Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jX_YtITdSMfWjlZs8EylH164Lhs.roa
File: jX_YtITdSMfWjlZs8EylH164Lhs.roa (raw, json)
Hash identifier: TXeNvH07WFNSy6KiTp+d9mqQKArd5xGB01RCjIOZYXo=
Subject key identifier: 8D:7F:D8:B4:84:DD:48:C7:D6:8E:56:6C:F0:4C:A5:1F:5E:B8:2E:1B
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F7B2ADF63E3BFC4EC5F292CC3E250DF04
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jX_YtITdSMfWjlZs8EylH164Lhs.roa
Signing time: Sun 19 Jul 2026 16:17:15 +0000
ROA not before: Sun 19 Jul 2026 16:17:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8796
IP address blocks: 2.26.200.0/21 maxlen: 24
2.27.146.0/23 maxlen: 24
2.27.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7b:2a:df:63:e3:bf:c4:ec:5f:29:2c:c3:e2:50:df:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 19 16:17:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d7fd8b484dd48c7d68e566cf04ca51f5eb82e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5e:c2:1a:f6:19:5e:10:8b:7d:2d:f6:64:bf:
7b:4e:dc:0f:d1:32:e2:01:c3:45:b3:76:66:51:8d:
23:26:fc:db:eb:e3:ef:1c:a1:4c:a3:72:5b:b0:26:
08:8c:79:e3:d1:ef:17:d4:36:fa:7a:c7:31:29:07:
82:95:9f:70:5d:4d:27:87:dc:1c:4e:51:99:08:ac:
cc:95:98:77:6c:78:12:bf:e3:54:2c:74:7a:67:64:
59:a7:56:c4:2e:dc:e2:e3:19:65:60:64:03:88:17:
10:e1:e8:58:5b:93:f1:f9:5d:04:4d:96:81:0e:df:
44:3e:03:74:bb:4b:84:f3:57:1c:4d:70:e1:0b:1e:
7e:25:32:25:1e:17:0e:fe:1d:02:7d:b4:ca:c2:48:
fe:9a:ce:d9:54:46:a9:37:ab:ba:a3:e2:c9:63:7d:
00:3a:ee:6e:4a:54:e1:11:47:9b:64:3f:77:2c:f4:
75:45:8a:f1:18:77:35:c7:d1:98:d1:b8:15:73:b0:
3a:24:73:c6:5f:d2:db:eb:e2:5f:ac:cd:62:81:ce:
07:05:05:98:2a:a6:5f:e2:25:06:c1:87:7e:c1:22:
81:66:58:f8:98:99:9e:b0:ab:82:20:d8:82:74:42:
a9:94:8f:12:7e:cd:8f:71:21:00:53:cd:d9:64:81:
6f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7F:D8:B4:84:DD:48:C7:D6:8E:56:6C:F0:4C:A5:1F:5E:B8:2E:1B
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jX_YtITdSMfWjlZs8EylH164Lhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.200.0/21
2.27.146.0/23
2.27.212.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:72:f9:fb:a9:ff:70:4a:a3:2d:03:e3:a7:25:7b:05:99:03:
3b:21:43:0e:b1:db:9e:88:a3:02:c5:d9:1f:d3:44:3e:72:f7:
fc:53:47:b7:dd:4f:47:6c:5a:45:f5:c6:ca:ff:89:3e:3d:74:
ac:96:5e:6d:88:6a:a8:ed:45:94:f1:d6:c9:11:df:94:bc:7b:
b2:47:ff:d9:9f:ab:3b:8c:80:b2:5f:27:d0:56:25:b0:73:78:
d2:aa:08:8a:92:24:a6:41:97:e9:01:5d:7d:ef:2c:c5:8b:51:
e2:55:44:56:c2:7c:cb:0a:61:f3:5c:ad:89:e0:5f:89:64:2e:
23:78:d1:f1:23:61:23:d2:6d:87:7b:a5:cf:b2:51:18:6f:ad:
a3:54:87:05:8d:4c:ef:c4:63:f4:05:62:a7:53:d8:27:65:f7:
eb:bf:ca:65:40:1d:eb:c3:86:07:61:bd:2a:5f:26:97:52:d9:
01:34:30:81:9b:26:5e:fc:8f:0d:e1:8c:b1:5e:27:2e:f3:32:
f5:e7:57:47:bd:f8:da:49:0c:dc:5e:49:e6:4d:3c:0f:de:78:
48:e2:21:34:c5:81:18:b0:7c:d2:28:23:74:c7:b9:9c:0f:b0:
9c:f3:c0:e5:7a:ad:53:68:2b:ef:cc:c8:e8:d3:4b:57:25:2c:
eb:0c:9d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:06:29 2026 by rpki-client