Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/grR9Euf3nqCXVU2J6GtQ3yliRSM.roa
File: grR9Euf3nqCXVU2J6GtQ3yliRSM.roa (raw, json)
Hash identifier: AlaT3TGv5fFpy4cYNybjMlH1JJBPuWeSvIbahQWb6hc=
Subject key identifier: 82:B4:7D:12:E7:F7:9E:A0:97:55:4D:89:E8:6B:50:DF:29:62:45:23
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0A0CAA0C158036093CA96994BB1F68E12
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/grR9Euf3nqCXVU2J6GtQ3yliRSM.roa
Signing time: Mon 14 Sep 2026 16:40:28 +0000
ROA not before: Mon 14 Sep 2026 16:40:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216475
IP address blocks: 2.26.138.0/24 maxlen: 24
31.77.32.0/23 maxlen: 24
31.77.40.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:ca:a0:c1:58:03:60:93:ca:96:99:4b:b1:f6:8e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 14 16:40:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82b47d12e7f79ea097554d89e86b50df29624523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bc:21:b1:37:58:8a:27:20:01:5c:9e:44:92:
56:4e:bd:3e:bd:b3:fc:9e:44:66:be:76:5d:0b:4c:
fc:7f:16:38:24:ae:5a:fb:03:f6:32:a7:d6:d7:e3:
fb:8d:e0:86:0a:c2:57:a9:df:fb:ae:a3:82:10:c9:
95:bb:73:2a:25:2f:dd:99:d2:48:8e:9e:18:4f:62:
9f:a5:bd:ff:3f:49:d6:05:13:22:ce:83:86:d3:73:
4c:cd:3e:68:a4:d8:49:24:66:94:24:01:41:24:a3:
e3:f9:82:55:25:ba:e1:5e:4a:11:20:87:16:68:8b:
d4:ba:1b:50:c3:81:47:18:56:c0:f9:b0:b4:d5:91:
d8:30:bf:42:22:d1:72:27:73:38:4f:9f:0b:5c:5c:
21:4f:69:10:4f:71:2f:4f:49:35:cc:d3:a2:0b:e1:
1d:e8:40:2e:30:7d:3d:68:31:2a:89:e1:8b:0b:b8:
e2:6d:6e:de:50:63:10:46:d4:c7:69:79:b6:cd:cc:
bf:68:78:83:9f:c4:d5:7d:d1:ab:5e:86:a1:59:f9:
cd:8b:51:b4:13:a3:7b:5d:43:3a:34:f3:8c:b3:52:
4b:39:1e:a9:bd:fc:19:05:9e:48:09:1b:e5:00:6d:
be:ce:38:f0:cf:ca:96:32:a0:c9:e1:a7:54:a1:2d:
d9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B4:7D:12:E7:F7:9E:A0:97:55:4D:89:E8:6B:50:DF:29:62:45:23
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/grR9Euf3nqCXVU2J6GtQ3yliRSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.138.0/24
31.77.32.0/23
31.77.40.0/23
Signature Algorithm: sha256WithRSAEncryption
90:fd:13:4a:98:7d:b7:44:dc:54:5e:a0:11:4f:de:ab:b2:fd:
43:ab:bf:69:81:67:83:6b:b2:f9:4b:6f:74:c4:ea:1f:26:32:
e0:94:0e:fd:2d:74:9a:4e:7b:e1:bb:bd:77:53:9c:29:7c:19:
61:e5:76:8e:e2:c1:e0:7a:97:8f:06:08:32:6b:b8:df:66:b6:
da:b1:8c:55:4a:bd:58:91:58:00:82:3e:c3:c6:68:9c:c7:13:
ac:58:7b:07:21:9c:16:e3:6c:77:1c:b5:1d:41:9e:df:8a:66:
03:99:0b:f9:62:2f:e5:28:30:3b:2f:f7:4e:80:6a:96:62:d7:
89:a8:f8:e9:36:44:d1:34:08:f3:01:46:a1:b2:dc:1a:37:85:
c1:95:1e:a1:e5:9d:a6:68:11:2f:97:57:c6:40:a4:11:3e:c9:
41:d4:23:5f:bd:95:ae:84:1c:1c:91:e4:66:84:5a:5b:f2:58:
b1:b2:aa:23:ed:a0:56:85:1d:32:18:68:86:39:52:6c:28:0d:
1f:11:b0:c7:f3:a9:e1:49:7e:5e:c1:47:44:fd:e1:ab:57:b2:
bc:8d:b9:77:46:92:b2:e3:c9:e5:a8:96:3a:ba:e1:df:c2:d5:
22:93:62:54:b1:40:c7:2d:47:3f:44:b3:29:7b:ad:51:83:2b:
ff:6a:bc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:27:15 2026 by rpki-client