Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-honH3EjG0VGKIy8mz5PpO3AAzo.roa
File: 1-honH3EjG0VGKIy8mz5PpO3AAzo.roa (raw, json)
Hash identifier: suQcp+ynczp807fpcEdEEpQ1ESvXS5juwim3+y3MVBM=
Subject key identifier: FA:1A:27:1F:71:23:1B:45:46:28:8C:BC:9B:3E:4F:A4:ED:C0:03:3A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E137690147FBCE65EDE45A7D08E4E299C
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-honH3EjG0VGKIy8mz5PpO3AAzo.roa
Signing time: Sun 10 May 2026 19:56:37 +0000
ROA not before: Sun 10 May 2026 19:56:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58369
IP address blocks: 2.26.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:13:76:90:14:7f:bc:e6:5e:de:45:a7:d0:8e:4e:29:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 10 19:56:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa1a271f71231b4546288cbc9b3e4fa4edc0033a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0c:6a:d3:d8:b8:4f:18:74:d8:33:25:49:c1:
d3:2a:14:6f:27:98:4d:1e:70:e1:da:e0:09:d6:10:
65:d0:83:d1:3e:95:ad:53:a4:1b:40:83:1f:d3:0a:
fe:ba:4d:c3:c7:2a:62:bf:44:c8:d9:91:06:3c:16:
5d:90:3e:46:29:86:b6:49:7f:0f:e4:22:4e:1d:c4:
0e:3f:7b:fd:5d:9b:2f:d4:57:9d:b1:b8:d1:23:13:
95:7f:7d:4b:f0:c5:49:d0:0b:4d:b0:5f:b5:12:1a:
39:af:e6:78:35:24:c5:df:98:5d:c4:c2:f5:f5:ae:
b2:82:0f:13:f5:8c:6f:47:7e:4f:47:a3:f4:f0:d8:
4b:2f:b7:45:91:83:6d:d5:fe:2b:9a:61:8d:b3:7f:
06:e8:0b:da:37:8e:e9:7d:b6:14:b9:2a:71:90:b8:
14:4c:0e:89:bd:08:de:f5:a8:85:b5:c1:fc:09:7a:
2d:96:d0:fb:28:ed:80:df:ea:7d:3d:96:0c:4f:08:
e0:f8:88:d6:fe:64:b6:4b:36:e1:90:77:a7:f8:49:
99:27:6b:19:1e:1a:01:b3:4b:c1:29:83:ca:cb:a0:
21:99:09:8d:69:aa:5c:a2:d3:ef:bc:88:b1:f6:b0:
aa:3f:5a:e3:18:1b:4d:84:15:d7:c1:49:7c:3e:ef:
5e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1A:27:1F:71:23:1B:45:46:28:8C:BC:9B:3E:4F:A4:ED:C0:03:3A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-honH3EjG0VGKIy8mz5PpO3AAzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.232.0/22
Signature Algorithm: sha256WithRSAEncryption
14:f3:d2:a7:f9:98:1e:d9:c8:74:0f:2a:87:93:0a:58:17:19:
8f:bc:e5:53:1f:76:05:de:1b:12:e1:b1:27:45:71:77:46:01:
6f:37:88:cb:8e:8c:0b:e3:d7:0a:e9:7f:0b:d9:76:1c:e6:41:
16:1f:9b:4e:8b:d1:dc:8d:e1:82:c2:5d:8d:51:e0:cd:03:21:
d7:f2:5b:53:94:f1:2e:14:7c:77:8e:a6:ee:2e:94:51:2f:c8:
7e:45:02:b5:72:d9:ad:7e:37:53:f3:52:a3:e5:12:89:57:3c:
0b:dd:d6:79:1f:e8:10:af:28:72:eb:f5:9d:2f:06:53:ea:c1:
25:e1:78:11:23:79:12:d2:53:8e:2e:71:b3:af:0b:30:7e:b4:
46:6f:20:ab:fc:77:4b:25:ad:e7:a9:b6:e7:88:6f:25:e1:d4:
10:a6:f1:3e:0c:09:d8:8c:bb:f7:49:2d:f5:8a:f5:3c:e8:08:
e7:e4:c4:23:07:37:4e:c2:e5:98:c3:52:79:e8:64:1b:58:93:
c1:00:a8:ae:71:1b:35:dc:bb:30:c2:89:da:74:b5:75:8c:91:
2d:42:5e:ff:64:c6:bd:2d:2b:fa:8d:15:fd:48:dc:16:49:4c:
de:55:e7:a0:28:1d:86:c3:79:82:1d:06:23:a2:69:94:e7:27:
1b:46:22:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:08:32 2026 by rpki-client