Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wmNmgK3Gf3fmu-85QBkrlkAsaz4.roa
File: wmNmgK3Gf3fmu-85QBkrlkAsaz4.roa (raw, json)
Hash identifier: ldHl/LXEjs8NW/HeCD0jupWmj/enj7Pza+6yZArZlWM=
Subject key identifier: C2:63:66:80:AD:C6:7F:77:E6:BB:EF:39:40:19:2B:96:40:2C:6B:3E
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F47CADB8278B68F5992F990C4FD842A57
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wmNmgK3Gf3fmu-85QBkrlkAsaz4.roa
Signing time: Thu 09 Jul 2026 16:51:44 +0000
ROA not before: Thu 09 Jul 2026 16:51:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212194
IP address blocks: 2.26.200.0/21 maxlen: 24
2.27.146.0/23 maxlen: 23
2.27.212.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 05:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:ca:db:82:78:b6:8f:59:92:f9:90:c4:fd:84:2a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 9 16:51:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2636680adc67f77e6bbef3940192b96402c6b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:58:90:54:fb:01:e0:3f:b6:71:68:90:4e:
45:97:4f:ac:92:91:30:3a:ae:27:ea:0c:ce:13:c7:
0d:e6:77:23:4a:2f:69:de:b7:08:32:a9:fe:75:22:
1f:62:f9:91:41:3a:99:16:9a:ca:75:af:6b:23:89:
9d:72:c8:c0:95:92:40:a1:3c:f3:64:13:59:19:d1:
cb:c4:a8:79:09:44:c2:fe:47:24:75:90:4c:21:a6:
2a:f5:11:ff:98:23:ad:fc:e4:37:da:f3:bf:db:eb:
7a:81:1a:78:cf:81:f7:58:51:aa:e2:9c:4c:fe:a1:
23:3c:ef:ba:da:b1:c3:d5:68:d0:33:5a:b6:48:72:
03:11:7a:5d:67:ef:bf:2b:23:a3:61:1e:20:10:6e:
58:8f:71:cb:a0:c0:36:83:94:25:a5:25:1d:b9:dc:
22:75:e4:fd:a1:74:af:8e:a5:d4:1d:86:84:cb:9d:
06:e5:81:8f:bd:09:d5:52:79:53:35:cd:ff:1a:81:
78:aa:10:a0:55:93:34:7f:7a:53:ab:50:62:d8:6a:
54:a4:f4:75:79:c4:ba:a0:4f:f6:ce:e1:c7:9d:b4:
ed:d9:37:7e:84:da:c6:f8:9e:c3:50:77:3d:09:f4:
8e:82:36:51:81:a3:a1:19:6f:4d:bd:67:53:37:10:
3f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:63:66:80:AD:C6:7F:77:E6:BB:EF:39:40:19:2B:96:40:2C:6B:3E
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wmNmgK3Gf3fmu-85QBkrlkAsaz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.200.0/21
2.27.146.0/23
2.27.212.0/23
Signature Algorithm: sha256WithRSAEncryption
87:4c:af:9e:6a:00:7a:c3:97:09:cb:9f:63:dc:bc:25:b3:fa:
76:97:e9:53:26:de:09:81:f8:86:1b:da:a7:cf:bb:13:bb:3d:
1d:c9:da:ee:c1:ee:23:48:10:6c:83:a5:25:d4:12:00:a3:b4:
86:ab:e7:ee:aa:c9:cc:6c:a6:3e:c7:ed:a5:78:25:da:93:4d:
9c:8a:14:26:5b:e6:23:19:17:b8:18:97:d1:6f:59:80:ff:af:
8d:1b:55:a0:c7:86:aa:bc:26:37:97:1e:be:9d:01:ba:16:b0:
ea:8e:cf:ae:be:11:15:eb:3d:cb:e7:3e:51:38:83:a8:06:56:
53:43:53:be:9b:82:f9:47:b9:9b:f7:1d:ed:7a:b1:7f:e1:08:
20:47:6e:5b:6f:d3:b2:05:05:1b:e2:b7:8b:52:38:2f:24:e6:
bf:da:de:0a:7e:50:95:4a:52:95:c3:64:a0:44:cc:95:f0:c2:
d7:eb:b3:7e:0f:24:8a:e0:1b:02:31:9c:03:6f:a8:f4:21:60:
e9:c9:e7:0f:f3:7d:07:1f:13:bc:73:a6:26:80:f7:10:c1:8e:
41:d5:04:52:f1:29:9f:9f:9e:3d:52:a6:70:8f:e7:be:01:ea:
1b:59:62:52:74:9f:b5:20:7d:8e:69:b2:7d:f5:b2:da:b2:7e:
f4:66:86:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 13:40:25 2026 by rpki-client