Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zYniga9CKs0vbjSy9tdLimQVOr4.roa
File: zYniga9CKs0vbjSy9tdLimQVOr4.roa (raw, json)
Hash identifier: 6yHYGiSHFE3+DKjQf2PAw8DFpUs2KjStNpYRU97bHfA=
Subject key identifier: CD:89:E2:81:AF:42:2A:CD:2F:6E:34:B2:F6:D7:4B:8A:64:15:3A:BE
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FE2A0BADE5F99BEA8812666E4D61010B7
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zYniga9CKs0vbjSy9tdLimQVOr4.roa
Signing time: Sat 08 Aug 2026 18:26:52 +0000
ROA not before: Sat 08 Aug 2026 18:26:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400402
IP address blocks: 2.26.167.0/24 maxlen: 24
2.27.140.0/23 maxlen: 24
2.27.196.0/22 maxlen: 24
13.143.52.0/22 maxlen: 24
31.76.88.0/24 maxlen: 24
31.76.89.0/24 maxlen: 24
31.76.90.0/24 maxlen: 24
193.23.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e2:a0:ba:de:5f:99:be:a8:81:26:66:e4:d6:10:10:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 8 18:26:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd89e281af422acd2f6e34b2f6d74b8a64153abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a4:59:e4:43:bf:2d:96:3a:d3:e3:75:bd:5a:
60:06:ae:7c:5b:0f:29:92:f0:3c:36:8c:2e:76:08:
4b:bb:f3:d2:cd:db:da:56:b1:0a:9d:ee:27:ba:cf:
29:01:56:a5:e8:a6:90:36:77:0f:32:98:63:41:fe:
10:2c:5a:2a:5b:7a:8f:5d:1e:5e:eb:77:64:35:ce:
14:b0:3f:0c:24:2e:f1:1d:f1:e6:df:80:23:85:7a:
c0:e1:49:79:af:10:b3:9b:7f:69:f6:ec:59:d2:05:
e5:79:f0:a7:84:99:d9:4d:e7:99:17:2c:4b:73:5c:
e5:69:cb:1c:29:83:d3:3a:ed:13:3c:69:5d:20:83:
05:f5:30:9b:37:b8:d9:1f:78:ff:4b:97:b9:5a:8b:
2f:2f:68:b4:32:66:f7:33:c5:8e:ea:2e:83:05:56:
8e:32:f4:63:db:cb:c4:11:ea:4d:71:b7:d4:04:51:
74:a7:98:f0:05:fb:b3:92:e2:e4:1f:10:0a:fe:2f:
cd:7f:ca:90:c5:9d:ea:a0:87:1c:01:63:fe:94:dd:
49:58:1d:15:17:a1:bc:b5:b8:39:fc:4d:91:41:9d:
23:0c:4b:e2:71:ec:b2:ad:09:be:38:2d:22:da:d1:
8d:95:84:14:43:e3:31:4e:4f:6f:07:91:2d:9d:a2:
20:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:89:E2:81:AF:42:2A:CD:2F:6E:34:B2:F6:D7:4B:8A:64:15:3A:BE
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zYniga9CKs0vbjSy9tdLimQVOr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.167.0/24
2.27.140.0/23
2.27.196.0/22
13.143.52.0/22
31.76.88.0-31.76.90.255
193.23.212.0/22
Signature Algorithm: sha256WithRSAEncryption
82:17:c9:2c:1c:98:9d:35:4a:d4:e5:76:b7:60:8a:68:19:27:
b3:e9:14:c7:07:e8:f5:b3:52:8a:2b:d0:15:23:9f:02:96:78:
cf:4b:6a:ef:f5:59:9d:a8:4d:ed:78:b5:59:2d:e1:9a:df:1f:
a4:13:bf:5b:fb:71:cb:52:49:5f:45:68:3f:ec:88:ac:29:fa:
dd:23:f2:d1:74:31:39:f3:e1:65:68:c9:c4:49:69:fb:61:1b:
7c:f6:a3:d8:e8:d0:d1:ff:51:94:34:24:92:a8:2c:75:88:0a:
d5:f7:ea:87:13:cf:88:2b:d3:9d:95:0a:d9:ef:38:06:41:25:
71:b8:a8:cf:f1:10:f5:60:b1:cc:32:34:41:0e:53:f7:b6:4d:
0e:ef:b6:5f:e6:16:ea:e4:2e:6c:eb:f4:ad:08:b3:dd:de:5a:
ab:b0:cc:29:37:93:b8:87:e7:78:6b:2d:25:f8:59:7f:d3:73:
14:f3:1c:8e:9d:dd:a8:82:34:cb:de:bd:25:82:00:95:fc:d1:
d2:e3:07:26:c3:e8:f0:75:f7:a6:16:72:7c:53:8e:39:40:fa:
8d:af:ab:a3:29:eb:e0:1d:55:ca:89:e0:1b:57:82:2c:31:2f:
ac:53:45:e0:8c:0b:0b:98:20:1c:e5:cd:65:68:9d:33:3d:73:
52:1f:b6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:32:13 2026 by rpki-client