Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/f8eI_f7FSqp0nvFpPOo13HZDqJk.roa
File: f8eI_f7FSqp0nvFpPOo13HZDqJk.roa (raw, json)
Hash identifier: kfggxLDs+Vrkd+g1AZzylrmfN7hW2OSA0+H10CNEZ+8=
Subject key identifier: 7F:C7:88:FD:FE:C5:4A:AA:74:9E:F1:69:3C:EA:35:DC:76:43:A8:99
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019EF0AC7D32F8397180E04D7639E19B0DFC
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/f8eI_f7FSqp0nvFpPOo13HZDqJk.roa
Signing time: Mon 22 Jun 2026 18:51:36 +0000
ROA not before: Mon 22 Jun 2026 18:51:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6939
IP address blocks: 2.26.32.0/22 maxlen: 24
31.76.128.0/22 maxlen: 24
31.76.172.0/22 maxlen: 24
64.188.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f0:ac:7d:32:f8:39:71:80:e0:4d:76:39:e1:9b:0d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 22 18:51:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7fc788fdfec54aaa749ef1693cea35dc7643a899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d2:5e:a9:51:c9:fa:fa:89:0f:a8:ab:12:6a:
98:8b:8e:f5:85:19:ec:e5:1a:7a:e2:f2:d0:f0:ff:
d5:24:8f:f0:da:79:4d:91:7b:6b:b5:d5:2e:d1:94:
8c:2e:22:36:31:bc:d4:de:51:6d:c2:87:fe:b8:9c:
fb:38:55:11:f6:ca:38:a3:4a:de:a0:38:ff:c3:0f:
49:f1:a0:45:c3:eb:36:55:02:02:24:b0:98:fd:6f:
b9:35:73:1c:49:82:18:e6:64:95:19:05:1f:f7:20:
d6:03:7e:db:87:00:6f:04:96:c4:6b:b8:9a:04:0c:
16:42:ae:a1:58:09:28:b1:44:2d:e1:73:58:65:ae:
99:f6:eb:af:9f:48:80:d8:31:d1:62:69:dd:91:44:
4b:ce:14:22:e7:e1:b1:fb:8e:92:ca:ab:c0:09:0b:
41:de:d6:ba:85:33:92:af:72:8b:57:75:f2:d0:09:
e6:3a:e4:56:66:38:64:e2:d7:07:cc:4e:c8:f5:55:
73:eb:f0:b1:56:ca:12:de:52:15:63:71:f1:ac:ba:
f6:0f:49:53:b7:72:15:64:7f:9e:0a:45:39:0d:3d:
7f:fa:75:b6:98:df:f8:74:b4:53:25:04:59:74:9a:
43:0d:fc:e1:b3:24:d2:3b:c8:2c:28:33:69:74:9f:
a5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C7:88:FD:FE:C5:4A:AA:74:9E:F1:69:3C:EA:35:DC:76:43:A8:99
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/f8eI_f7FSqp0nvFpPOo13HZDqJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.32.0/22
31.76.128.0/22
31.76.172.0/22
64.188.108.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:f6:de:dc:ce:47:29:dd:a5:67:c3:06:2b:fa:ad:ac:55:a5:
ad:1c:c2:60:b6:0b:b4:9d:63:88:47:9a:4a:de:d3:a3:df:c5:
ff:95:02:87:31:a9:76:21:17:5c:1f:ac:87:26:ab:37:9c:9c:
97:9a:02:ac:86:72:3d:89:0f:ea:8b:2d:6f:c1:0e:48:c6:fb:
54:ca:73:10:8c:85:e8:41:24:dc:2d:45:c2:df:aa:0f:da:73:
e8:ed:79:1d:2e:2e:c1:1e:54:79:92:c5:7b:cc:8d:25:71:f6:
bc:fc:27:3f:88:de:87:25:64:18:62:bc:a4:fc:41:51:02:09:
c9:45:1a:94:40:63:f7:ed:ad:55:b1:34:75:c3:48:53:e6:69:
58:89:f1:92:d0:08:23:6b:9c:07:25:35:55:b2:12:bb:ca:25:
a5:2c:c3:98:59:19:32:80:79:8e:bd:2e:48:7b:64:29:ca:85:
57:75:5b:78:c5:eb:37:b6:97:14:5b:83:37:ef:fc:43:ee:d6:
ec:0d:92:a5:65:68:e5:e1:12:09:49:d0:c8:d5:c7:e5:12:24:
88:37:49:4d:49:e9:9a:f8:98:71:02:3e:a4:76:aa:ea:0d:37:
c2:0a:99:9f:e4:06:75:ec:d1:a4:fb:0e:80:41:f1:4d:78:dd:
d6:ff:20:b5
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ7wrH0y+DlxgOBNdjnhmw38MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNjIyMTg1MTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmM3ODhmZGZlYzU0YWFhNzQ5ZWYxNjkzY2VhMzVkYzc2NDNhODk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNJeqVHJ+vqJD6irEmqYi471hRns
5Rp64vLQ8P/VJI/w2nlNkXtrtdUu0ZSMLiI2MbzU3lFtwof+uJz7OFUR9so4o0re
oDj/ww9J8aBFw+s2VQICJLCY/W+5NXMcSYIY5mSVGQUf9yDWA37bhwBvBJbEa7ia
BAwWQq6hWAkosUQt4XNYZa6Z9uuvn0iA2DHRYmndkURLzhQi5+Gx+46SyqvACQtB
3ta6hTOSr3KLV3Xy0AnmOuRWZjhk4tcHzE7I9VVz6/CxVsoS3lIVY3HxrLr2D0lT
t3IVZH+eCkU5DT1/+nW2mN/4dLRTJQRZdJpDDfzhsyTSO8gsKDNpdJ+l1wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFH/HiP3+xUqqdJ7xaTzqNdx2Q6iZMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvZjhlSV9mN0ZTcXAwbnZGcFBPbzEzSFpEcUprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCAhogAwQC
H0yAAwQCH0ysAwQCQLxsMA0GCSqGSIb3DQEBCwUAA4IBAQBr9t7czkcp3aVnwwYr
+q2sVaWtHMJgtgu0nWOIR5pK3tOj38X/lQKHMal2IRdcH6yHJqs3nJyXmgKshnI9
iQ/qiy1vwQ5IxvtUynMQjIXoQSTcLUXC36oP2nPo7XkdLi7BHlR5ksV7zI0lcfa8
/Cc/iN6HJWQYYryk/EFRAgnJRRqUQGP37a1VsTR1w0hT5mlYifGS0Agja5wHJTVV
shK7yiWlLMOYWRkygHmOvS5Ie2QpyoVXdVt4xes3tpcUW4M37/xD7tbsDZKlZWjl
4RIJSdDI1cflEiSIN0lNSema+JhxAj6kdqrqDTfCCpmf5AZ17NGk+w6AQfFNeN3W
/yC1
-----END CERTIFICATE-----
Generated at Thu Jul 16 06:22:30 2026 by rpki-client