Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rKmNlpAWiDqg4-lSCklbZo9Hnds.roa
File: rKmNlpAWiDqg4-lSCklbZo9Hnds.roa (raw, json)
Hash identifier: w93Mem2NiHbTnjbAfusgoX2rjI30aajNynmCUELzzyg=
Subject key identifier: AC:A9:8D:96:90:16:88:3A:A0:E3:E9:52:0A:49:5B:66:8F:47:9D:DB
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FD91D794F3DC144DFB9FD5C79ACB6DC12
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rKmNlpAWiDqg4-lSCklbZo9Hnds.roa
Signing time: Thu 06 Aug 2026 22:06:55 +0000
ROA not before: Thu 06 Aug 2026 22:06:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26969
IP address blocks: 2.26.208.0/21 maxlen: 24
13.143.128.0/23 maxlen: 24
177.1.186.0/23 maxlen: 24
177.1.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Aug 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d9:1d:79:4f:3d:c1:44:df:b9:fd:5c:79:ac:b6:dc:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 6 22:06:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aca98d969016883aa0e3e9520a495b668f479ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:cf:ea:fc:b3:95:f9:32:f4:c7:9c:f2:d4:
a0:b3:cb:0b:7d:db:c0:ed:72:c3:9c:b4:e9:39:cf:
68:c9:6d:ed:c5:74:84:c3:eb:27:37:a0:96:48:ae:
e2:1f:b8:94:25:be:ef:58:fc:24:e7:8d:f2:3b:83:
0a:d2:83:41:92:a0:96:cd:11:de:a3:b8:07:14:8f:
63:c4:0a:fd:fd:57:49:be:ca:84:dd:19:73:22:fd:
f0:23:78:e0:2d:15:10:a5:10:7d:80:25:18:c3:ff:
a3:82:df:8b:06:dc:88:64:e4:9e:e2:58:d2:d5:f4:
2f:49:1f:fa:19:9d:88:d8:93:b3:08:92:4d:11:b4:
31:bd:d9:6b:52:fa:5e:4d:3f:d0:74:39:38:77:07:
b5:65:a9:37:2e:f9:ca:ca:e7:8b:de:cf:de:3d:d4:
55:44:e0:6f:d9:ad:b9:5c:2d:b1:01:ea:b5:8e:f7:
da:1e:4d:5a:27:72:62:48:ce:22:45:06:85:47:40:
be:e8:46:61:ae:bb:ef:8e:dd:6b:a3:17:73:69:6e:
7d:6e:24:4a:d7:da:84:6e:e1:93:94:ab:31:ae:96:
24:53:89:6c:1c:f4:e2:3d:da:06:a1:e2:08:a4:e3:
ef:8c:69:87:a6:b6:7c:e7:ca:82:6b:05:3f:6d:16:
e5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A9:8D:96:90:16:88:3A:A0:E3:E9:52:0A:49:5B:66:8F:47:9D:DB
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rKmNlpAWiDqg4-lSCklbZo9Hnds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.208.0/21
13.143.128.0/23
177.1.186.0-177.1.189.255
Signature Algorithm: sha256WithRSAEncryption
69:16:52:09:21:a9:d5:19:5d:8d:78:5e:5f:5b:0d:85:9f:3c:
c3:38:11:f1:e5:51:b1:a5:4b:30:82:ca:89:e5:d1:f2:8b:95:
76:8e:db:4f:a4:7e:7a:8e:db:a7:e2:f2:01:19:86:ff:24:4d:
f0:6e:a2:e9:7e:40:26:18:c5:00:a1:09:8f:78:d5:1f:29:ac:
4b:a5:ee:ef:a6:bc:53:0e:47:1d:10:87:f6:37:98:53:fc:32:
61:a8:c0:17:ad:04:51:04:79:46:d3:0f:be:3e:77:80:a3:83:
72:1e:ce:05:63:42:1e:e3:f2:c9:21:1e:b1:51:4e:c5:c9:a1:
4e:2d:a6:7c:11:dd:17:6f:d7:61:89:c7:75:e0:b3:41:69:34:
32:33:31:1e:00:ea:2b:6d:8e:96:53:ef:6d:e1:be:a8:5e:ab:
ca:d3:b2:9d:d5:26:a6:35:4a:d3:9c:f3:d9:60:8b:07:42:2d:
00:9c:07:d5:c2:3e:b2:88:af:b2:b7:37:2f:54:49:48:be:1f:
d5:c4:e5:a2:ee:d1:5a:22:22:07:5e:65:67:6b:47:99:d3:e6:
e8:48:42:b0:76:c5:a5:b1:18:55:ef:0c:75:92:0b:91:48:67:
80:a1:2f:cf:08:09:d7:24:20:e8:99:66:44:6b:08:8b:21:7d:
e3:1f:3e:3f
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZ/ZHXlPPcFE37n9XHmsttwSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwODA2MjIwNjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2E5OGQ5NjkwMTY4ODNhYTBlM2U5NTIwYTQ5NWI2NjhmNDc5ZGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0fP6vyzlfky9Mec8tSgs8sLfdvA
7XLDnLTpOc9oyW3txXSEw+snN6CWSK7iH7iUJb7vWPwk543yO4MK0oNBkqCWzRHe
o7gHFI9jxAr9/VdJvsqE3RlzIv3wI3jgLRUQpRB9gCUYw/+jgt+LBtyIZOSe4ljS
1fQvSR/6GZ2I2JOzCJJNEbQxvdlrUvpeTT/QdDk4dwe1Zak3LvnKyueL3s/ePdRV
ROBv2a25XC2xAeq1jvfaHk1aJ3JiSM4iRQaFR0C+6EZhrrvvjt1roxdzaW59biRK
19qEbuGTlKsxrpYkU4lsHPTiPdoGoeIIpOPvjGmHprZ858qCawU/bRblvwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFKypjZaQFog6oOPpUgpJW2aPR53bMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvckttTmxwQVdpRHFnNC1sU0NrbGJabzlIbmRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQDAhrQAwQB
DY+AMAwDBAGxAboDBAGxAbwwDQYJKoZIhvcNAQELBQADggEBAGkWUgkhqdUZXY14
Xl9bDYWfPMM4EfHlUbGlSzCCyonl0fKLlXaO20+kfnqO26fi8gEZhv8kTfBuoul+
QCYYxQChCY941R8prEul7u+mvFMORx0Qh/Y3mFP8MmGowBetBFEEeUbTD74+d4Cj
g3IezgVjQh7j8skhHrFRTsXJoU4tpnwR3Rdv12GJx3Xgs0FpNDIzMR4A6ittjpZT
723hvqheq8rTsp3VJqY1StOc89lgiwdCLQCcB9XCPrKIr7K3Ny9USUi+H9XE5aLu
0VoiIgdeZWdrR5nT5uhIQrB2xaWxGFXvDHWSC5FIZ4ChL88ICdckIOiZZkRrCIsh
feMfPj8=
-----END CERTIFICATE-----
Generated at Sat Aug 8 20:02:29 2026 by rpki-client