Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zAx6nl0e69MFhqEdjf-d9iIxiHk.roa
File: zAx6nl0e69MFhqEdjf-d9iIxiHk.roa (raw, json)
Hash identifier: AobJeizeS9MnnzKPNepeaN75fKn/n4bj7tOVKc7ZQAo=
Subject key identifier: CC:0C:7A:9E:5D:1E:EB:D3:05:86:A1:1D:8D:FF:9D:F6:22:31:88:79
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1A37CC98988762E21E2C32BE0AC1DB514
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zAx6nl0e69MFhqEdjf-d9iIxiHk.roa
Signing time: Tue 03 Nov 2026 22:17:06 +0000
ROA not before: Tue 03 Nov 2026 22:17:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218731
IP address blocks: 2.26.182.0/24 maxlen: 24
31.77.56.0/24 maxlen: 24
31.77.57.0/24 maxlen: 24
31.77.109.0/24 maxlen: 24
31.77.138.0/24 maxlen: 24
31.77.168.0/24 maxlen: 24
31.77.170.0/24 maxlen: 24
31.77.219.0/24 maxlen: 24
31.77.220.0/24 maxlen: 24
31.77.247.0/24 maxlen: 24
31.77.248.0/24 maxlen: 24
150.241.93.0/24 maxlen: 24
150.241.124.0/24 maxlen: 24
179.253.162.0/24 maxlen: 24
179.253.166.0/24 maxlen: 24
179.253.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a3:7c:c9:89:88:76:2e:21:e2:c3:2b:e0:ac:1d:b5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 3 22:17:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc0c7a9e5d1eebd30586a11d8dff9df622318879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:75:57:fe:1d:e4:11:72:64:d6:2d:50:a7:37:
bf:74:ee:5f:19:7e:fb:d9:f4:57:03:1d:08:76:70:
14:6a:af:17:ab:58:c8:7d:89:a6:e4:54:58:13:14:
4b:54:64:cb:8a:9b:0d:96:29:ce:d9:e2:07:f9:c5:
f0:11:3e:cb:78:36:2a:81:53:03:4c:ca:f1:29:61:
c9:0c:32:10:09:0d:ef:9e:c4:fc:0f:d9:a1:de:76:
4d:6e:b1:09:8a:70:45:df:e2:05:f5:b1:2d:55:7d:
08:40:e8:4c:ec:07:2d:cb:19:bc:61:b1:7f:e9:3f:
86:6f:ce:22:e2:d7:b7:e4:97:01:83:68:09:d9:62:
e3:a1:ef:f5:62:90:dd:ae:a1:b4:2f:60:b0:0f:fd:
93:95:da:db:68:f7:bc:65:ba:7e:58:75:32:f7:b9:
89:54:58:fc:3b:fd:d1:ae:56:0d:87:e9:87:cd:4e:
8a:87:58:72:a3:38:24:e1:51:ff:e3:eb:d8:c3:9e:
db:db:90:e8:23:af:5e:a8:8d:6f:b9:37:73:38:a0:
55:34:1a:a4:b1:24:07:05:b3:64:38:1a:dc:5c:8e:
a4:77:a7:9d:14:35:2b:9c:45:0f:de:1f:47:e9:c4:
fd:00:b6:4e:93:59:72:3d:b3:71:18:39:de:56:86:
8f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0C:7A:9E:5D:1E:EB:D3:05:86:A1:1D:8D:FF:9D:F6:22:31:88:79
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zAx6nl0e69MFhqEdjf-d9iIxiHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.182.0/24
31.77.56.0/23
31.77.109.0/24
31.77.138.0/24
31.77.168.0/24
31.77.170.0/24
31.77.219.0-31.77.220.255
31.77.247.0-31.77.248.255
150.241.93.0/24
150.241.124.0/24
179.253.162.0/24
179.253.166.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:04:df:b0:bf:be:0d:9e:7c:98:ec:7d:3b:7b:83:70:af:c6:
2e:2c:c1:91:29:0a:f3:28:b2:2f:4e:de:ef:73:8d:8c:3e:dd:
66:b7:c2:6a:49:f2:5c:f4:0d:fc:ef:e3:74:ea:46:e0:67:cc:
70:1b:ed:db:48:2e:4d:7d:09:cb:1b:16:bd:ab:bc:30:60:f2:
5b:b9:6e:03:16:00:6d:25:31:e5:b8:78:e1:9e:b7:a5:85:5c:
5f:0e:90:16:f6:b0:2d:e4:cb:47:87:ce:02:07:68:aa:a2:38:
6e:37:ff:e2:f7:ee:ac:19:c4:3c:60:63:f0:8b:c1:93:69:9e:
e2:5f:db:05:d8:8a:0d:eb:ed:d5:9d:32:dd:f1:7d:4b:0b:86:
51:fa:41:57:b6:a8:a4:17:1c:84:84:c1:1b:1b:ea:94:ce:45:
99:ed:cd:52:02:96:32:c2:59:d6:0c:b7:37:6a:19:d9:d7:64:
08:c6:d3:9b:c9:8c:b4:7b:36:7f:0d:60:ca:89:67:70:84:be:
12:00:e0:d5:c5:59:cd:2c:5c:25:07:7b:26:ec:74:d7:c0:c6:
c8:11:f8:cf:ac:ce:0a:3f:0e:02:a0:db:4f:b0:59:be:9f:d1:
17:a6:e0:73:5d:42:75:06:9b:89:8a:32:70:8a:72:79:f7:5e:
b3:f9:89:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:26:00 2026 by rpki-client