Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/uydHlx9D88JrWmchDi9goalA_Yw.roa
File: uydHlx9D88JrWmchDi9goalA_Yw.roa (raw, json)
Hash identifier: WcFnZC2eJmVy7MnKatxapbjLg6+V/vopgHYHPRl/7yE=
Subject key identifier: BB:27:47:97:1F:43:F3:C2:6B:5A:67:21:0E:2F:60:A1:A9:40:FD:8C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FD91BA6DE6F13E1947BBC5A7872A3B7DA
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/uydHlx9D88JrWmchDi9goalA_Yw.roa
Signing time: Thu 06 Aug 2026 22:04:55 +0000
ROA not before: Thu 06 Aug 2026 22:04:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30218
IP address blocks: 2.26.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Aug 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d9:1b:a6:de:6f:13:e1:94:7b:bc:5a:78:72:a3:b7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 6 22:04:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb2747971f43f3c26b5a67210e2f60a1a940fd8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:94:15:31:1d:39:ca:89:28:ee:cc:68:74:
b7:9c:06:ce:4a:3b:2c:8d:f6:3d:75:13:b3:de:78:
ec:af:ff:58:ce:60:17:00:db:a5:0f:18:82:a5:d7:
43:aa:a4:4a:89:a1:fc:dc:81:e1:3e:0e:c3:55:61:
7e:19:d2:da:1d:5c:b6:1d:67:eb:b7:74:83:2d:9d:
0a:57:2a:ae:1a:bb:d5:36:2b:22:78:8f:74:d4:d8:
8f:93:98:a3:67:32:c4:d3:81:1b:41:9e:8f:5e:f6:
b1:aa:59:0f:06:9f:73:d9:bf:92:f8:09:a9:66:95:
a1:c4:47:3e:b2:1e:74:ac:2e:4d:b9:85:16:07:9a:
91:c1:c4:7a:65:b3:c5:e2:53:78:23:2d:ff:5b:81:
fc:7b:e7:37:55:c3:f3:22:3a:f5:d1:ae:50:dc:e2:
3b:61:0e:e2:52:ab:c5:86:b9:97:ea:2e:88:3d:97:
0d:f2:79:4f:be:2f:b1:4a:70:21:a3:8f:48:37:3c:
e8:8a:d9:17:ac:d8:3e:fe:4c:b7:a2:c5:72:4c:6a:
67:fd:b3:c2:7c:c2:bd:2a:d6:39:29:9d:89:3d:ce:
95:15:d3:91:60:fa:4d:1a:1e:c4:9c:d9:37:74:36:
da:36:1d:34:ff:5a:dd:60:2a:1d:4f:d7:60:d2:81:
4a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:27:47:97:1F:43:F3:C2:6B:5A:67:21:0E:2F:60:A1:A9:40:FD:8C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/uydHlx9D88JrWmchDi9goalA_Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.208.0/21
Signature Algorithm: sha256WithRSAEncryption
23:9d:e5:0c:35:2f:49:4a:61:89:c0:f5:e2:d9:11:d0:93:d8:
cf:ee:7e:9c:04:3b:ed:7e:54:a9:41:30:bc:65:10:be:76:05:
fd:84:db:80:11:21:21:60:4a:b7:e2:76:e2:b1:7f:58:6e:6f:
df:21:84:11:64:ec:62:59:82:f4:63:77:e7:bd:36:05:ae:2c:
4e:69:3e:46:e9:fe:24:1f:b1:4c:a6:63:62:ad:fe:3e:6e:30:
82:cc:e7:6e:69:4e:3d:1c:bd:a9:80:4e:fb:c3:bd:e0:a1:87:
a1:16:74:7b:a8:e9:23:ad:19:61:f5:2c:11:62:00:e1:c9:54:
93:23:bc:1b:80:39:03:a1:47:43:9c:ba:e0:7b:a1:2b:3b:57:
3f:60:d1:70:bf:b0:b8:b2:96:74:7a:1e:38:47:97:25:7c:c2:
7b:89:2e:5a:2f:96:d1:b5:2d:26:9c:09:d1:3b:e8:ff:8d:17:
c6:25:cc:45:30:1e:da:15:fc:29:c5:3f:e5:e0:c1:57:61:7a:
bd:61:d9:7d:47:c7:55:1c:15:0a:e5:6d:15:54:55:69:69:0c:
cc:05:48:a5:5e:71:6a:bf:c4:d7:dc:d5:b3:7a:4e:6d:58:41:
8c:67:d6:75:50:12:e6:04:0f:8d:2d:ff:63:83:08:bf:1f:0a:
ba:8f:62:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 19:54:49 2026 by rpki-client