Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hKNcRcxKSPYapjpY0qyhUYwmuko.roa
File: hKNcRcxKSPYapjpY0qyhUYwmuko.roa (raw, json)
Hash identifier: ZzUgmeitCCxwgvVCVFD29ji1UMXOG7xnm2J4or+ey+I=
Subject key identifier: 84:A3:5C:45:CC:4A:48:F6:1A:A6:3A:58:D2:AC:A1:51:8C:26:BA:4A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F3DA004FEEA747834B514319EBA0B963D
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hKNcRcxKSPYapjpY0qyhUYwmuko.roa
Signing time: Tue 07 Jul 2026 17:28:45 +0000
ROA not before: Tue 07 Jul 2026 17:28:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 2.26.178.0/24 maxlen: 24
2.27.98.0/24 maxlen: 24
2.27.119.0/24 maxlen: 24
2.27.247.0/24 maxlen: 24
2.27.249.0/24 maxlen: 24
31.77.100.0/24 maxlen: 24
31.77.106.0/24 maxlen: 24
31.77.217.0/24 maxlen: 24
193.23.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3d:a0:04:fe:ea:74:78:34:b5:14:31:9e:ba:0b:96:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 7 17:28:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84a35c45cc4a48f61aa63a58d2aca1518c26ba4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0f:6b:22:0f:94:79:35:ba:71:3d:af:e2:17:
26:df:76:e8:10:93:6c:28:aa:e5:54:5d:cf:b2:5f:
11:e5:6a:9b:1a:2b:57:c0:00:d6:8d:9d:c3:99:a3:
6e:51:f3:fe:91:82:03:0d:6f:d0:6a:67:80:04:15:
d3:12:5b:3e:cd:8f:55:c3:cf:cc:01:0a:04:1f:81:
3d:92:df:d6:d5:3a:a8:e1:93:68:53:91:34:26:9a:
c6:e1:ad:a3:f1:8e:e7:19:b7:2c:d6:05:87:26:21:
54:5f:0a:0b:63:4a:93:33:29:e7:e2:5b:2b:9e:a8:
23:a8:68:d2:19:08:47:ad:d2:a7:6b:58:d8:c2:fb:
56:7d:89:e8:f4:57:2f:3d:cf:74:c0:9b:50:ca:d9:
4b:af:ae:ee:fc:8a:34:aa:7d:57:f1:0a:d5:23:60:
66:dc:e1:38:b5:45:24:b5:76:af:f9:00:15:2a:13:
4d:6b:40:aa:29:4b:8a:2b:d6:e4:4e:4e:bc:b6:9d:
4c:ab:0c:54:71:7d:67:70:65:dd:84:e9:2b:66:c6:
9a:20:58:ba:93:56:7a:71:6f:64:d5:bd:4b:ae:9b:
0a:dd:6a:54:6a:6f:cd:97:90:32:03:e2:8f:9e:71:
32:bc:b8:ce:89:6a:49:33:fe:3b:c3:5f:9c:cb:2a:
2d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A3:5C:45:CC:4A:48:F6:1A:A6:3A:58:D2:AC:A1:51:8C:26:BA:4A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hKNcRcxKSPYapjpY0qyhUYwmuko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.178.0/24
2.27.98.0/24
2.27.119.0/24
2.27.247.0/24
2.27.249.0/24
31.77.100.0/24
31.77.106.0/24
31.77.217.0/24
193.23.217.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:02:61:5f:12:ea:cb:2f:70:2b:a3:9d:0f:bc:e8:ab:e8:59:
1b:d0:00:d4:a0:50:79:ba:96:32:55:b5:f1:e1:91:f0:76:42:
6e:6a:3b:7e:d9:9e:d2:86:13:6f:90:a8:aa:eb:4b:a0:5d:21:
2f:74:fb:e3:c7:c0:36:1f:6e:50:ac:f4:d8:ed:51:79:a6:32:
5b:8b:d0:c3:02:bc:7d:31:bf:d8:50:ab:1e:99:f8:15:ce:30:
ca:0a:e6:83:90:ed:17:33:e0:f5:02:b5:75:c7:a3:58:02:4a:
40:f1:3c:ff:e4:55:7e:89:f1:fa:22:53:50:7d:57:2c:87:7d:
87:3f:fc:eb:e8:46:f4:71:b0:e8:1b:60:67:5b:d3:a5:5e:99:
e1:af:e8:48:58:7b:52:a4:82:38:cb:a1:25:7b:c5:e2:b0:70:
e4:af:ed:83:34:4b:75:3e:6f:d3:8d:6c:b0:19:9a:14:dd:b2:
7e:ad:e1:00:35:05:ab:cb:bf:fc:71:8b:11:fc:66:45:61:87:
6c:77:d8:ba:2f:65:bb:23:e0:81:5f:0c:b4:5d:78:c5:a6:06:
f9:ab:20:a1:b2:be:b9:1e:b9:c1:39:c4:e9:e3:de:14:a5:69:
7d:34:bf:0c:41:4c:10:aa:12:b2:3a:f2:04:e4:2b:b3:58:d7:
04:79:27:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 22:10:42 2026 by rpki-client