Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/a8cqyxWHRaYFOc3O3IkgfBc8oHs.roa
File: a8cqyxWHRaYFOc3O3IkgfBc8oHs.roa (raw, json)
Hash identifier: /Il3ts7CTBcQ04EimjV3cBb/VL7jminc5nlpowxTfzg=
Subject key identifier: 6B:C7:2A:CB:15:87:45:A6:05:39:CD:CE:DC:89:20:7C:17:3C:A0:7B
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019EAD31F56FBB34A4783127CE31F8584229
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/a8cqyxWHRaYFOc3O3IkgfBc8oHs.roa
Signing time: Tue 09 Jun 2026 16:23:12 +0000
ROA not before: Tue 09 Jun 2026 16:23:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 2.26.177.0/24 maxlen: 24
2.26.178.0/24 maxlen: 24
2.26.179.0/24 maxlen: 24
2.26.180.0/24 maxlen: 24
2.26.181.0/24 maxlen: 24
2.26.184.0/24 maxlen: 24
2.26.187.0/24 maxlen: 24
2.27.108.0/24 maxlen: 24
2.27.142.0/23 maxlen: 24
2.27.146.0/23 maxlen: 24
2.27.249.0/24 maxlen: 24
31.77.176.0/23 maxlen: 24
31.77.220.0/24 maxlen: 24
31.77.221.0/24 maxlen: 24
31.77.227.0/24 maxlen: 24
31.77.228.0/24 maxlen: 24
144.31.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ad:31:f5:6f:bb:34:a4:78:31:27:ce:31:f8:58:42:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 9 16:23:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6bc72acb158745a60539cdcedc89207c173ca07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:78:41:36:ab:1b:b4:25:d6:a4:4e:4a:08:50:
f0:81:d0:63:79:45:6d:f3:7e:1b:ba:1b:cb:c4:8e:
10:46:f9:38:d0:4b:bf:fb:80:89:d9:e7:a8:9f:1c:
e8:2f:7b:39:18:ef:b3:5e:ae:6f:99:13:3b:3e:fe:
65:ba:4f:98:7d:e8:c7:e1:14:a4:80:77:71:83:e7:
3e:8c:67:af:fa:c0:6e:6c:6b:be:c4:04:a3:75:18:
96:5f:6b:a8:68:7f:5f:60:89:1b:1d:0f:e4:d1:d5:
7f:6e:65:8c:6d:d5:7d:d2:c2:5a:e6:9b:7e:75:1b:
97:43:07:d4:a4:ca:b4:33:47:e7:3c:c8:5b:ea:80:
3e:a2:b7:f4:35:de:c6:04:00:cf:bd:d5:8b:32:94:
21:ef:7f:28:ee:eb:a4:8e:f6:21:59:10:3c:08:43:
96:ae:85:34:b0:3e:c7:0e:63:bb:9d:6d:30:dc:76:
f9:5d:56:20:a7:55:29:cc:84:71:6b:8a:e6:ba:16:
f2:ba:2b:ca:87:83:0c:c9:5d:57:7c:f7:8c:25:9f:
cb:71:80:32:0d:f7:75:ca:cb:76:e0:b4:83:b7:01:
be:45:a7:56:3e:00:7d:01:10:f6:15:f2:19:28:27:
bd:da:bc:cc:9d:8e:2c:13:67:5a:24:4b:17:1d:31:
17:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C7:2A:CB:15:87:45:A6:05:39:CD:CE:DC:89:20:7C:17:3C:A0:7B
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/a8cqyxWHRaYFOc3O3IkgfBc8oHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.177.0-2.26.181.255
2.26.184.0/24
2.26.187.0/24
2.27.108.0/24
2.27.142.0/23
2.27.146.0/23
2.27.249.0/24
31.77.176.0/23
31.77.220.0/23
31.77.227.0-31.77.228.255
144.31.43.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:56:13:52:28:67:0b:2c:73:d6:3f:15:26:0e:bb:7c:85:9e:
2c:d7:75:18:f4:27:2b:2e:d6:71:3e:55:e2:f2:17:b5:1c:29:
c2:4a:52:1a:ce:d7:0f:ce:30:3b:07:19:54:63:1e:cb:3f:f7:
99:69:c8:7d:f3:91:55:de:62:13:60:ef:ff:4d:7e:23:93:eb:
2a:b6:3d:17:f3:d8:6e:26:e9:6a:dc:14:97:f3:f2:bd:b8:29:
fa:b9:17:62:c8:6a:e1:8f:93:6a:ff:67:e7:c1:d0:c2:cd:06:
d2:b6:1f:55:ef:bf:4c:a2:36:71:58:45:d9:d3:a4:f4:a0:d3:
fc:a3:36:a1:b7:ae:9b:dd:a6:dd:3b:0f:d9:36:58:94:02:63:
ae:ef:bb:85:0b:4b:d6:72:6e:cc:ee:59:d9:14:9d:75:c1:74:
7a:b2:9e:46:7f:96:20:50:93:f6:9a:2d:a3:61:d8:b1:a9:14:
5f:de:2e:a6:89:54:8b:84:7d:de:47:3d:b8:c5:fa:dd:6e:5f:
6f:15:8b:f8:26:a3:8a:36:ef:eb:a7:a1:a9:db:b8:61:8a:44:
0e:f0:85:4e:65:6b:05:b6:67:ab:bd:a9:92:98:1b:37:bf:fa:
99:14:20:9d:2e:47:38:6f:36:34:35:07:f3:76:6e:19:ed:02:
6a:7a:24:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:26:25 2026 by rpki-client