Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/quws2pVXi3TbdBxadet7T6b6dkU.roa
File: quws2pVXi3TbdBxadet7T6b6dkU.roa (raw, json)
Hash identifier: LYLEQ9RLtGvbj+ZnnEGJ91GBqCyY5REcKhAJhmg29yM=
Subject key identifier: AA:EC:2C:DA:95:57:8B:74:DB:74:1C:5A:75:EB:7B:4F:A6:FA:76:45
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E98BFDC903A1F9ACF0B1E9E6500C4511F
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/quws2pVXi3TbdBxadet7T6b6dkU.roa
Signing time: Fri 05 Jun 2026 17:06:11 +0000
ROA not before: Fri 05 Jun 2026 17:06:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206134
IP address blocks: 2.26.16.0/22 maxlen: 24
2.26.28.0/22 maxlen: 24
2.26.116.0/22 maxlen: 24
2.26.248.0/22 maxlen: 24
2.27.16.0/22 maxlen: 24
2.27.120.0/22 maxlen: 24
31.76.16.0/22 maxlen: 24
31.76.44.0/22 maxlen: 24
31.76.96.0/22 maxlen: 24
31.76.224.0/22 maxlen: 24
31.77.132.0/22 maxlen: 24
64.188.115.0/24 maxlen: 24
77.239.127.0/24 maxlen: 24
144.31.98.0/24 maxlen: 24
144.31.154.0/23 maxlen: 24
144.31.180.0/22 maxlen: 24
144.31.188.0/23 maxlen: 24
144.31.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 12:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:98:bf:dc:90:3a:1f:9a:cf:0b:1e:9e:65:00:c4:51:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 5 17:06:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aaec2cda95578b74db741c5a75eb7b4fa6fa7645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:94:65:f9:9d:08:b9:c1:17:bd:94:c8:84:8b:
0a:18:81:1b:b9:64:53:d1:33:1f:ba:e3:99:11:76:
12:cf:67:3f:8f:8e:c0:4d:84:5d:ed:fe:26:cc:36:
5f:f0:53:61:5d:ce:86:8f:e8:48:bd:c6:fd:72:85:
3d:97:d9:6d:17:7c:72:da:e8:04:6a:54:52:62:66:
29:fb:59:cc:4b:67:9d:c8:35:8c:b0:2c:17:bf:a1:
1c:b2:ff:d2:f6:80:81:8e:06:43:80:3e:f6:7b:ee:
6d:bd:7e:2d:bb:95:de:bd:56:02:91:88:3e:de:45:
7d:49:43:dd:17:3b:ea:dd:bd:5a:dc:29:eb:74:2d:
dc:26:68:be:cb:03:4d:00:ba:77:ca:b5:f8:c6:36:
7d:bc:f9:ac:69:84:53:44:fe:2f:53:cd:bf:d5:2a:
0d:44:e8:7e:12:af:95:d3:34:77:dc:a6:f5:b6:df:
bc:f4:fe:92:d2:52:68:73:f3:44:bf:f8:c4:a7:0b:
58:b0:03:3c:0f:24:81:63:cd:ab:37:d3:db:f6:2c:
e3:75:a1:86:47:6a:41:ee:99:67:c9:c9:7b:55:74:
e0:7a:11:de:1a:73:7e:f7:63:44:aa:47:e2:f6:01:
2b:ca:74:f9:17:6b:8f:59:39:ca:ef:2b:e7:ca:04:
46:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EC:2C:DA:95:57:8B:74:DB:74:1C:5A:75:EB:7B:4F:A6:FA:76:45
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/quws2pVXi3TbdBxadet7T6b6dkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.16.0/22
2.26.28.0/22
2.26.116.0/22
2.26.248.0/22
2.27.16.0/22
2.27.120.0/22
31.76.16.0/22
31.76.44.0/22
31.76.96.0/22
31.76.224.0/22
31.77.132.0/22
64.188.115.0/24
77.239.127.0/24
144.31.98.0/24
144.31.154.0/23
144.31.180.0/22
144.31.188.0/23
144.31.251.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:4d:02:fc:dc:91:c1:a4:8a:70:f0:95:c7:f8:43:93:65:33:
c0:60:74:51:61:38:96:07:8b:58:13:56:50:04:29:30:0c:0d:
56:61:5c:43:99:ca:a9:c0:9c:e3:da:e8:c2:98:a5:47:a1:99:
45:c5:f5:bb:43:56:0d:8c:a1:de:a7:76:30:96:17:72:3c:00:
6d:87:7a:dc:b4:ba:05:fa:61:20:ca:6f:e2:9a:d9:6b:64:58:
2b:78:b8:e6:60:33:16:3c:62:f1:d2:d4:66:20:25:95:66:b6:
2c:8d:d8:8b:c5:fe:ed:30:04:4c:f5:11:d4:5c:38:d3:c1:ba:
1a:c0:88:91:5c:e7:6a:69:d7:2d:1e:81:b9:9c:fc:28:7e:e5:
fa:8e:8c:69:45:f4:ee:88:db:ce:08:03:84:e1:7f:a5:4e:af:
57:63:26:67:fa:2e:a9:72:ac:4b:04:03:e2:fa:1c:e2:00:8d:
c8:cb:ab:b7:42:f8:97:15:da:68:ea:1f:61:45:95:0d:71:d8:
ad:e3:29:60:bb:ee:84:f1:a5:da:00:db:e5:6a:bc:63:74:7f:
d5:df:4d:88:f2:db:95:0f:d8:d5:c8:69:af:e7:a6:7f:9e:d1:
f1:68:56:77:45:a9:17:36:72:b1:a0:cd:79:69:3e:8f:b9:2c:
05:07:b9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:07:06 2026 by rpki-client