Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/edi3IjlmSGzIw1_XIsisgqygEMQ.roa
File: edi3IjlmSGzIw1_XIsisgqygEMQ.roa (raw, json)
Hash identifier: 0/Y23mBWRZlu1Tb4dSYD75oR14QtIEoiOXe0XGR0VbE=
Subject key identifier: 79:D8:B7:22:39:66:48:6C:C8:C3:5F:D7:22:C8:AC:82:AC:A0:10:C4
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1317DE68A4EA6142D0F03085FB8169BFE
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/edi3IjlmSGzIw1_XIsisgqygEMQ.roa
Signing time: Mon 12 Oct 2026 19:01:36 +0000
ROA not before: Mon 12 Oct 2026 19:01:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198550
IP address blocks: 2.26.124.0/23 maxlen: 24
2.26.187.0/24 maxlen: 24
2.26.254.0/24 maxlen: 24
2.26.255.0/24 maxlen: 24
2.27.12.0/22 maxlen: 24
31.76.120.0/24 maxlen: 24
31.76.240.0/23 maxlen: 24
144.31.28.0/24 maxlen: 24
144.31.215.0/24 maxlen: 24
150.241.65.0/24 maxlen: 24
150.241.68.0/24 maxlen: 24
150.241.87.0/24 maxlen: 24
150.241.92.0/24 maxlen: 24
191.217.204.0/24 maxlen: 24
191.217.205.0/24 maxlen: 24
191.217.206.0/24 maxlen: 24
191.217.207.0/24 maxlen: 24
193.23.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:7d:e6:8a:4e:a6:14:2d:0f:03:08:5f:b8:16:9b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 12 19:01:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79d8b7223966486cc8c35fd722c8ac82aca010c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4a:51:5f:a4:d5:42:69:a7:99:ff:2a:81:7d:
53:f9:5e:f9:a4:b0:53:3e:26:6d:a3:37:1f:b8:80:
93:9a:fc:1c:c6:75:28:e2:57:6b:84:61:ab:2c:e8:
6b:d4:3c:a0:21:5e:df:96:41:a4:c5:05:93:ff:04:
cd:67:d3:77:4a:52:4c:a9:a3:61:da:9b:4f:08:a2:
a9:e0:00:c4:a7:2a:4b:ab:48:90:22:1e:7b:1f:c8:
9e:79:c5:bf:71:f4:b0:45:04:ea:02:d8:96:66:e1:
0d:a9:66:8d:18:be:71:27:52:a6:23:cc:6f:0a:1f:
b1:6e:3a:a5:24:8e:c9:0e:65:3f:94:09:a3:10:d3:
e8:a3:e9:f4:2a:33:a2:24:d3:64:61:1c:ae:30:db:
6f:17:d7:72:d6:15:cd:1b:b4:e6:aa:6a:d3:d2:64:
82:39:29:54:0a:ca:3e:a2:9f:03:b6:b9:fa:4c:d4:
21:53:70:17:ac:ce:14:e1:a2:9c:cb:5c:32:4e:56:
ff:09:0e:a4:b5:fb:d4:8f:45:13:8f:5c:c1:0a:0e:
c0:cb:dd:f2:94:51:08:4b:8a:4a:cb:b8:b6:00:ae:
c3:48:12:26:81:29:dd:f2:52:5c:da:b1:d1:72:1f:
03:9b:e4:6d:db:ba:c9:7f:70:47:62:54:ad:41:2a:
70:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D8:B7:22:39:66:48:6C:C8:C3:5F:D7:22:C8:AC:82:AC:A0:10:C4
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/edi3IjlmSGzIw1_XIsisgqygEMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.124.0/23
2.26.187.0/24
2.26.254.0/23
2.27.12.0/22
31.76.120.0/24
31.76.240.0/23
144.31.28.0/24
144.31.215.0/24
150.241.65.0/24
150.241.68.0/24
150.241.87.0/24
150.241.92.0/24
191.217.204.0/22
193.23.222.0/24
Signature Algorithm: sha256WithRSAEncryption
27:72:b1:18:18:2b:0c:d3:5c:37:6f:9e:4b:d1:70:e0:d6:9b:
ac:f0:58:3e:e0:74:f7:2c:c3:b4:4c:b7:e1:61:e1:11:ba:d0:
31:e8:90:1f:83:78:c7:4c:cf:ce:36:41:75:12:b1:b6:d9:c3:
8b:31:6e:84:c9:2a:b6:62:f7:4b:c1:ac:32:b7:99:61:7d:2e:
07:0f:3e:da:27:06:c5:a3:9e:6d:22:db:df:99:70:94:07:d2:
a6:a6:06:98:6e:94:b6:97:78:83:fd:e5:01:54:f5:ba:79:52:
bb:f1:6c:f8:b9:44:c1:bb:9e:e4:a6:99:e7:aa:e0:b3:0f:8d:
b0:60:59:0b:f7:2e:ac:88:f2:44:d2:28:62:6a:7d:fd:4b:e8:
fb:8f:e1:da:6c:e2:d9:14:66:90:dc:17:4f:c5:c4:c1:bd:ca:
d2:4e:9a:8d:9a:0f:db:ea:73:ff:ac:f6:0a:02:d2:7f:04:95:
cc:53:06:9a:92:7e:0e:dc:bd:f1:27:cf:67:4a:bd:12:59:68:
c9:87:83:9f:2d:36:31:67:12:2c:93:3b:ff:23:ce:96:57:45:
2a:48:dd:2e:4b:4f:8f:f2:ec:dd:25:ea:bf:99:f9:da:87:df:
c5:5f:48:7a:38:3a:e3:fc:b6:cc:9e:2d:90:5e:9d:28:ec:73:
40:7f:58:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 22:52:56 2026 by rpki-client