1:9e:29:a9:f2:5c:81:6c:eb:f2:3c:bd:65:5e:18:47:61:ab:
ad:e7:df:3e:5c:02:db:8d:30:fa:a6:2f:8a:32:e1:6c:42:bc:
00:c2:1d:a3:a5:81:ce:bf:a6:23:99:e5:e7:f7:f3:dc:26:d8:
94:f0:e4:99:f9:5c:0d:0c:7b:9b:0e:eb:cb:d7:1a:93:88:f3:
9d:0b:d9:e9:bc:65:90:43:7a:22:fd:db:7b:7f:08:c5:c6:98:
13:25:4a:b8:0d:33:63:96:9a:28:7e:7e:b2:09:c1:d1:60:92:
e1:ff:66:67:a2:3f:44:71:c3:11:ee:4b:fe:5b:61:88:a6:9c:
4d:36:de:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:27:10 2026 by rpki-client