Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/mXj1dhxutRCX6y1ntis3zWX3kbc.roa
File: mXj1dhxutRCX6y1ntis3zWX3kbc.roa (raw, json)
Hash identifier: jrINFTIDxbK3D2928J6t4glyUtuCshwsXYFjc1XtLqo=
Subject key identifier: 99:78:F5:76:1C:6E:B5:10:97:EB:2D:67:B6:2B:37:CD:65:F7:91:B7
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FB3E1F15B2E3ECDFF5B20477AA28D97ED
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/mXj1dhxutRCX6y1ntis3zWX3kbc.roa
Signing time: Thu 30 Jul 2026 16:35:56 +0000
ROA not before: Thu 30 Jul 2026 16:35:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219427
IP address blocks: 2.26.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:e1:f1:5b:2e:3e:cd:ff:5b:20:47:7a:a2:8d:97:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 30 16:35:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9978f5761c6eb51097eb2d67b62b37cd65f791b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a2:70:7d:e7:40:df:da:b5:1f:09:aa:3b:6f:
36:eb:1d:85:fa:3a:d4:15:15:49:1e:c8:3a:6c:49:
ec:69:57:ce:90:eb:26:02:ad:71:0e:c3:05:b5:91:
29:1b:5b:42:96:2d:44:f3:b4:8f:be:88:81:0f:54:
cb:88:43:0e:dd:31:9e:6a:8c:0d:55:99:bf:fe:bd:
b8:b2:91:28:1f:67:06:4f:6b:fe:9f:6f:aa:b3:c9:
6d:9d:92:32:70:c0:d0:a1:9f:d6:2e:13:6f:8e:9c:
33:52:d9:47:f6:10:57:fe:c0:6c:d9:0a:fa:b3:b5:
be:87:05:d2:f2:5c:61:dc:f2:8a:55:8b:9a:38:b0:
ba:cb:3c:fa:b7:ad:53:1b:86:19:96:25:ef:2d:02:
f8:52:42:79:77:14:3b:49:be:f4:40:93:25:fd:33:
61:9a:8a:e4:f9:81:fd:56:90:75:46:b3:d2:73:0b:
4d:a1:c9:13:79:64:f0:f9:24:a7:0d:25:a3:b9:8f:
3b:2b:cd:40:1b:3c:7f:71:28:78:c0:c7:76:b2:10:
61:b0:31:77:0c:82:e4:89:fb:e7:18:2e:a6:fb:11:
e1:a7:50:29:c1:f2:a6:ea:50:1c:86:7a:d9:34:c2:
63:1f:0a:aa:9a:4b:cd:1d:28:e5:d9:69:9d:fe:6d:
be:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:78:F5:76:1C:6E:B5:10:97:EB:2D:67:B6:2B:37:CD:65:F7:91:B7
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/mXj1dhxutRCX6y1ntis3zWX3kbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.165.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:5f:f2:ab:c2:b0:b2:99:6f:50:d4:c6:f3:4a:96:b5:be:84:
64:8f:9f:15:cf:02:82:26:19:4d:ac:2f:c0:68:8b:da:2f:4a:
d5:97:1a:c9:0e:1d:17:a3:cf:51:3a:ec:91:4f:0f:b3:ac:39:
2b:8f:4b:47:4a:cf:04:a2:bf:a9:16:c8:49:60:36:64:1b:68:
21:42:ea:f1:2e:61:7b:21:fa:14:89:7b:33:e7:0d:b2:70:d8:
16:e2:0a:f0:28:57:dd:6e:46:8b:a6:15:33:e0:85:b3:8d:d1:
ec:d6:43:27:d0:33:83:31:eb:82:06:b7:c0:ee:d6:ee:38:aa:
15:f8:a0:ec:f2:f5:29:d1:81:65:7c:27:b1:fc:05:df:57:14:
e2:ae:08:84:d5:c2:bd:bb:9f:67:11:8c:87:0c:0c:02:d3:c2:
8f:7b:2d:da:64:7a:31:d5:4b:54:be:70:c6:7c:00:a9:d8:a1:
c8:00:25:4e:cb:e7:a6:dc:a5:77:7a:97:94:a2:2d:84:a5:6e:
4d:75:b1:c4:94:82:75:89:72:76:d2:88:90:4c:40:d2:ee:e8:
ad:3a:97:42:a4:20:7e:83:bc:16:db:47:39:f3:6d:57:a9:3d:
59:70:44:03:7e:d3:f0:00:42:09:c7:de:02:6e:93:b6:47:d0:
9a:6c:7e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:51:32 2026 by rpki-client