Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/466jOCbpjoTPNa3jUW-YrJyMryM.roa
File: 466jOCbpjoTPNa3jUW-YrJyMryM.roa (raw, json)
Hash identifier: a0r9va7ffA97Oum7pVSnyj8HXeJHHqqqGnU5h6/QMvs=
Subject key identifier: E3:AE:A3:38:26:E9:8E:84:CF:35:AD:E3:51:6F:98:AC:9C:8C:AF:23
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F15B671D98EF94071D04A5389E5EA66F8
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/466jOCbpjoTPNa3jUW-YrJyMryM.roa
Signing time: Mon 29 Jun 2026 23:28:25 +0000
ROA not before: Mon 29 Jun 2026 23:28:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199529
IP address blocks: 2.26.78.0/24 maxlen: 24
2.26.79.0/24 maxlen: 24
2.26.94.0/24 maxlen: 24
2.26.95.0/24 maxlen: 24
2.26.127.0/24 maxlen: 24
2.26.146.0/24 maxlen: 24
13.143.142.0/24 maxlen: 24
31.76.37.0/24 maxlen: 24
31.76.123.0/24 maxlen: 24
31.76.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:15:b6:71:d9:8e:f9:40:71:d0:4a:53:89:e5:ea:66:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 29 23:28:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3aea33826e98e84cf35ade3516f98ac9c8caf23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:93:c3:6c:3c:99:4a:f8:3d:18:e5:35:6e:
f7:fe:4e:8f:11:88:bc:f9:29:75:47:b5:d7:0e:8a:
c1:f5:1b:e5:da:52:00:ed:6c:40:64:ac:38:c3:aa:
86:d2:0d:0d:d7:5d:8c:9b:3d:29:de:aa:93:b6:94:
7b:5b:02:b9:31:e1:e6:75:b5:48:e0:f3:bc:5e:61:
a9:04:a0:46:46:89:b4:d3:5a:06:cb:bb:f7:3e:41:
f7:5c:38:11:bf:c1:b2:45:5d:b5:16:95:9a:10:fc:
b0:5e:98:f5:17:c7:00:58:cb:cf:24:47:6a:9f:d7:
fd:f2:c2:f6:69:93:f5:ce:ba:7a:fc:ff:79:21:bd:
1c:60:d1:ce:5a:49:85:f9:96:cd:ee:d2:18:d2:c3:
70:0c:01:08:59:8a:6a:9a:8e:f4:f4:d1:1a:22:2b:
f5:c6:f1:ea:a1:af:b5:1a:da:02:7a:fb:a1:e3:7c:
ce:2c:17:8f:a0:f9:50:3e:33:49:4e:f3:4f:ce:48:
64:13:4b:84:7e:39:36:d5:75:62:a8:db:e5:50:d9:
86:8e:e7:21:c7:ec:4d:8b:5e:2f:68:2f:de:dd:6d:
12:3e:6e:42:d7:09:6d:b5:ed:37:f0:bc:c5:a8:24:
67:fd:af:da:ba:24:dd:09:76:d0:59:b0:c6:68:c4:
9a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AE:A3:38:26:E9:8E:84:CF:35:AD:E3:51:6F:98:AC:9C:8C:AF:23
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/466jOCbpjoTPNa3jUW-YrJyMryM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.78.0/23
2.26.94.0/23
2.26.127.0/24
2.26.146.0/24
13.143.142.0/24
31.76.37.0/24
31.76.123.0/24
31.76.253.0/24
Signature Algorithm: sha256WithRSAEncryption
91:a9:5a:ac:9f:f0:00:54:a8:52:22:03:00:ac:d6:72:ae:f1:
2d:b2:d8:2f:71:d7:dd:bc:da:ce:35:7f:b4:08:6e:80:65:8b:
8a:72:1a:4a:81:c2:89:f1:8a:a2:29:3a:cb:96:59:14:c3:ed:
61:47:d7:4e:1f:e3:2e:75:a9:be:92:8e:93:84:26:75:9e:88:
44:56:e5:82:84:be:30:0d:9e:db:3c:af:27:9e:84:8c:68:41:
10:6f:ec:89:21:ee:fb:ab:05:f1:60:54:ff:c2:8b:55:51:3e:
7b:84:c7:e9:2c:d0:f8:d1:a0:f2:3a:23:e5:32:0c:09:a4:32:
45:f9:37:7a:37:f3:ed:f4:49:ba:40:be:77:b9:f3:97:b1:e9:
a0:ac:d1:b1:7c:8a:38:bc:4a:ec:2b:3e:02:8e:bf:f6:84:79:
36:ea:3e:a9:20:f1:4f:ab:36:21:57:8b:98:ee:79:83:d7:9a:
53:3b:02:a2:10:1a:d4:d2:4a:28:06:1e:81:1b:94:77:ff:c1:
4a:53:d2:5f:f2:46:01:6c:21:14:12:c4:5a:7c:aa:7c:ab:a4:
69:5b:16:4e:18:ef:2c:4f:fe:21:b0:26:5e:cb:73:eb:2e:90:
f8:98:0c:b4:da:39:6f:34:04:79:25:92:15:fb:17:08:f2:80:
03:a8:dc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:05 2026 by rpki-client