Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/dr2HNiO1MRk8TL5uCMZcuSA5fBo.roa
File: dr2HNiO1MRk8TL5uCMZcuSA5fBo.roa (raw, json)
Hash identifier: tBmXcdWZAAewh3ZkLds7BNOhDUxdMy87s+NVsuSG40w=
Subject key identifier: 76:BD:87:36:23:B5:31:19:3C:4C:BE:6E:08:C6:5C:B9:20:39:7C:1A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DF09C06C77CA7C1C0109A931771174C29
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/dr2HNiO1MRk8TL5uCMZcuSA5fBo.roa
Signing time: Mon 04 May 2026 01:30:50 +0000
ROA not before: Mon 04 May 2026 01:30:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210980
IP address blocks: 2.26.128.0/24 maxlen: 24
2.26.129.0/24 maxlen: 24
2.26.130.0/24 maxlen: 24
2.26.135.0/24 maxlen: 24
2.26.139.0/24 maxlen: 24
2.27.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f0:9c:06:c7:7c:a7:c1:c0:10:9a:93:17:71:17:4c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 4 01:30:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76bd873623b531193c4cbe6e08c65cb920397c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:42:d8:6d:5c:07:a1:5c:02:31:ca:16:97:bb:
99:15:da:82:b3:90:66:5e:b1:f5:72:fa:6b:e1:a4:
60:91:0e:23:50:09:2d:83:ef:d5:02:fe:cc:35:6e:
d2:0e:98:a5:56:a6:fe:92:35:20:a8:be:06:a9:ac:
7b:ca:04:3b:05:33:8f:4f:27:45:13:8f:11:29:64:
1a:82:e9:fc:0b:df:4b:4c:46:0f:fb:d4:a5:c6:95:
35:0a:60:e6:ab:bd:9b:5b:5b:ba:20:b9:9e:2a:3f:
a0:57:3a:c4:85:8c:55:df:85:6f:3c:97:2c:bc:a0:
4c:23:7d:2c:11:47:2e:19:b0:4b:af:f0:d2:23:dd:
93:a7:48:55:b7:03:1b:4c:6c:e8:8f:f2:21:3c:23:
df:aa:79:b9:ef:c3:cd:61:cb:fb:12:27:62:fc:9e:
ec:a4:43:d9:f5:e8:43:cc:70:b9:03:05:49:36:a7:
fb:bc:5c:07:17:aa:1b:74:85:bc:f6:05:e9:ac:76:
f1:ad:e0:52:8c:6f:8b:7d:b6:da:45:e9:6e:f9:f5:
a1:4a:b0:ad:cb:ff:39:90:19:bc:a2:5b:2d:5e:93:
6e:8e:0b:8b:6f:da:1b:df:a4:c6:78:54:b9:82:7a:
6c:4c:d6:e3:b1:1d:28:4a:70:d4:93:34:a6:f9:96:
2c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BD:87:36:23:B5:31:19:3C:4C:BE:6E:08:C6:5C:B9:20:39:7C:1A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/dr2HNiO1MRk8TL5uCMZcuSA5fBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.128.0-2.26.130.255
2.26.135.0/24
2.26.139.0/24
2.27.94.0/24
Signature Algorithm: sha256WithRSAEncryption
09:cc:d6:5d:59:75:b7:07:ec:18:6b:03:96:ed:10:8a:e1:19:
71:6b:72:57:98:e2:5d:e4:92:84:f0:49:66:7e:ed:ae:66:7a:
50:71:e3:e0:34:25:b6:83:7d:59:bc:6e:c2:c3:e7:73:f7:c7:
7c:6b:8a:2c:f9:6b:67:bd:f0:ed:5b:30:e5:c5:21:d9:81:20:
4b:d6:16:d5:13:52:ff:9a:9e:de:59:24:c6:4a:d9:bf:a6:91:
bc:ec:16:2d:3b:87:c1:1d:42:e8:73:68:23:5c:f1:6f:46:0c:
f8:23:ad:bd:01:63:7b:06:31:52:de:e6:63:65:f7:4d:46:b4:
24:ee:f2:20:a1:89:6f:e5:11:e5:97:5a:0c:7b:46:53:7f:6b:
3a:cb:73:12:a0:d7:e2:30:5a:8a:0f:34:a8:e5:38:93:79:4c:
4b:4a:98:0e:90:1e:00:6b:f2:28:cb:99:eb:fd:61:00:87:fa:
9d:11:d2:7d:9c:77:10:53:41:b1:3e:70:cb:7e:bf:f9:e1:d9:
1a:14:c5:c3:37:e5:a2:a2:53:4e:a4:42:b8:08:5f:04:8c:0d:
07:95:8b:f3:1b:d3:60:64:21:f6:e4:ab:31:e4:40:5a:f7:61:
fc:4e:fb:fc:26:74:59:16:2b:dd:c4:3d:b3:eb:99:19:97:4c:
dc:8e:99:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:49:30 2026 by rpki-client