Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ak5Rt0_nlCGDfwduaHSCsCSdCAM.roa
File: ak5Rt0_nlCGDfwduaHSCsCSdCAM.roa (raw, json)
Hash identifier: ko57lEwRZkVURw3bmBMRNssVuK8t7qjKamRjxZjPcWE=
Subject key identifier: 6A:4E:51:B7:4F:E7:94:21:83:7F:07:6E:68:74:82:B0:24:9D:08:03
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DF41228130EB7F6BFFA8EBCC0F569A70C
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ak5Rt0_nlCGDfwduaHSCsCSdCAM.roa
Signing time: Mon 04 May 2026 17:38:43 +0000
ROA not before: Mon 04 May 2026 17:38:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 2.26.228.0/22 maxlen: 24
2.26.232.0/22 maxlen: 24
2.27.97.0/24 maxlen: 24
2.27.98.0/24 maxlen: 24
2.27.103.0/24 maxlen: 24
2.27.104.0/24 maxlen: 24
2.27.126.0/24 maxlen: 24
2.27.152.0/24 maxlen: 24
2.27.153.0/24 maxlen: 24
2.27.155.0/24 maxlen: 24
2.27.157.0/24 maxlen: 24
2.27.158.0/24 maxlen: 24
2.27.159.0/24 maxlen: 24
2.27.162.0/24 maxlen: 24
2.27.243.0/24 maxlen: 24
144.31.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f4:12:28:13:0e:b7:f6:bf:fa:8e:bc:c0:f5:69:a7:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 4 17:38:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4e51b74fe79421837f076e687482b0249d0803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6c:b1:12:eb:5b:1a:8c:4c:d1:42:73:b8:7f:
0d:56:b1:e4:67:71:c0:88:04:bc:0d:ca:ab:45:ed:
77:6c:39:82:e8:d2:c6:03:e1:9d:34:aa:1a:77:8c:
8d:56:79:56:a2:1b:ff:ae:5d:5e:78:2f:6f:de:63:
a5:84:40:eb:08:d2:a0:8c:1e:89:91:58:63:3e:07:
f3:14:bd:0f:09:d4:51:91:8f:7a:3d:79:4d:f8:37:
b0:40:3b:1f:b6:a0:bd:a9:07:fd:c2:71:27:96:d6:
2a:bc:f1:e8:c6:cf:ab:c6:8f:51:e4:62:08:35:e1:
1e:38:c5:b3:a9:6f:9e:cd:a0:a0:fa:d7:c7:09:1a:
2a:2d:8e:ce:90:1a:78:8f:df:aa:be:e5:06:3c:4e:
e6:bd:86:2c:7e:a1:be:03:dc:3c:14:6d:28:53:b8:
dc:5e:17:0a:a4:de:46:4f:b0:d0:7c:28:0a:e2:dc:
07:cc:d0:b1:54:3e:77:b1:9b:7e:af:12:92:1e:75:
48:56:28:d7:fd:80:f5:e2:7f:74:63:1b:9a:61:1e:
7b:b0:98:24:a5:d3:e5:7a:3a:a9:7f:62:24:4d:95:
b4:7b:0c:c5:05:8c:a5:7a:fb:9d:d8:a1:3a:75:d1:
69:5b:88:25:07:af:4a:52:6b:45:ba:1e:b3:83:e9:
fa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4E:51:B7:4F:E7:94:21:83:7F:07:6E:68:74:82:B0:24:9D:08:03
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ak5Rt0_nlCGDfwduaHSCsCSdCAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.228.0-2.26.235.255
2.27.97.0-2.27.98.255
2.27.103.0-2.27.104.255
2.27.126.0/24
2.27.152.0/23
2.27.155.0/24
2.27.157.0-2.27.159.255
2.27.162.0/24
2.27.243.0/24
144.31.145.0/24
Signature Algorithm: sha256WithRSAEncryption
02:7c:a1:35:bc:94:34:30:f5:63:0d:e2:b3:8f:50:8c:15:b9:
3e:88:ad:45:80:29:02:55:19:39:54:83:98:ae:0d:df:70:70:
5f:1a:37:27:f1:fc:0b:7a:e4:90:08:2e:09:89:8f:bf:2e:3c:
5a:43:df:f9:a1:ea:1e:4f:1e:e3:b8:c9:8c:25:ce:44:13:7f:
98:e7:a1:5e:62:08:9d:86:77:5b:4c:87:02:3a:e0:4b:3a:0e:
42:1b:e4:47:e9:47:f2:5b:b9:61:56:f3:35:50:94:09:e4:5e:
51:2a:4e:d2:0d:98:eb:df:8a:86:0b:97:00:f6:11:a9:2c:fd:
f7:83:70:fc:5a:5e:84:50:33:b4:12:91:69:b3:a1:ca:28:44:
78:e0:c7:9a:89:9e:17:08:ab:69:9f:8d:61:d3:04:d0:00:70:
3e:ee:42:4a:e2:e6:eb:f7:0b:52:19:0e:50:25:fe:5f:c7:7d:
c7:1f:87:b9:ce:15:f0:65:37:ee:9f:dc:01:7c:ec:64:5d:07:
91:2d:50:10:b2:7a:92:17:f2:c5:a0:9d:c9:ce:3b:1f:89:ac:
0e:95:2d:25:cd:90:89:bf:09:79:0b:ce:ac:6d:b6:09:5b:0c:
f6:79:3b:f0:08:17:f5:47:ad:17:46:4c:9f:78:d1:17:74:40:
82:cd:02:f1
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgISAZ30EigTDrf2v/qOvMD1aacMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNTA0MTczODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTRlNTFiNzRmZTc5NDIxODM3ZjA3NmU2ODc0ODJiMDI0OWQwODAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WyxEutbGoxM0UJzuH8NVrHkZ3HA
iAS8DcqrRe13bDmC6NLGA+GdNKoad4yNVnlWohv/rl1eeC9v3mOlhEDrCNKgjB6J
kVhjPgfzFL0PCdRRkY96PXlN+DewQDsftqC9qQf9wnEnltYqvPHoxs+rxo9R5GII
NeEeOMWzqW+ezaCg+tfHCRoqLY7OkBp4j9+qvuUGPE7mvYYsfqG+A9w8FG0oU7jc
XhcKpN5GT7DQfCgK4twHzNCxVD53sZt+rxKSHnVIVijX/YD14n90YxuaYR57sJgk
pdPlejqpf2IkTZW0ewzFBYylevud2KE6ddFpW4glB69KUmtFuh6zg+n6nwIDAQAB
o4ICXzCCAlswHQYDVR0OBBYEFGpOUbdP55Qhg38Hbmh0grAknQgDMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvYWs1UnQwX25sQ0dEZndkdWFIU0NzQ1NkQ0FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcMAwDBAICGuQD
BAICGugwDAMEAAIbYQMEAAIbYjAMAwQAAhtnAwQAAhtoAwQAAht+AwQBAhuYAwQA
AhubMAwDBAACG50DBAUCG4ADBAACG6IDBAACG/MDBACQH5EwDQYJKoZIhvcNAQEL
BQADggEBAAJ8oTW8lDQw9WMN4rOPUIwVuT6IrUWAKQJVGTlUg5iuDd9wcF8aNyfx
/At65JAILgmJj78uPFpD3/mh6h5PHuO4yYwlzkQTf5jnoV5iCJ2Gd1tMhwI64Es6
DkIb5EfpR/JbuWFW8zVQlAnkXlEqTtINmOvfioYLlwD2Eaks/feDcPxaXoRQM7QS
kWmzocooRHjgx5qJnhcIq2mfjWHTBNAAcD7uQkri5uv3C1IZDlAl/l/Hfccfh7nO
FfBlN+6f3AF87GRdB5EtUBCyepIX8sWgncnOOx+JrA6VLSXNkIm/CXkLzqxttglb
DPZ5O/AIF/VHrRdGTJ940Rd0QILNAvE=
-----END CERTIFICATE-----
Generated at Tue May 5 16:48:31 2026 by rpki-client