Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/sJoKc6DJMv4i-t8hPmJiiwqtaM4.roa
File: sJoKc6DJMv4i-t8hPmJiiwqtaM4.roa (raw, json)
Hash identifier: Cu/9OWPITVXz6Q1ZOR8fOKVd93FZZ6aZXEACjv01Ib0=
Subject key identifier: B0:9A:0A:73:A0:C9:32:FE:22:FA:DF:21:3E:62:62:8B:0A:AD:68:CE
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F05B94B5F7055080D943437BE8BC1FE57
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/sJoKc6DJMv4i-t8hPmJiiwqtaM4.roa
Signing time: Fri 26 Jun 2026 20:57:37 +0000
ROA not before: Fri 26 Jun 2026 20:57:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402415
IP address blocks: 2.26.171.0/24 maxlen: 24
2.27.232.0/24 maxlen: 24
31.77.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:05:b9:4b:5f:70:55:08:0d:94:34:37:be:8b:c1:fe:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 26 20:57:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b09a0a73a0c932fe22fadf213e62628b0aad68ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c6:b1:f3:28:cf:d0:62:5a:04:51:b0:a1:20:
e5:09:75:a5:44:1f:6b:de:86:ab:2e:c1:bd:2c:da:
94:a5:ff:2b:a5:da:2b:82:33:3b:97:c1:3a:3f:79:
6b:75:11:35:d9:e8:13:8f:1c:9f:11:39:2c:a8:55:
bd:32:bb:ff:03:ac:84:23:74:bf:da:a4:1f:47:e1:
db:d0:63:77:0a:c6:ff:0f:18:6f:a2:da:7a:0c:43:
65:1e:55:95:af:be:ba:6b:9a:1a:26:27:ce:7f:d1:
08:8d:ca:22:56:c0:f0:92:a5:8e:6d:73:93:cb:32:
c6:52:fd:05:7b:70:06:6f:50:20:45:c1:98:49:3e:
a8:56:ae:b9:66:35:0f:32:aa:a2:3b:01:63:6d:f4:
73:65:18:ab:58:aa:8c:f0:11:a7:51:7a:e4:44:8b:
22:01:e4:a2:aa:c2:4a:69:71:69:f3:f5:27:7a:42:
bd:f8:e9:a7:36:0d:26:a2:da:e4:7f:30:2e:96:44:
7e:03:3d:4f:e2:3d:68:99:67:cc:3d:2a:3b:ad:b4:
d0:9c:00:9f:ef:e3:02:36:66:46:68:17:ea:4b:d6:
47:ec:25:0b:c6:03:37:c1:1c:35:fb:dc:b4:a9:bf:
ec:85:83:b3:43:c2:01:72:98:f4:8f:ef:5c:24:2c:
ed:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9A:0A:73:A0:C9:32:FE:22:FA:DF:21:3E:62:62:8B:0A:AD:68:CE
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/sJoKc6DJMv4i-t8hPmJiiwqtaM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.171.0/24
2.27.232.0/24
31.77.238.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:09:aa:f8:65:4c:23:d9:6c:c3:10:df:fe:64:a1:d7:43:f5:
4b:b5:de:07:34:7d:11:b2:07:92:be:ed:dd:22:05:e9:a0:5b:
2c:fb:27:d1:c7:cd:2a:e8:e8:8a:e0:b6:bc:d7:02:eb:3a:44:
fc:8a:76:e6:aa:1b:12:cd:c6:76:fb:56:7c:40:ae:a2:5c:97:
0d:a9:3a:32:b5:78:bb:75:50:19:a3:79:85:38:8c:c2:3b:ad:
e6:ea:fd:19:b9:6f:6f:8e:cf:d6:59:72:ac:34:e2:bc:f2:c8:
3b:70:a2:83:f3:0b:2a:17:fc:12:5e:d7:ef:d7:90:b3:73:64:
af:bc:39:84:85:a6:fe:c0:72:91:80:1e:78:e5:88:53:1d:a7:
b3:92:cc:30:b9:8c:70:45:4e:65:01:25:b1:be:14:d2:32:cc:
60:23:63:c2:92:e9:7b:a7:5d:b5:fd:73:4e:94:16:a1:21:15:
01:e4:a4:10:85:c5:dc:b4:cf:d3:80:2a:b7:e5:ec:b1:9e:5f:
5a:2e:21:9b:c3:d9:94:a3:c7:1c:7c:bb:41:ce:b5:60:5a:80:
f7:01:3d:b0:e9:2d:1c:38:c8:ea:a2:47:cc:5c:c3:d2:e7:4a:
bb:23:30:52:3d:05:4a:c7:d1:4a:2d:f7:a1:2a:f8:09:7c:37:
30:40:b5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:58:11 2026 by rpki-client