Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/sZsQYCAlgNa6kqX0CmFjOv5OSF4.roa
File: sZsQYCAlgNa6kqX0CmFjOv5OSF4.roa (raw, json)
Hash identifier: TA4wBglYFB4/xlCJ2WAYCaFf6sBwold/4bjswy8VP7E=
Subject key identifier: B1:9B:10:60:20:25:80:D6:BA:92:A5:F4:0A:61:63:3A:FE:4E:48:5E
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F05B94B2726206A77FE244256B4A4326A
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/sZsQYCAlgNa6kqX0CmFjOv5OSF4.roa
Signing time: Fri 26 Jun 2026 20:57:37 +0000
ROA not before: Fri 26 Jun 2026 20:57:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219476
IP address blocks: 2.26.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:05:b9:4b:27:26:20:6a:77:fe:24:42:56:b4:a4:32:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 26 20:57:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b19b1060202580d6ba92a5f40a61633afe4e485e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ae:e7:34:bb:22:df:bc:47:a0:d1:2f:b5:8d:
35:57:cf:b0:73:f2:e9:63:f0:2d:b0:3e:f8:1e:42:
fe:f1:f2:b4:87:a5:cd:9a:2d:15:aa:53:bb:23:b2:
14:c9:56:ac:ee:6d:2b:65:da:c9:60:49:87:ba:44:
4e:50:5a:25:4c:76:30:d3:e9:8f:16:b9:41:22:bf:
5b:2b:32:0b:35:2f:3b:fe:fa:0c:b6:31:d0:f0:93:
ce:7a:be:46:ad:29:9d:e6:ca:6d:21:48:e7:9e:77:
10:8f:b6:35:f7:65:b7:5c:a1:ad:20:d4:20:85:29:
27:45:44:cb:a1:ac:b8:2b:ae:fe:0b:3a:6c:7e:55:
14:46:19:4d:68:b1:dc:1c:cf:d0:cf:31:91:8a:19:
3a:36:91:3e:c6:40:c0:2f:50:70:ee:ba:db:79:3e:
22:72:42:8e:0b:6b:5d:b1:01:c9:ca:b5:cc:4e:5c:
7e:6a:d8:c8:dd:05:43:6f:7c:ed:92:02:a8:ec:96:
26:46:35:67:64:48:53:ca:65:a4:01:0c:fd:b4:0b:
ce:f6:45:d6:df:c9:f0:71:4f:e3:ae:a2:d5:92:5c:
3f:91:77:d5:58:35:72:a2:d3:cf:31:31:5a:40:57:
18:65:d6:f5:8c:be:e9:42:d2:d9:c5:af:28:bb:60:
02:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9B:10:60:20:25:80:D6:BA:92:A5:F4:0A:61:63:3A:FE:4E:48:5E
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/sZsQYCAlgNa6kqX0CmFjOv5OSF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.189.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:91:45:49:3c:0b:65:e1:47:2a:0b:3a:fd:3c:af:7d:ce:53:
53:ea:50:d6:f3:26:56:7f:ce:20:f8:6b:da:b1:7d:c5:8c:3e:
d3:9b:04:e2:74:11:58:e5:c9:18:e0:24:03:17:df:51:c8:4c:
bb:4f:8c:9b:06:60:74:d5:73:8b:4d:56:3f:df:5b:f8:ab:42:
3f:f1:f9:2b:0a:8e:99:9a:bd:0e:b9:7e:eb:7a:77:d0:7f:9c:
fb:9d:c4:f5:84:28:d3:e5:62:17:d4:f2:54:8f:6b:03:b3:32:
ef:20:de:10:3b:1e:1d:7b:e3:19:c9:66:ed:3a:ee:7b:2b:56:
c4:42:d4:ec:81:31:e8:2d:bf:7f:c9:62:70:f8:5a:af:72:0f:
6a:3d:95:7d:0d:b1:c7:d7:6e:86:f0:bc:65:1b:6c:92:a3:27:
8c:20:c4:25:33:8f:6b:02:cb:1a:b6:dd:54:52:bb:0c:d8:ad:
2e:65:91:44:ee:d7:69:20:d7:a8:c9:b1:f6:e6:ac:67:ae:16:
6a:38:8b:61:96:74:69:30:88:a1:b8:ba:d0:fd:a7:86:b3:1f:
7e:97:45:9c:23:84:12:70:11:18:a8:8d:26:fa:15:37:95:71:
51:b4:9b:48:95:58:6e:d8:79:61:9b:30:fc:bb:04:b8:85:5a:
6a:ce:e9:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8FuUsnJiBqd/4kQla0pDJqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNjI2MjA1NzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTliMTA2MDIwMjU4MGQ2YmE5MmE1ZjQwYTYxNjMzYWZlNGU0ODVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq7nNLsi37xHoNEvtY01V8+wc/Lp
Y/AtsD74HkL+8fK0h6XNmi0VqlO7I7IUyVas7m0rZdrJYEmHukROUFolTHYw0+mP
FrlBIr9bKzILNS87/voMtjHQ8JPOer5GrSmd5sptIUjnnncQj7Y192W3XKGtINQg
hSknRUTLoay4K67+CzpsflUURhlNaLHcHM/QzzGRihk6NpE+xkDAL1Bw7rrbeT4i
ckKOC2tdsQHJyrXMTlx+atjI3QVDb3ztkgKo7JYmRjVnZEhTymWkAQz9tAvO9kXW
38nwcU/jrqLVklw/kXfVWDVyotPPMTFaQFcYZdb1jL7pQtLZxa8ou2ACjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLGbEGAgJYDWupKl9AphYzr+TkheMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvc1pzUVlDQWxnTmE2a3FYMENtRmpPdjVPU0Y0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAhq9MA0G
CSqGSIb3DQEBCwUAA4IBAQClkUVJPAtl4UcqCzr9PK99zlNT6lDW8yZWf84g+Gva
sX3FjD7TmwTidBFY5ckY4CQDF99RyEy7T4ybBmB01XOLTVY/31v4q0I/8fkrCo6Z
mr0OuX7renfQf5z7ncT1hCjT5WIX1PJUj2sDszLvIN4QOx4de+MZyWbtOu57K1bE
QtTsgTHoLb9/yWJw+Fqvcg9qPZV9DbHH126G8LxlG2ySoyeMIMQlM49rAssatt1U
UrsM2K0uZZFE7tdpINeoybH25qxnrhZqOIthlnRpMIihuLrQ/aeGsx9+l0WcI4QS
cBEYqI0m+hU3lXFRtJtIlVhu2HlhmzD8uwS4hVpqzukP
-----END CERTIFICATE-----
Generated at Fri Jul 3 19:56:20 2026 by rpki-client