Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xi9eyQGBdi2-t3zYFrvGlocSTqM.roa
File: xi9eyQGBdi2-t3zYFrvGlocSTqM.roa (raw, json)
Hash identifier: p8INFp/hxG51jg7Xa+sAsyYsA5iXMmi3auocxXtDUjQ=
Subject key identifier: C6:2F:5E:C9:01:81:76:2D:BE:B7:7C:D8:16:BB:C6:96:87:12:4E:A3
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E277BAEBFEE705A499E2CD1D4FE0E4642
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xi9eyQGBdi2-t3zYFrvGlocSTqM.roa
Signing time: Thu 14 May 2026 17:14:37 +0000
ROA not before: Thu 14 May 2026 17:14:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199529
IP address blocks: 2.26.78.0/24 maxlen: 24
2.26.79.0/24 maxlen: 24
2.26.94.0/24 maxlen: 24
2.26.95.0/24 maxlen: 24
2.26.127.0/24 maxlen: 24
31.76.123.0/24 maxlen: 24
31.76.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:27:7b:ae:bf:ee:70:5a:49:9e:2c:d1:d4:fe:0e:46:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 14 17:14:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c62f5ec90181762dbeb77cd816bbc69687124ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:be:1b:0a:24:7b:91:c1:38:fc:9d:d1:18:07:
e0:c5:e4:27:12:97:7b:ee:7f:73:50:d1:45:85:bc:
88:c0:d5:69:46:4b:07:fb:54:54:f3:3d:08:26:ac:
82:14:e5:36:85:37:47:8c:82:29:df:d7:07:48:1f:
3f:60:04:e8:a1:78:f7:93:d4:97:d3:fa:f4:e0:30:
e7:8c:fb:10:d3:f8:35:41:f2:1f:51:80:94:46:af:
48:3c:f2:1e:5e:55:8d:08:05:36:d3:18:64:c8:fc:
14:29:36:a7:5a:18:a9:b0:3a:b0:7b:ed:df:ea:9f:
78:8e:ca:40:1d:7b:b1:da:0a:b4:32:c3:99:74:2b:
e0:0c:ba:9f:78:9a:e9:16:13:42:01:e1:8b:c9:bb:
17:9e:ad:9f:c6:76:68:06:21:c4:bf:7f:ed:cc:29:
02:82:9b:04:8d:b5:6b:61:b1:e4:cb:5a:95:ef:72:
41:a4:3f:f0:79:a7:ee:d1:5f:94:0a:06:5b:09:3a:
5b:9a:c2:be:26:36:56:fa:7d:4e:31:31:30:a2:06:
0c:43:e3:ff:e3:2f:0c:72:ec:2b:d8:e6:95:b7:67:
38:dc:e0:4b:5d:11:76:81:1f:9a:2a:e8:32:07:90:
11:c9:80:37:a6:19:cc:24:92:60:b4:2a:19:8f:48:
05:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2F:5E:C9:01:81:76:2D:BE:B7:7C:D8:16:BB:C6:96:87:12:4E:A3
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xi9eyQGBdi2-t3zYFrvGlocSTqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.78.0/23
2.26.94.0/23
2.26.127.0/24
31.76.123.0/24
31.76.253.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:51:30:dd:e4:98:8a:05:e6:b6:23:ba:91:d7:67:1e:86:8e:
cb:f5:40:de:b6:cd:65:8c:4c:84:61:3c:d9:f5:f6:2b:5c:ae:
13:90:a5:dd:74:a9:f4:7d:60:a0:14:19:c0:6d:f2:89:02:cb:
6e:03:18:99:6d:b9:e1:dc:22:a8:5a:b5:e1:e1:d9:3f:ef:73:
c5:f1:7f:23:8f:a4:58:64:2e:16:46:0a:f4:c3:d0:20:aa:35:
1c:58:9e:92:59:64:46:f2:e7:05:da:32:49:56:ab:2a:8b:2a:
95:9e:33:89:f8:1a:d0:38:03:8e:c9:f0:b8:9d:d5:7a:d2:5e:
a0:3c:d1:5b:f8:bb:01:6f:d4:53:2c:74:08:f1:cd:c4:03:15:
f4:2a:0e:71:36:4a:14:77:bf:8d:1d:5c:93:2d:e4:96:93:b0:
66:33:e2:6c:7e:9c:b5:5a:ce:d6:40:8c:8f:25:77:0e:11:85:
15:c0:42:1e:8e:22:1c:c0:a6:31:67:53:39:69:3e:19:8b:22:
13:45:53:38:25:22:2c:52:53:ca:70:63:57:5c:94:12:15:fb:
11:35:2c:f7:c6:29:47:b3:fb:90:d1:95:80:97:5a:75:dc:5c:
e3:97:92:3e:86:4f:86:2a:19:9b:21:66:b1:39:b6:51:17:22:
c9:a9:1d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 16:32:53 2026 by rpki-client