Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/sTd0-tPFoSVq5c8SD21nq-jyuB8.roa
File: sTd0-tPFoSVq5c8SD21nq-jyuB8.roa (raw, json)
Hash identifier: zYWq4KDQowk0rSzodp/eP6GAPvESoitvH56LtDdDu+A=
Subject key identifier: B1:37:74:FA:D3:C5:A1:25:6A:E5:CF:12:0F:6D:67:AB:E8:F2:B8:1F
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D9C561B088D7E79670091439B0BE9D366
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/sTd0-tPFoSVq5c8SD21nq-jyuB8.roa
Signing time: Fri 17 Apr 2026 16:46:21 +0000
ROA not before: Fri 17 Apr 2026 16:46:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 2.26.163.0/24 maxlen: 24
2.26.168.0/24 maxlen: 24
2.26.169.0/24 maxlen: 24
2.26.171.0/24 maxlen: 24
2.26.173.0/24 maxlen: 24
2.26.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:56:1b:08:8d:7e:79:67:00:91:43:9b:0b:e9:d3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 17 16:46:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b13774fad3c5a1256ae5cf120f6d67abe8f2b81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5f:67:fa:19:97:f4:ce:7e:41:84:77:09:d9:
29:d2:98:60:a1:4a:2a:6a:e2:90:72:6d:7a:7c:4d:
bf:de:4c:1c:fa:b5:67:7c:2e:d6:72:ac:07:62:bd:
7d:23:20:f8:be:df:90:39:a0:2d:f9:89:53:7d:cf:
27:23:99:e5:33:a1:db:8f:25:95:33:0b:d8:ba:f6:
4b:ec:63:bc:33:65:9c:db:f5:67:9d:6a:95:ee:bb:
96:06:a6:44:16:75:73:d7:71:b5:07:3c:67:d4:03:
f3:5e:50:17:b9:b1:e3:98:6d:d8:a0:1a:e8:ea:df:
5e:1d:e4:45:77:9e:77:47:5b:85:17:a5:2b:87:ec:
e4:e6:81:47:4e:be:0e:99:d1:90:48:bb:87:3a:85:
35:c0:2d:06:92:d9:23:0d:95:94:1c:43:1f:0a:f2:
c8:d1:b6:04:77:d9:da:24:39:96:5a:3b:8e:e8:8c:
8f:60:be:97:ad:85:1b:4f:9c:66:27:ef:2c:00:72:
67:90:08:6c:8d:84:89:06:62:9c:ef:5e:d1:cb:41:
f3:cd:9c:ad:b6:7d:64:4a:07:f0:51:55:15:f6:ca:
31:0d:b2:f0:7f:7c:bc:8c:9f:00:a4:0b:eb:be:7e:
3c:48:ce:fc:ee:2d:6d:57:43:b9:a0:5a:7b:c3:3c:
41:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:37:74:FA:D3:C5:A1:25:6A:E5:CF:12:0F:6D:67:AB:E8:F2:B8:1F
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/sTd0-tPFoSVq5c8SD21nq-jyuB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.163.0/24
2.26.168.0/23
2.26.171.0/24
2.26.173.0/24
2.26.175.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:18:5c:b2:48:6a:e7:97:28:da:41:b5:fd:b4:79:54:bf:f2:
27:55:f0:31:79:28:7e:fd:5d:27:ec:ce:97:8f:67:03:ab:14:
88:eb:34:31:1c:85:70:9b:47:00:85:38:04:0b:53:50:59:78:
d2:7f:ab:1a:ef:3e:a7:48:4c:99:36:dc:3e:a1:03:42:b1:a1:
cb:98:39:e2:d3:d0:77:32:ad:f4:77:6e:1e:f8:3a:a6:1f:3b:
cc:1b:ed:28:e5:3b:0f:ad:95:83:c8:5a:c1:20:7d:25:92:f7:
4f:3f:e2:c0:8d:a5:ce:33:54:13:74:60:d4:cd:96:c7:ab:46:
dc:89:61:c0:9a:e2:6b:77:91:58:05:35:a8:a6:94:8c:ba:81:
32:3d:db:f3:c1:ec:67:2e:8f:46:e2:b8:c1:7b:96:24:b7:3c:
c3:33:2c:9b:b8:4d:6b:61:7d:bb:e8:7a:16:80:0b:15:18:0f:
97:74:9e:23:4f:d2:88:af:0b:f4:90:dc:d9:76:73:cb:c9:d6:
4b:56:6f:eb:38:91:2f:bf:12:9a:04:52:a5:46:d0:20:68:14:
a0:61:25:06:26:f6:ca:4e:be:86:b6:84:2f:ae:55:e3:39:d9:
15:20:25:6b:61:48:05:05:eb:c5:5e:58:f1:b5:67:a9:89:56:
23:53:a8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 24 23:16:07 2026 by rpki-client