Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/vjvoJd4PxlCeJqUKbUZUJL_jbUc.roa
File: vjvoJd4PxlCeJqUKbUZUJL_jbUc.roa (raw, json)
Hash identifier: U22gD0oyMi5mFtacI6MNEiGQHicFE2HPrNNoHME+/1Y=
Subject key identifier: BE:3B:E8:25:DE:0F:C6:50:9E:26:A5:0A:6D:46:54:24:BF:E3:6D:47
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E842EEB2B7D05C83118BED898F11CDD52
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/vjvoJd4PxlCeJqUKbUZUJL_jbUc.roa
Signing time: Mon 01 Jun 2026 17:15:27 +0000
ROA not before: Mon 01 Jun 2026 17:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199180
IP address blocks: 2.26.12.0/24 maxlen: 24
2.26.13.0/24 maxlen: 24
2.26.14.0/24 maxlen: 24
2.26.15.0/24 maxlen: 24
2.27.6.0/24 maxlen: 24
31.76.36.0/24 maxlen: 24
31.76.92.0/24 maxlen: 24
31.76.121.0/24 maxlen: 24
31.76.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 12:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:84:2e:eb:2b:7d:05:c8:31:18:be:d8:98:f1:1c:dd:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 1 17:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be3be825de0fc6509e26a50a6d465424bfe36d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6d:39:4b:0b:cf:20:ca:93:65:e9:e4:4c:e1:
90:60:08:38:be:15:ac:13:d5:5a:0a:b3:a5:cb:ca:
01:c3:66:25:64:4f:f4:52:28:5e:57:b3:31:35:d2:
29:e7:f8:29:1c:e8:62:ff:e3:53:a4:76:aa:4e:47:
8e:d3:49:1f:2d:4d:35:50:3f:42:a8:8a:3f:e1:e1:
3d:76:06:26:56:ae:80:6b:7a:d6:52:9b:1c:61:4f:
72:3a:c1:fd:26:bf:2f:44:05:f2:ea:2a:e4:5e:1a:
aa:48:31:fb:4a:a6:3c:ab:6c:e8:7f:db:67:75:52:
25:9f:b5:7c:db:db:72:58:00:9f:b4:d8:40:d0:a7:
ec:a7:d7:4f:14:c8:c4:04:76:bd:47:73:77:50:7a:
10:24:7b:e7:99:4b:52:03:7b:48:7f:09:ca:d0:66:
19:ea:80:2a:62:4e:19:64:7f:31:9c:a5:c5:25:9f:
0d:d4:a3:d7:9a:91:6c:93:e0:06:06:6b:9d:32:d8:
31:67:61:e0:7c:36:18:65:dd:a0:93:a9:cc:60:06:
b1:35:11:8b:93:26:2a:00:39:be:95:20:79:1f:4c:
ee:90:14:b7:ed:5b:45:54:68:b1:91:57:e0:5a:e1:
1c:bf:ac:7c:d0:c6:cb:15:6b:95:f7:65:c6:67:87:
70:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3B:E8:25:DE:0F:C6:50:9E:26:A5:0A:6D:46:54:24:BF:E3:6D:47
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/vjvoJd4PxlCeJqUKbUZUJL_jbUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.12.0/22
2.27.6.0/24
31.76.36.0/24
31.76.92.0/24
31.76.121.0/24
31.76.254.0/24
Signature Algorithm: sha256WithRSAEncryption
85:96:fd:3d:73:9c:d9:07:97:a9:d4:86:5e:66:b7:aa:b8:df:
aa:03:dc:7e:41:fe:74:63:43:b7:fa:3b:a3:ec:81:7f:ba:6e:
12:39:f9:d7:66:a0:34:e7:92:a1:cb:fe:0c:50:8d:9a:74:d4:
fe:b2:72:d2:20:f8:f6:c5:25:6f:14:86:f7:be:e0:00:6a:53:
ad:7e:e2:95:7f:16:9b:c5:a1:e8:8d:55:ac:41:40:e9:47:d9:
b4:ee:e2:7d:72:e3:b4:b1:5a:ee:2d:63:a7:33:93:03:61:37:
f7:eb:0c:fa:84:15:e4:3b:43:66:f4:35:0b:9b:41:ee:b6:94:
9c:de:12:00:07:38:d4:8e:46:a3:3d:96:b3:78:93:e9:bd:d1:
52:0a:a6:9c:60:86:9c:88:5b:e6:61:2e:30:2a:92:90:83:53:
58:67:e7:43:47:6a:65:1e:7e:0d:8e:ab:9e:7e:27:21:0e:1c:
b3:04:94:c9:73:c2:57:77:af:e8:57:08:aa:fc:ec:c2:82:7b:
28:76:36:ce:09:5d:ed:1c:d4:d1:01:a7:68:cb:f0:65:0a:ab:
3c:09:b7:05:8e:97:ad:14:ab:26:6f:f3:e7:66:89:9b:62:77:
3d:8d:b6:f9:63:aa:47:49:6d:f5:d1:71:c3:5a:52:a2:08:5a:
05:5c:e5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:07:05 2026 by rpki-client