Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rG1iNtKh18IwaiPnH6a3wA163jo.roa
File: rG1iNtKh18IwaiPnH6a3wA163jo.roa (raw, json)
Hash identifier: D4G7MgyJQozq2NMTLBe3yjXUmJBW20hiJkC48shnFMo=
Subject key identifier: AC:6D:62:36:D2:A1:D7:C2:30:6A:23:E7:1F:A6:B7:C0:0D:7A:DE:3A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DCFE819199BDD8D3467337D37036F5F32
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rG1iNtKh18IwaiPnH6a3wA163jo.roa
Signing time: Mon 27 Apr 2026 17:06:27 +0000
ROA not before: Mon 27 Apr 2026 17:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201988
IP address blocks: 2.26.122.0/24 maxlen: 24
2.26.123.0/24 maxlen: 24
31.76.244.0/24 maxlen: 24
31.76.245.0/24 maxlen: 24
31.76.251.0/24 maxlen: 24
31.76.252.0/24 maxlen: 24
144.31.53.0/24 maxlen: 24
144.31.148.0/24 maxlen: 24
144.31.169.0/24 maxlen: 24
144.31.223.0/24 maxlen: 24
144.31.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e8:19:19:9b:dd:8d:34:67:33:7d:37:03:6f:5f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 27 17:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac6d6236d2a1d7c2306a23e71fa6b7c00d7ade3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:29:a0:ba:6e:8e:a8:ee:3b:33:f6:6b:1d:52:
ca:57:ab:55:e4:3c:92:15:fb:f4:e4:10:92:82:29:
07:36:13:f2:77:bf:ef:e9:01:20:86:b3:76:e4:8d:
98:9a:cf:88:fc:57:a8:b4:11:d4:fb:11:eb:1d:e4:
c4:06:37:37:9c:35:15:5e:be:94:09:70:35:64:7b:
e1:a9:94:cf:26:41:34:c5:5a:dc:2e:c9:52:f4:8c:
c8:97:a8:5e:bd:a7:52:b4:16:e7:e7:79:84:d1:45:
55:d3:7d:b4:e0:cd:d2:83:69:97:91:f6:09:b0:45:
a5:0b:54:30:25:6b:2c:66:f1:2e:ef:ff:ba:97:e4:
13:55:e1:12:3b:a2:af:fe:17:c2:50:c6:b9:db:e6:
87:3b:81:2d:7f:30:ba:aa:26:ce:0c:fe:59:43:a6:
79:0c:8a:87:8d:16:3b:f3:0c:7b:02:6f:86:86:86:
e0:58:3b:9c:c2:34:59:bf:ed:88:75:30:9d:27:18:
91:7e:3e:f2:18:82:d9:65:d9:32:1a:c9:bc:01:19:
ec:1b:3b:93:3d:4f:4a:b4:97:67:ae:f5:37:5b:b7:
84:bd:dd:28:3e:44:12:67:6b:15:67:48:84:7b:73:
b3:3c:b3:da:5d:f4:e1:aa:cf:2b:d4:53:a3:a0:34:
9b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6D:62:36:D2:A1:D7:C2:30:6A:23:E7:1F:A6:B7:C0:0D:7A:DE:3A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rG1iNtKh18IwaiPnH6a3wA163jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.122.0/23
31.76.244.0/23
31.76.251.0-31.76.252.255
144.31.53.0/24
144.31.148.0/24
144.31.169.0/24
144.31.223.0/24
144.31.238.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:bd:26:a0:1f:a5:10:25:b1:4c:eb:89:91:8d:08:1a:5a:a4:
89:90:2a:8e:76:c3:12:b0:4e:60:a3:39:73:ca:bb:16:04:6c:
fd:aa:9a:90:aa:e0:b1:bf:2b:d0:3e:e6:c4:a6:7b:b5:c0:88:
f6:87:8a:8e:d2:16:5a:11:b5:cd:97:cc:73:43:1d:05:6d:ac:
61:39:77:f3:18:1f:a7:b4:b3:c9:c3:11:4d:c5:be:8b:31:c0:
3e:a6:8e:4a:48:98:47:98:d9:ef:5f:8f:1f:51:a4:dd:72:42:
bc:4c:ce:17:f7:95:4b:09:6f:02:4a:dc:49:73:27:c3:3c:3e:
35:9e:4e:a8:07:70:84:aa:12:86:65:82:b6:b9:57:87:82:7c:
0a:70:bc:c7:94:15:88:fa:4a:0a:1c:64:fe:12:96:65:06:df:
3a:48:e1:71:e7:51:a2:e2:ff:95:f6:79:09:95:35:63:40:f6:
26:ab:a3:1d:64:e1:0c:fa:82:9e:2a:21:f7:09:e2:42:3c:7c:
c9:20:92:bf:9f:ae:43:a4:bd:53:37:a7:70:94:f9:c4:2d:46:
9d:60:d1:52:8f:de:60:de:06:8b:5c:25:67:cb:f7:8b:08:db:
e3:70:b9:56:9f:fa:b3:46:cb:da:b7:5c:3c:08:0e:19:ea:b9:
20:d9:25:1e
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZ3P6BkZm92NNGczfTcDb18yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNDI3MTcwNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzZkNjIzNmQyYTFkN2MyMzA2YTIzZTcxZmE2YjdjMDBkN2FkZTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzimgum6OqO47M/ZrHVLKV6tV5DyS
Ffv05BCSgikHNhPyd7/v6QEghrN25I2Yms+I/FeotBHU+xHrHeTEBjc3nDUVXr6U
CXA1ZHvhqZTPJkE0xVrcLslS9IzIl6hevadStBbn53mE0UVV03204M3Sg2mXkfYJ
sEWlC1QwJWssZvEu7/+6l+QTVeESO6Kv/hfCUMa52+aHO4EtfzC6qibODP5ZQ6Z5
DIqHjRY78wx7Am+GhobgWDucwjRZv+2IdTCdJxiRfj7yGILZZdkyGsm8ARnsGzuT
PU9KtJdnrvU3W7eEvd0oPkQSZ2sVZ0iEe3OzPLPaXfThqs8r1FOjoDSbvwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFKxtYjbSodfCMGoj5x+mt8ANet46MB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvckcxaU50S2gxOEl3YWlQbkg2YTN3QTE2M2pvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQBAhp6AwQB
H0z0MAwDBAAfTPsDBAAfTPwDBACQHzUDBACQH5QDBACQH6kDBACQH98DBACQH+4w
DQYJKoZIhvcNAQELBQADggEBAB29JqAfpRAlsUzriZGNCBpapImQKo52wxKwTmCj
OXPKuxYEbP2qmpCq4LG/K9A+5sSme7XAiPaHio7SFloRtc2XzHNDHQVtrGE5d/MY
H6e0s8nDEU3FvosxwD6mjkpImEeY2e9fjx9RpN1yQrxMzhf3lUsJbwJK3ElzJ8M8
PjWeTqgHcISqEoZlgra5V4eCfApwvMeUFYj6SgocZP4SlmUG3zpI4XHnUaLi/5X2
eQmVNWNA9iarox1k4Qz6gp4qIfcJ4kI8fMkgkr+frkOkvVM3p3CU+cQtRp1g0VKP
3mDeBotcJWfL94sI2+NwuVaf+rNGy9q3XDwIDhnquSDZJR4=
-----END CERTIFICATE-----
Generated at Tue May 5 16:52:22 2026 by rpki-client