Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/yB5Z1dz6LOZxtPjPhv33sXuCmtc.roa
File: yB5Z1dz6LOZxtPjPhv33sXuCmtc.roa (raw, json)
Hash identifier: 7A4Gt/3e8F8yJ5+1qfJ2CIqx1VH6HvJWnkAkoDW0RFA=
Subject key identifier: C8:1E:59:D5:DC:FA:2C:E6:71:B4:F8:CF:86:FD:F7:B1:7B:82:9A:D7
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E278E2C7BD65F92405C3D2441DD3DED89
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/yB5Z1dz6LOZxtPjPhv33sXuCmtc.roa
Signing time: Thu 14 May 2026 17:34:49 +0000
ROA not before: Thu 14 May 2026 17:34:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 2.26.168.0/24 maxlen: 24
2.26.169.0/24 maxlen: 24
2.26.171.0/24 maxlen: 24
2.26.173.0/24 maxlen: 24
2.26.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:27:8e:2c:7b:d6:5f:92:40:5c:3d:24:41:dd:3d:ed:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 14 17:34:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c81e59d5dcfa2ce671b4f8cf86fdf7b17b829ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0f:5f:9c:41:68:28:7b:ed:23:13:4b:32:a6:
f8:e4:f2:3f:97:86:48:93:e1:56:e7:63:ff:8f:22:
69:55:1d:12:7f:d4:44:32:4d:71:80:2b:ea:7f:99:
68:f6:d5:db:b9:11:47:ad:56:9b:93:52:b4:48:37:
70:33:fc:84:ee:77:05:9f:7b:d5:2e:0b:4c:50:3d:
51:7e:5f:c1:71:4e:40:a7:aa:6f:5e:be:e3:5c:4b:
99:58:b1:6d:9e:a1:a4:62:be:0e:b3:23:68:a5:68:
af:6a:55:6a:5a:ab:6f:82:9f:2c:1e:13:9c:9f:4b:
c6:7c:f3:53:91:8c:d5:e1:7c:9a:8d:9d:e8:23:35:
dd:84:19:2a:d8:4f:59:a7:ae:5d:50:90:e6:b5:78:
41:b3:b6:9d:90:a1:82:29:c1:02:49:91:5d:c3:c1:
90:ac:ac:22:59:78:ab:a0:be:a5:6e:39:7f:3b:66:
6e:a9:b4:f1:4e:00:06:5e:83:f8:5c:ec:ba:44:bb:
5f:44:11:6f:14:f7:aa:70:88:e9:65:6e:f1:c1:91:
56:aa:1e:e5:a1:de:c1:a5:23:17:33:4e:8d:46:c4:
a0:68:89:54:f5:00:de:2e:4b:8b:65:5b:c4:ae:4e:
02:85:9d:d8:40:09:c7:b5:e5:06:17:a2:39:d0:1a:
68:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1E:59:D5:DC:FA:2C:E6:71:B4:F8:CF:86:FD:F7:B1:7B:82:9A:D7
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/yB5Z1dz6LOZxtPjPhv33sXuCmtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.168.0/23
2.26.171.0/24
2.26.173.0/24
2.26.175.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:bc:d9:f8:a7:8b:c3:db:bf:09:30:d2:50:72:78:15:60:65:
b3:81:da:f2:45:b9:93:f0:6d:36:6b:1a:98:40:f4:a0:a8:ea:
c1:53:66:9b:39:1d:8e:8c:fb:d4:62:48:c6:ac:72:e3:38:f3:
42:b6:40:e9:72:10:fa:77:c9:89:bd:f1:17:fc:83:02:c5:23:
d9:68:31:2f:03:15:5d:65:c1:7d:79:ad:f7:9c:3f:c2:41:51:
61:59:6f:d7:56:73:53:c2:fe:9f:7a:80:4d:69:77:20:ca:d9:
78:9d:81:87:c7:d8:f0:2c:01:d5:95:b1:fc:40:70:1e:69:d7:
08:25:f9:dd:87:14:ea:7c:41:c7:3c:4d:69:cd:63:b4:f5:7f:
6d:90:60:79:41:e9:90:7e:41:76:5b:9f:69:22:2a:df:46:e1:
05:68:fb:19:9d:be:34:f2:30:9d:5f:48:9b:0f:c7:45:5c:57:
a1:c2:58:1c:2b:81:6b:3e:c2:8d:1e:c0:85:9e:94:d4:d6:08:
a5:49:a1:ff:82:f0:88:ec:ac:56:f8:a3:b3:a9:ba:8f:0f:e2:
18:f5:84:bc:09:92:99:e0:85:c2:dd:1c:81:da:5e:3e:e3:5b:
e4:9c:a7:60:2a:ba:ff:bc:fa:8f:a4:ce:9c:36:67:2f:ea:dc:
06:1d:8d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 08:01:43 2026 by rpki-client