Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/uc1K2Zlf2VbD49KX5RB8BXofdEw.roa
File: uc1K2Zlf2VbD49KX5RB8BXofdEw.roa (raw, json)
Hash identifier: wqlb9ggvwQCRXQlCRoWxqJXJCFWgqG3V9FPUtWLzqLA=
Subject key identifier: B9:CD:4A:D9:99:5F:D9:56:C3:E3:D2:97:E5:10:7C:05:7A:1F:74:4C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019EF5EAA6FC51CA26C70D352B8DE878A214
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/uc1K2Zlf2VbD49KX5RB8BXofdEw.roa
Signing time: Tue 23 Jun 2026 19:17:36 +0000
ROA not before: Tue 23 Jun 2026 19:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 2.26.222.0/24 maxlen: 24
31.77.104.0/24 maxlen: 24
31.77.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f5:ea:a6:fc:51:ca:26:c7:0d:35:2b:8d:e8:78:a2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 23 19:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9cd4ad9995fd956c3e3d297e5107c057a1f744c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1d:f5:db:25:61:44:24:b6:a3:df:62:a4:58:
3f:dc:33:71:c7:6b:fe:c6:b5:8f:1c:f7:78:4d:12:
0c:e0:65:89:f9:0d:1b:bb:e8:7b:13:f1:d7:84:b1:
ee:3a:00:db:64:02:9a:91:0a:ec:e0:86:d2:d6:7c:
91:83:f8:69:1a:73:16:e7:78:9f:62:b8:01:d6:21:
79:11:fb:f4:ef:c6:4f:2d:26:4c:21:d6:9a:4e:28:
74:bd:54:5d:4c:51:8e:83:44:0f:47:68:e5:58:78:
c0:bb:e3:2c:00:f9:51:5d:89:5a:fa:ed:d8:bc:a1:
72:a0:ef:db:76:31:89:d1:ed:41:3d:92:a3:41:f3:
8b:e3:dd:09:b3:0c:d6:65:90:8e:83:ae:14:d6:55:
80:63:ab:fe:c8:77:6e:1b:79:bb:a3:dd:ab:97:7f:
bb:64:8d:4c:fd:df:38:3e:9b:c1:1f:3b:d4:b0:a2:
42:c1:9c:c0:0a:d6:76:cf:db:91:09:2a:7f:90:76:
7f:1b:e6:87:2b:68:70:14:e4:cb:ab:f7:76:d6:30:
4d:9f:a8:6a:7a:12:77:e8:f8:b7:67:69:02:38:1a:
49:72:0f:1f:0f:9c:ea:71:49:d5:03:04:ef:94:47:
e0:be:36:18:27:96:c3:f3:a1:da:2a:29:1a:ef:b5:
7a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CD:4A:D9:99:5F:D9:56:C3:E3:D2:97:E5:10:7C:05:7A:1F:74:4C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/uc1K2Zlf2VbD49KX5RB8BXofdEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.222.0/24
31.77.104.0/24
31.77.240.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:02:8f:ef:31:b4:1e:e3:c8:e7:62:e9:eb:53:ba:d5:d9:28:
6e:39:c9:ae:a4:d4:f8:c8:4a:64:d2:95:b3:b2:2e:5c:3f:db:
25:eb:ca:2c:0b:4f:af:95:f1:94:61:8c:65:07:9b:f5:bc:54:
a1:c1:b1:8c:05:73:82:79:7c:f1:b7:66:a3:02:52:27:75:c8:
14:c4:8f:fd:b6:d8:7b:a7:e5:86:ae:52:5b:a3:d8:4d:1e:1e:
ce:34:63:2b:84:aa:ab:21:99:9f:1d:60:0d:d7:d0:c8:b0:ee:
98:65:66:a4:ab:19:df:48:e3:3b:0e:21:6f:68:d2:36:58:1b:
79:58:74:2d:44:28:99:b4:6b:75:84:b7:bf:52:30:12:65:28:
0a:11:63:6c:3b:76:12:c9:cc:56:9e:cc:54:a3:ef:65:4e:5a:
04:73:92:1d:27:0d:88:9f:ef:0b:99:1c:8e:53:34:71:5a:b4:
15:b1:fb:b1:28:50:ad:13:38:8e:8f:34:5a:41:e7:7a:ad:7d:
14:bb:66:36:b8:85:74:ed:2f:43:07:f5:e6:cf:14:8f:5d:ce:
06:2d:0e:01:6c:c6:6e:c6:ae:ea:d6:99:7f:9a:ad:96:3a:48:
f1:11:4c:8c:a8:b1:ba:27:c6:84:f3:ce:a4:85:af:0e:5e:f0:
1d:8d:f6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:34 2026 by rpki-client