Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/pqKxrg2YZDe2YqqEYaBCEJdbdEM.roa
File: pqKxrg2YZDe2YqqEYaBCEJdbdEM.roa (raw, json)
Hash identifier: LFXo8E5KXwsdtVeHUtRqpJGXJyBvGlULSoM7Y654uEA=
Subject key identifier: A6:A2:B1:AE:0D:98:64:37:B6:62:AA:84:61:A0:42:10:97:5B:74:43
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DC5E3B3EB10E2FCC1B0DB3B754C8C7751
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/pqKxrg2YZDe2YqqEYaBCEJdbdEM.roa
Signing time: Sat 25 Apr 2026 18:25:27 +0000
ROA not before: Sat 25 Apr 2026 18:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200027
IP address blocks: 2.26.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c5:e3:b3:eb:10:e2:fc:c1:b0:db:3b:75:4c:8c:77:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 25 18:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6a2b1ae0d986437b662aa8461a04210975b7443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:17:c9:64:43:e9:65:bf:44:90:3c:ff:f5:ed:
94:9d:61:e9:b6:43:f8:a0:af:05:ad:7c:9b:fd:30:
9f:43:03:49:f6:24:97:42:91:34:42:ba:11:76:a5:
e5:51:74:e0:27:55:3c:5a:e1:bf:05:8b:7c:5e:64:
3c:db:51:07:fc:74:67:74:99:b2:01:1e:58:be:4a:
a2:87:10:d8:dc:90:f3:76:90:6d:28:98:31:77:0c:
6e:12:58:6d:86:43:12:e0:82:a7:0d:51:02:6b:37:
06:d0:1f:38:17:f1:99:04:83:0f:bc:09:e4:99:42:
67:89:ba:1c:c9:4d:ad:40:5b:5a:a7:9d:eb:41:e6:
81:f0:d9:ea:89:3e:f1:78:d0:33:b7:60:94:b8:8f:
3b:5d:d5:c0:8c:82:b5:c0:4c:ff:c5:2c:c4:3d:aa:
ab:ee:a3:3a:85:d2:85:ae:9a:05:65:2b:62:16:1f:
67:75:d0:e0:be:b9:bb:82:68:d3:45:c6:6f:32:e3:
b6:ba:8a:ac:1a:51:33:81:87:3d:94:26:b8:42:55:
9f:39:c1:4d:95:fe:03:4a:31:33:ba:a9:90:56:59:
b7:b5:fa:60:10:f0:9c:9c:e1:74:02:d0:be:37:1e:
6b:99:1e:05:d9:b4:56:fb:8d:c5:60:c1:cc:e7:35:
1c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A2:B1:AE:0D:98:64:37:B6:62:AA:84:61:A0:42:10:97:5B:74:43
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/pqKxrg2YZDe2YqqEYaBCEJdbdEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.183.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:05:a8:b9:1c:eb:82:8f:5b:f8:2c:c2:0f:05:9a:56:38:a9:
56:f6:24:88:ac:22:f1:36:9e:f3:87:05:77:d0:05:bd:05:33:
1d:c9:3a:5a:6d:54:b2:e5:3e:2f:a7:50:2d:2f:b9:7f:7a:db:
aa:b0:70:4e:99:31:83:1b:6a:8c:5b:2f:41:26:7f:42:ff:fc:
07:a8:fb:ff:4f:0e:af:50:ee:db:88:44:0e:8f:68:66:09:58:
8b:f9:12:5b:b0:16:af:13:8b:5a:35:b6:66:b1:76:d5:b4:62:
c7:c5:46:a9:38:b6:ad:69:ec:ea:60:41:cd:f7:90:b5:3e:46:
d9:62:c9:a4:7d:d2:3b:3e:ca:90:10:72:97:f7:90:5a:10:d7:
7a:6c:7c:f5:ce:b0:08:2d:df:dd:c4:5a:33:44:c0:40:53:fb:
ce:56:c4:aa:38:af:47:0c:6e:a6:ae:c3:09:1d:aa:76:71:8f:
f4:4d:46:5c:54:48:7e:4f:f7:d1:76:7a:08:b0:12:9c:9a:dd:
c4:8a:01:88:69:3b:fe:7a:0d:a1:66:74:75:94:1d:74:1b:6d:
76:75:5f:4a:06:ba:dc:76:c5:cc:d9:67:54:85:4f:49:3b:e8:
54:a6:79:4c:95:96:3b:18:d6:20:bc:90:92:7c:de:e3:e5:b2:
88:70:64:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:46:44 2026 by rpki-client