Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/cUK45N6pacDWj5tmigxxCdzP4Uw.roa
File: cUK45N6pacDWj5tmigxxCdzP4Uw.roa (raw, json)
Hash identifier: cBZL8aqwkoYVIBlprYnfk1LGbBav79Y4fzqOeKxo9wo=
Subject key identifier: 71:42:B8:E4:DE:A9:69:C0:D6:8F:9B:66:8A:0C:71:09:DC:CF:E1:4C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F29EA8ACE2D590E9879436819B3B910D4
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/cUK45N6pacDWj5tmigxxCdzP4Uw.roa
Signing time: Fri 03 Jul 2026 21:37:44 +0000
ROA not before: Fri 03 Jul 2026 21:37:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212703
IP address blocks: 2.26.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 05:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:ea:8a:ce:2d:59:0e:98:79:43:68:19:b3:b9:10:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 3 21:37:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7142b8e4dea969c0d68f9b668a0c7109dccfe14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0c:ef:82:4e:26:51:4d:5f:a8:36:7c:27:ed:
a3:02:4a:f4:1d:b5:4a:35:74:cb:bf:df:4f:97:0b:
66:27:f9:c8:8f:f0:0f:7b:43:06:91:8f:8f:06:40:
32:31:06:c6:1d:92:97:bf:3f:87:67:c4:56:0a:88:
93:83:f4:e9:af:25:81:a7:8f:b9:f4:86:a0:59:ae:
54:2e:a6:42:dd:17:a1:69:65:41:47:2c:6f:e3:00:
74:07:e7:e3:8c:ef:ad:13:69:01:c9:2e:22:ef:f2:
83:27:9a:e2:de:d3:d5:7d:b0:4a:70:4f:8b:ae:18:
d5:d5:c3:f3:3a:d9:45:ef:63:e8:95:5f:d9:6c:90:
e6:7c:57:2f:5d:d9:d8:75:ba:20:08:13:59:b6:0e:
b7:ac:8c:21:b8:c2:5d:85:68:8e:70:2a:da:dc:76:
31:4a:20:93:8b:84:bb:ef:ad:f7:ea:0a:56:db:8e:
d5:d3:28:2c:95:eb:ab:c7:ed:5b:1c:ec:a4:e3:d4:
f8:ee:0a:ce:6d:70:cb:2e:d5:76:5b:24:a3:3c:2f:
47:90:11:57:de:50:d0:24:ec:65:fb:6f:e8:0d:35:
20:48:5a:a0:8a:3d:d1:6a:bc:7d:07:b9:08:df:9e:
c8:a4:57:ed:bf:76:a0:98:bc:e1:f1:7a:5f:97:dc:
05:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:42:B8:E4:DE:A9:69:C0:D6:8F:9B:66:8A:0C:71:09:DC:CF:E1:4C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/cUK45N6pacDWj5tmigxxCdzP4Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.169.0/24
Signature Algorithm: sha256WithRSAEncryption
30:f3:b4:52:0a:c6:41:22:25:12:6e:07:72:b8:f8:80:47:4f:
df:4b:30:3e:92:3f:60:85:26:b4:af:cd:a2:1f:92:92:fd:cd:
62:61:64:fc:d7:d5:da:82:72:13:9e:0e:e1:3f:fe:eb:d3:80:
57:96:8b:de:12:40:82:c1:aa:51:1b:97:3b:16:98:a8:78:14:
fd:51:eb:ad:49:71:a9:f8:d7:7f:90:99:0b:92:7f:1b:c2:f2:
eb:59:8b:3d:11:17:00:93:6f:b1:cd:33:d7:c2:c0:68:f2:db:
e8:00:22:f9:74:c9:37:6a:aa:b0:0a:05:c0:a5:d8:04:ff:84:
da:74:4e:b4:44:c0:d2:c8:d4:2b:d0:f1:fc:f1:bd:03:9a:14:
66:e2:70:da:27:a8:6b:d6:97:7b:a8:73:7a:80:90:2e:76:e0:
bc:ab:60:7c:4a:df:a7:ac:f9:12:bb:73:0a:7e:7a:d4:f0:a7:
5d:c0:b6:95:df:df:8e:de:cd:6e:ba:22:f8:9d:ac:b9:c2:d3:
61:4b:4e:e0:e3:ec:31:6f:5a:16:0b:70:2c:5b:2d:df:74:85:
66:6d:9a:c8:d0:a3:e0:1e:35:d3:4d:c9:2b:dd:47:91:b4:2c:
f3:e3:c4:39:bb:5f:ba:bf:82:08:6f:24:49:d2:c1:b4:45:a4:
b3:77:de:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 13:40:46 2026 by rpki-client