Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/t2cjxRmClB26v8Al3IzYS8FJMVg.roa
File: t2cjxRmClB26v8Al3IzYS8FJMVg.roa (raw, json)
Hash identifier: 7f1fWOdJIcweb7AJrnVUAhaOt4UHHZzBCr7+eD+xkfM=
Subject key identifier: B7:67:23:C5:19:82:94:1D:BA:BF:C0:25:DC:8C:D8:4B:C1:49:31:58
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FF18FFCA3E706AE8E2AE83DB10F74DDA4
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/t2cjxRmClB26v8Al3IzYS8FJMVg.roa
Signing time: Tue 11 Aug 2026 16:02:53 +0000
ROA not before: Tue 11 Aug 2026 16:02:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402643
IP address blocks: 2.26.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 20:49:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f1:8f:fc:a3:e7:06:ae:8e:2a:e8:3d:b1:0f:74:dd:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 11 16:02:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b76723c51982941dbabfc025dc8cd84bc1493158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7c:6d:5c:c1:0e:63:80:d5:18:18:06:50:29:
65:8b:d1:6c:60:c4:d2:ca:4d:a3:34:af:30:98:6a:
63:a3:68:eb:fc:82:f8:3c:90:7a:13:31:b4:bc:f9:
d6:00:a2:8f:f5:d2:25:5b:4a:9a:6e:0e:1f:40:fb:
d9:d3:6b:c7:6f:d9:d5:4f:e4:41:00:6f:85:4d:de:
a3:35:51:78:7f:79:69:46:2b:d9:76:ed:25:d4:01:
cc:33:fb:7e:41:39:3c:88:44:79:72:c8:84:f6:2d:
3f:74:e4:90:5c:ba:ba:9c:de:e8:9e:b6:0e:d7:fa:
35:55:39:07:7b:76:c6:bc:aa:2a:c6:0f:59:0a:8b:
fc:bb:9a:36:91:fb:52:86:12:39:8b:2e:35:69:55:
a3:63:39:f0:e4:2a:63:97:b4:95:e6:8b:fa:3f:da:
ce:09:dd:23:c7:4d:9e:61:6e:4b:fe:34:e3:24:b9:
de:52:55:db:bb:86:f3:a3:76:13:07:c5:22:cd:f0:
95:5b:7e:69:ef:f0:66:4a:96:da:40:ba:a6:be:eb:
10:39:48:2d:80:ae:a0:48:1e:4b:c5:41:e4:7d:55:
c1:39:5d:1a:1b:e4:23:4b:46:74:99:2b:a7:bd:b9:
df:78:bc:91:e3:4c:81:7d:56:2a:82:25:8f:31:6c:
5c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:67:23:C5:19:82:94:1D:BA:BF:C0:25:DC:8C:D8:4B:C1:49:31:58
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/t2cjxRmClB26v8Al3IzYS8FJMVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.187.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:96:84:83:9d:3a:3c:c9:1f:5f:6e:dc:47:bf:8b:f2:5d:fa:
de:8f:17:21:24:67:f0:c2:9a:90:13:74:ba:fd:09:1e:a9:82:
9d:15:d4:b8:6e:97:da:42:b4:1b:c5:ec:d1:64:0e:94:6d:15:
e0:3b:2f:45:80:d7:83:cc:49:10:df:46:ed:f5:26:cb:54:19:
f4:44:d8:d8:0f:5c:06:f6:3e:2c:e1:d8:52:a2:f0:4c:ce:ce:
16:4f:10:9a:ee:d3:9f:9b:84:a8:2f:c3:5e:26:a5:09:cd:67:
9e:44:be:20:6e:01:d1:1a:45:f2:ad:3d:67:db:90:aa:57:3e:
82:32:27:07:a0:2b:93:be:76:89:37:2f:24:8d:38:08:91:f9:
4a:e5:78:12:b0:6e:fa:24:da:8c:1c:7b:d8:e1:a6:e8:61:00:
31:a7:cd:33:43:b6:6b:c0:17:c3:37:7c:ad:b5:29:3d:a8:e0:
ca:e9:90:87:96:2b:c7:5b:c2:1e:f0:b0:4e:d7:81:fe:ae:60:
26:84:da:08:6b:c0:83:77:94:d8:e7:48:a1:17:b8:9d:b9:71:
cb:13:3d:5a:7b:bc:d6:63:79:5c:c0:81:8e:0b:60:cc:dc:1a:
3a:0d:f9:3a:e8:9b:25:e9:4f:d7:fb:f0:75:8d:66:8b:a5:6b:
2e:9b:86:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/xj/yj5waujiroPbEPdN2kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwODExMTYwMjUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzY3MjNjNTE5ODI5NDFkYmFiZmMwMjVkYzhjZDg0YmMxNDkzMTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnxtXMEOY4DVGBgGUClli9FsYMTS
yk2jNK8wmGpjo2jr/IL4PJB6EzG0vPnWAKKP9dIlW0qabg4fQPvZ02vHb9nVT+RB
AG+FTd6jNVF4f3lpRivZdu0l1AHMM/t+QTk8iER5csiE9i0/dOSQXLq6nN7onrYO
1/o1VTkHe3bGvKoqxg9ZCov8u5o2kftShhI5iy41aVWjYznw5Cpjl7SV5ov6P9rO
Cd0jx02eYW5L/jTjJLneUlXbu4bzo3YTB8UizfCVW35p7/BmSpbaQLqmvusQOUgt
gK6gSB5LxUHkfVXBOV0aG+QjS0Z0mSunvbnfeLyR40yBfVYqgiWPMWxcBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLdnI8UZgpQdur/AJdyM2EvBSTFYMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvdDJjanhSbUNsQjI2djhBbDNJellTOEZKTVZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAhq7MA0G
CSqGSIb3DQEBCwUAA4IBAQA8loSDnTo8yR9fbtxHv4vyXfrejxchJGfwwpqQE3S6
/QkeqYKdFdS4bpfaQrQbxezRZA6UbRXgOy9FgNeDzEkQ30bt9SbLVBn0RNjYD1wG
9j4s4dhSovBMzs4WTxCa7tOfm4SoL8NeJqUJzWeeRL4gbgHRGkXyrT1n25CqVz6C
MicHoCuTvnaJNy8kjTgIkflK5XgSsG76JNqMHHvY4aboYQAxp80zQ7ZrwBfDN3yt
tSk9qODK6ZCHlivHW8Ie8LBO14H+rmAmhNoIa8CDd5TY50ihF7iduXHLEz1ae7zW
Y3lcwIGOC2DM3Bo6Dfk66Jsl6U/X+/B1jWaLpWsum4a5
-----END CERTIFICATE-----
Generated at Tue Sep 1 04:56:30 2026 by rpki-client