Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/qxW5IeCNDLCugaLw5lKJKLm-M9Y.roa
File: qxW5IeCNDLCugaLw5lKJKLm-M9Y.roa (raw, json)
Hash identifier: t7o41/FM8Fk+16vKcaxfsCgtZ8Gu2ZhCwrQYhLrjyFE=
Subject key identifier: AB:15:B9:21:E0:8D:0C:B0:AE:81:A2:F0:E6:52:89:28:B9:BE:33:D6
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DC0D351A93B13EFF1C3578300C12F90B2
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/qxW5IeCNDLCugaLw5lKJKLm-M9Y.roa
Signing time: Fri 24 Apr 2026 18:49:27 +0000
ROA not before: Fri 24 Apr 2026 18:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199180
IP address blocks: 2.26.12.0/24 maxlen: 24
2.26.13.0/24 maxlen: 24
2.26.14.0/24 maxlen: 24
2.26.15.0/24 maxlen: 24
2.27.6.0/24 maxlen: 24
31.76.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c0:d3:51:a9:3b:13:ef:f1:c3:57:83:00:c1:2f:90:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 24 18:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab15b921e08d0cb0ae81a2f0e6528928b9be33d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:51:67:53:5e:ef:c6:c9:78:ed:92:df:2e:29:
85:3c:30:1f:9b:50:56:d0:a3:8d:3c:08:bb:ff:c3:
5f:5a:cc:38:52:7e:d5:30:c1:de:b6:52:cb:4a:47:
b6:b5:cc:1f:a2:02:8f:04:20:8c:23:7c:c4:81:77:
fb:8d:e7:d3:40:e9:e4:fb:d1:a1:b9:33:72:b4:29:
8e:a1:cf:3b:4b:01:e4:68:04:67:c9:66:eb:bc:81:
d8:24:de:a3:d8:0d:54:74:c5:ea:90:e6:fa:1f:36:
6f:cb:04:da:47:93:09:12:e1:b5:83:06:c8:08:c0:
91:0a:06:fe:60:db:68:ba:2b:74:28:77:2c:65:f8:
89:40:a0:83:ae:7c:4f:2c:6d:df:59:67:e1:c0:4b:
3a:1d:68:05:74:4d:c7:d3:77:39:00:34:64:e6:42:
11:f6:ef:90:6c:22:53:f7:63:e4:ee:ac:9f:99:4e:
a4:c2:58:94:cc:78:15:6b:42:81:c0:a0:14:19:f2:
74:42:0a:a2:e6:7e:36:1b:f6:8c:a7:e6:e2:8e:f9:
b1:dc:4e:c4:31:fb:1e:3a:ad:e6:4a:da:cf:df:db:
e6:6d:6a:af:b1:99:69:1e:1d:c7:46:02:26:19:8b:
55:ee:74:c3:bd:0c:68:8f:42:63:31:01:8c:70:32:
36:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:15:B9:21:E0:8D:0C:B0:AE:81:A2:F0:E6:52:89:28:B9:BE:33:D6
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/qxW5IeCNDLCugaLw5lKJKLm-M9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.12.0/22
2.27.6.0/24
31.76.254.0/24
Signature Algorithm: sha256WithRSAEncryption
45:48:55:dc:6e:50:11:83:fd:4d:59:65:9a:1f:87:34:67:81:
fc:7b:e7:1d:db:d5:f3:99:4a:07:eb:65:a8:de:72:ca:b6:d8:
b8:d9:d8:b6:a7:3d:58:a1:3e:e9:ee:93:fc:71:9a:1c:9f:c2:
3e:3b:20:48:9f:fd:c4:45:d9:35:70:b7:a1:89:5e:50:51:7c:
73:55:1c:7a:aa:da:44:5a:85:f8:ca:f8:e4:7d:62:ee:47:97:
58:c6:fb:14:26:45:68:85:c9:2c:0e:23:e1:72:f0:72:ba:57:
68:b4:21:af:1f:c7:2b:0e:04:fc:01:fb:03:2e:65:07:3a:ee:
71:52:7d:81:67:a3:3f:c5:4e:49:d5:9c:98:c8:1b:e6:c9:65:
18:34:8b:27:e9:39:0b:ff:51:3a:ab:06:06:8b:57:54:34:ba:
a3:bd:56:28:90:27:97:07:1f:a2:da:29:06:6a:99:8e:3d:46:
a8:62:55:d6:cf:3c:b8:ee:32:38:4f:a1:0b:69:65:fe:f3:2f:
47:7d:25:86:e7:58:44:88:7a:1d:0d:b5:69:f4:98:f8:9b:8c:
05:3a:e9:b7:d3:50:e4:d1:84:de:e4:04:18:83:8a:ed:1c:29:
a7:06:a0:0d:7f:11:e2:03:80:69:10:37:34:e7:a3:d3:12:cd:
6b:ef:b0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:50:49 2026 by rpki-client