Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8kZhjRH01ITeXP6zL55OPZk2420.roa
File: 8kZhjRH01ITeXP6zL55OPZk2420.roa (raw, json)
Hash identifier: D7Wei8hwZ+fcDQ+vrpPpYaBMxR122d7YbUNUZqW2ytM=
Subject key identifier: F2:46:61:8D:11:F4:D4:84:DE:5C:FE:B3:2F:9E:4E:3D:99:36:E3:6D
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0C579C9729FAD9A612BBB41A228CBC934
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8kZhjRH01ITeXP6zL55OPZk2420.roa
Signing time: Mon 21 Sep 2026 19:38:08 +0000
ROA not before: Mon 21 Sep 2026 19:38:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218731
IP address blocks: 2.26.182.0/24 maxlen: 24
2.26.186.0/24 maxlen: 24
31.77.56.0/24 maxlen: 24
31.77.57.0/24 maxlen: 24
31.77.109.0/24 maxlen: 24
31.77.138.0/24 maxlen: 24
31.77.168.0/24 maxlen: 24
31.77.170.0/24 maxlen: 24
31.77.219.0/24 maxlen: 24
31.77.220.0/24 maxlen: 24
31.77.247.0/24 maxlen: 24
31.77.248.0/24 maxlen: 24
150.241.93.0/24 maxlen: 24
150.241.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:79:c9:72:9f:ad:9a:61:2b:bb:41:a2:28:cb:c9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 21 19:38:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f246618d11f4d484de5cfeb32f9e4e3d9936e36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:46:f5:d9:5b:6f:53:df:c8:79:8e:07:8e:c7:
47:cd:39:57:2e:fe:df:d7:ea:b5:5a:eb:09:93:f5:
1a:2c:bb:eb:25:da:11:93:6e:f9:79:5a:0e:4e:d0:
12:bc:ae:6c:00:7b:23:87:e4:d3:6f:dd:dd:cb:74:
f1:ff:49:5e:c4:b0:40:e5:5c:78:8f:56:c9:b5:f3:
d3:a2:98:81:31:c1:91:73:6c:37:ae:d8:98:5e:a8:
97:66:63:90:da:06:0d:dc:be:c8:0f:7b:68:b5:fc:
72:8e:30:f6:99:0c:b9:c2:7e:02:19:9f:c5:ab:a8:
06:e0:fd:80:bd:17:23:b2:6b:17:0b:43:fb:86:5b:
81:10:37:5c:fa:47:ca:ae:93:44:27:3b:47:1c:0e:
a0:f9:54:1d:5d:7e:1d:21:b5:1d:42:6c:cc:ca:6b:
2f:ca:0d:cd:56:d0:f8:9e:b0:68:06:29:6b:a9:b7:
b8:83:65:9c:c6:85:79:0a:33:03:00:40:58:8d:a7:
52:3b:e7:c7:08:d2:8f:2b:f7:d5:d3:91:29:eb:06:
94:db:12:a4:09:0c:44:9d:de:0c:2d:76:11:57:6c:
cf:60:29:ef:92:36:4d:5a:3a:6d:31:ff:5a:17:79:
ae:f3:20:87:90:d4:e2:42:22:ee:af:f6:a5:65:b6:
c2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:46:61:8D:11:F4:D4:84:DE:5C:FE:B3:2F:9E:4E:3D:99:36:E3:6D
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8kZhjRH01ITeXP6zL55OPZk2420.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.182.0/24
2.26.186.0/24
31.77.56.0/23
31.77.109.0/24
31.77.138.0/24
31.77.168.0/24
31.77.170.0/24
31.77.219.0-31.77.220.255
31.77.247.0-31.77.248.255
150.241.93.0/24
150.241.124.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:11:7b:b4:eb:07:ab:73:93:3b:82:b4:42:3e:24:ab:69:40:
74:e3:d5:00:50:f2:0c:fe:a8:10:56:8f:43:e0:1c:9a:15:5c:
a4:36:84:ee:30:cb:c9:77:3e:2b:c1:88:4a:63:7c:3a:a2:72:
31:df:3b:c2:3b:ba:8f:21:0b:5d:00:a4:58:03:34:3b:4c:2e:
d6:83:e8:78:c6:36:f0:45:72:2d:71:c4:cb:25:fb:5f:8f:96:
c2:f1:1e:8d:6f:1c:57:9c:1b:c2:29:2f:92:a5:cf:41:3d:76:
d5:ac:61:7b:5c:cf:a5:84:e2:c7:f1:6c:5a:25:b8:ea:f7:2c:
66:b1:e8:b3:49:7a:20:b4:5e:e2:1d:2f:02:92:f8:d0:10:65:
08:3b:88:05:ee:58:58:ec:38:31:ad:e8:8f:f8:87:97:17:e5:
35:00:c3:a8:88:e6:74:a5:25:32:9a:e0:66:5e:06:1d:d2:8a:
16:a2:41:b8:d9:6b:b2:47:e8:9c:ea:ac:69:26:24:97:7c:bb:
7e:d8:53:7d:1e:f9:c6:aa:67:72:df:1a:b7:73:93:d9:a9:b2:
35:9a:53:99:8a:29:a1:44:95:0a:4a:46:af:cb:6c:10:f2:f0:
b3:49:d0:fe:59:5e:ca:82:a9:78:cd:6a:f8:19:c9:2a:3e:75:
0e:9d:8f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:37:55 2026 by rpki-client