Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hFLZ_QffiDY89PqblSIRa2rqxKo.roa
File: hFLZ_QffiDY89PqblSIRa2rqxKo.roa (raw, json)
Hash identifier: RQFvt9xTdknUO2O4PE+EUUDhM9cJHUjHRP5EQfDEwTw=
Subject key identifier: 84:52:D9:FD:07:DF:88:36:3C:F4:FA:9B:95:22:11:6B:6A:EA:C4:AA
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DB6258CA279ED8A432E09805D920324D6
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hFLZ_QffiDY89PqblSIRa2rqxKo.roa
Signing time: Wed 22 Apr 2026 17:03:27 +0000
ROA not before: Wed 22 Apr 2026 17:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 2.26.151.0/24 maxlen: 24
2.26.177.0/24 maxlen: 24
2.26.178.0/24 maxlen: 24
2.26.179.0/24 maxlen: 24
2.26.180.0/24 maxlen: 24
2.26.181.0/24 maxlen: 24
2.26.184.0/24 maxlen: 24
2.26.187.0/24 maxlen: 24
2.27.108.0/24 maxlen: 24
2.27.142.0/23 maxlen: 24
2.27.146.0/23 maxlen: 24
2.27.249.0/24 maxlen: 24
144.31.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b6:25:8c:a2:79:ed:8a:43:2e:09:80:5d:92:03:24:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 22 17:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8452d9fd07df88363cf4fa9b9522116b6aeac4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:16:c4:3d:a9:b9:b0:ce:26:29:82:a5:27:
b4:d4:d7:72:42:84:7a:e2:dd:4b:e4:ad:b9:89:0a:
b8:fd:dd:69:4c:39:a6:8f:95:25:cb:eb:84:af:5d:
c4:17:df:30:3e:e2:87:5e:fa:2b:f6:01:20:0b:e9:
8d:63:41:1f:f4:02:9b:40:2f:9d:69:4a:21:09:b2:
74:ab:7c:ad:e4:4e:4f:c8:97:67:7c:23:ca:d9:53:
12:dd:a0:bc:85:12:b4:6f:58:19:3a:c8:79:07:e3:
d8:26:44:2e:0c:76:a7:74:fa:ce:a4:a4:bb:cb:6b:
2e:82:f0:0e:14:1f:8a:33:8d:61:9b:69:5e:61:4b:
36:52:da:4f:c9:c9:02:49:68:4a:d3:51:27:12:5e:
69:be:8f:25:60:da:bd:7c:ff:aa:b3:be:e0:81:80:
8b:5e:79:90:b3:9d:20:41:2d:c8:2d:fd:c3:94:c5:
2d:42:b6:75:e1:9e:ba:7d:6a:54:b2:9b:67:16:09:
47:7f:92:4c:17:f3:bf:a8:95:f0:11:e7:27:e2:2b:
5a:8b:4e:fb:8e:49:40:67:e9:de:7e:1c:94:fb:7d:
65:52:f7:57:40:ed:03:c8:6f:24:3c:1a:f9:b1:59:
46:02:28:6a:67:f2:98:e1:c5:4e:9b:1a:7d:01:96:
24:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:52:D9:FD:07:DF:88:36:3C:F4:FA:9B:95:22:11:6B:6A:EA:C4:AA
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hFLZ_QffiDY89PqblSIRa2rqxKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.151.0/24
2.26.177.0-2.26.181.255
2.26.184.0/24
2.26.187.0/24
2.27.108.0/24
2.27.142.0/23
2.27.146.0/23
2.27.249.0/24
144.31.43.0/24
Signature Algorithm: sha256WithRSAEncryption
78:92:ab:59:f6:31:47:c3:e6:a3:4b:2d:a2:14:0a:45:33:5e:
e5:6c:23:8a:03:9f:24:cb:00:50:54:75:69:3c:fc:bd:1b:d9:
55:1d:46:8e:83:c0:2b:b2:18:78:dc:12:65:85:42:e9:85:f3:
26:e0:6f:cd:fb:30:55:60:3a:4f:e5:0e:b3:91:30:d2:d8:ab:
08:85:f2:fe:45:de:f4:3f:33:56:b8:1b:8c:70:5f:d3:81:8f:
99:15:36:91:d6:02:46:30:2e:4f:20:8e:cb:08:ed:53:ae:7c:
6c:df:8a:55:23:ee:0e:45:9e:b0:e9:c9:70:e3:a4:5c:0a:7b:
73:7e:10:30:d9:87:97:b4:36:29:9e:7e:59:39:e1:a3:b7:be:
f0:18:5d:38:b3:37:39:ef:c8:5e:f0:3d:70:23:88:5b:f1:ae:
a9:7b:f0:d2:dc:e3:f3:d8:b0:93:00:96:e9:ae:7b:58:ac:fa:
13:31:3e:0d:84:25:a2:4d:9b:a6:08:54:33:e6:cc:12:21:08:
aa:13:0a:90:19:b6:c0:cb:4d:0a:67:a5:5a:a9:4d:a5:86:75:
71:b3:74:92:9f:1f:2b:40:f0:23:6b:ff:93:cb:a3:7f:3e:33:
2c:b6:66:aa:47:9b:ec:3e:ff:7c:1d:6c:58:a5:07:f4:fe:35:
a3:9b:de:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 07:55:12 2026 by rpki-client