Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hOETKUpHQOdYMNzntgBtImnYzaQ.roa
File: hOETKUpHQOdYMNzntgBtImnYzaQ.roa (raw, json)
Hash identifier: 0mAdVJL2z0GotMoBKknhAy/JOT4P6JE47gsbBlpHDM4=
Subject key identifier: 84:E1:13:29:4A:47:40:E7:58:30:DC:E7:B6:00:6D:22:69:D8:CD:A4
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DDF694077A81CD6603886BD3214FADCD8
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hOETKUpHQOdYMNzntgBtImnYzaQ.roa
Signing time: Thu 30 Apr 2026 17:21:50 +0000
ROA not before: Thu 30 Apr 2026 17:21:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42831
IP address blocks: 2.26.36.0/22 maxlen: 24
2.26.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:df:69:40:77:a8:1c:d6:60:38:86:bd:32:14:fa:dc:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 30 17:21:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84e113294a4740e75830dce7b6006d2269d8cda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0e:13:b7:61:20:05:d0:fc:15:f8:81:85:b9:
98:7e:f3:f7:8c:36:11:1c:1e:b7:53:69:14:1c:43:
cf:2a:40:ee:73:ee:66:a9:1b:55:ec:61:fd:00:d9:
cb:e3:d7:b3:b9:f2:bf:d9:bf:ef:42:82:3f:2f:e1:
57:ab:ad:06:ad:c4:2a:05:bd:39:bc:7d:56:1e:f6:
23:7f:44:3c:ed:ef:bf:be:e2:ac:83:34:a6:12:a0:
4e:3b:63:3d:de:61:ca:1c:92:d6:b4:1b:87:07:7b:
ca:07:98:9f:6c:34:e2:d4:eb:e0:d5:ef:64:39:cb:
bc:4b:18:f3:00:15:c7:93:b1:db:d5:70:ba:74:32:
08:84:5c:78:63:dc:97:c5:88:28:90:e7:5b:9d:6d:
f9:c3:48:03:2c:c9:91:f7:7f:e2:c3:e4:d3:49:6b:
7c:2c:63:39:c9:59:89:40:81:c4:94:e5:2a:d7:4d:
a5:be:4d:35:67:bd:a7:a5:ad:91:e1:61:75:d3:e3:
30:ac:3d:3e:e3:30:d9:c8:7f:d3:23:10:52:2e:89:
c6:39:ae:64:64:6a:1b:17:e7:ce:35:c6:19:58:e2:
2d:24:5f:b9:fe:40:2e:cf:ef:f3:1a:fc:c1:b4:03:
fc:28:21:14:85:65:ab:b5:6a:a6:15:9e:5f:9d:7e:
fa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E1:13:29:4A:47:40:E7:58:30:DC:E7:B6:00:6D:22:69:D8:CD:A4
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hOETKUpHQOdYMNzntgBtImnYzaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.36.0/22
2.26.44.0/22
Signature Algorithm: sha256WithRSAEncryption
59:d5:d0:5e:ab:3f:d3:0f:5d:bb:3f:b0:55:a0:40:53:16:54:
78:ae:47:8f:85:2b:50:ea:0e:d4:ce:8f:1c:02:b3:e7:45:c9:
3e:25:71:65:01:d8:9d:21:da:c5:75:29:2a:22:d6:df:da:3a:
6d:6f:2e:b0:b5:c8:87:e5:c7:a1:39:08:9d:8c:e5:4c:2c:c1:
53:e2:de:ba:8f:fc:d9:b2:a0:d0:f2:f4:35:1e:3c:93:43:b7:
0b:70:3a:9e:91:b3:02:e9:68:f1:d5:3a:d3:47:8e:03:26:91:
b6:2a:c7:d2:d0:5d:3e:7d:03:cf:76:87:8b:b1:b6:f5:62:0b:
8d:0f:ba:7a:0a:4e:2e:60:6a:a8:47:a3:cd:6c:c8:b9:5e:c9:
61:64:94:55:d5:fc:47:49:a7:ca:c8:fd:02:40:3e:4e:33:d3:
59:cb:79:68:94:86:b2:0c:81:0d:cd:f0:f3:35:c7:fe:aa:cf:
e2:ad:5e:02:2f:0e:b1:5d:d2:75:32:aa:5d:02:8f:de:1f:54:
b5:a8:c2:4a:fb:5a:41:71:90:80:78:d2:4e:14:bd:18:c3:aa:
34:0b:04:61:4c:8f:58:13:46:82:fe:6e:0d:9c:29:56:ab:c0:
25:9b:a8:da:f2:00:d2:c8:d9:c0:b5:7b:2d:e9:1c:6c:36:67:
36:fd:d2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:51:34 2026 by rpki-client