Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HrLSUtxVco8sp2q64mmsPosAxfQ.roa
File: HrLSUtxVco8sp2q64mmsPosAxfQ.roa (raw, json)
Hash identifier: vfOT03FCKGS7+BwMezhtzzL3+BjMlknmv8gx8sODyzw=
Subject key identifier: 1E:B2:D2:52:DC:55:72:8F:2C:A7:6A:BA:E2:69:AC:3E:8B:00:C5:F4
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F8AE561D2D0EB4A39CFFACDB35F7D837A
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HrLSUtxVco8sp2q64mmsPosAxfQ.roa
Signing time: Wed 22 Jul 2026 17:35:16 +0000
ROA not before: Wed 22 Jul 2026 17:35:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402402
IP address blocks: 2.26.188.0/24 maxlen: 24
31.77.224.0/24 maxlen: 24
31.77.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:e5:61:d2:d0:eb:4a:39:cf:fa:cd:b3:5f:7d:83:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 22 17:35:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1eb2d252dc55728f2ca76abae269ac3e8b00c5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:95:41:bc:26:54:96:0b:ad:ba:47:d2:dc:b3:
98:8f:62:2d:32:39:26:8c:87:91:62:a7:23:35:71:
19:3e:bd:5d:03:cc:da:e0:a1:ad:ae:f1:a1:f8:08:
5e:23:70:55:54:bb:1a:bb:25:78:65:23:09:3e:3e:
38:be:55:ef:eb:53:75:8f:e4:a2:e7:86:b1:f9:f5:
af:3e:14:b7:c1:be:9f:45:ff:06:cb:a3:34:16:09:
2b:64:f5:61:47:ed:56:ee:48:8c:8a:4d:81:a3:88:
36:e3:eb:01:88:37:f6:7e:87:16:ea:d5:74:ac:9d:
59:b7:0c:b0:76:a8:9b:c0:09:be:de:0a:40:06:31:
3d:6c:7c:5f:51:b7:36:63:1b:d0:f2:3c:2e:31:6f:
e0:b0:27:70:27:79:5b:b8:1a:e0:1e:3a:46:f5:c4:
5f:c0:f8:9a:26:7d:2b:0c:6e:9b:0d:a3:72:db:81:
f2:02:8e:f5:80:77:51:62:6d:29:a3:29:57:00:91:
5e:c5:cc:61:1d:66:79:5f:0f:50:29:7a:33:c1:dd:
58:6c:79:ff:dd:ce:9f:be:47:fd:91:73:70:66:22:
be:14:d6:08:0d:b8:b4:ca:fa:36:4c:87:a7:58:dc:
72:24:7d:cf:52:9d:73:49:5e:00:2f:60:4a:72:0e:
97:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B2:D2:52:DC:55:72:8F:2C:A7:6A:BA:E2:69:AC:3E:8B:00:C5:F4
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HrLSUtxVco8sp2q64mmsPosAxfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.188.0/24
31.77.224.0/24
31.77.237.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:5e:b0:48:dc:a9:8f:57:0f:f8:ce:bd:03:4e:88:85:9f:9c:
2f:7c:6f:88:63:3d:92:64:c9:ae:18:72:56:ee:8d:f8:5a:d3:
c9:21:3a:a1:79:f3:ca:33:8a:d3:a1:7d:f2:af:3a:bc:12:d8:
45:b3:93:07:e1:1f:30:c1:13:b2:ce:04:22:97:c7:3e:96:24:
95:9e:05:d7:3c:c6:19:54:b1:53:a3:44:cf:96:83:83:74:a1:
a5:8a:76:3e:a5:0a:b8:5a:38:f9:90:66:dd:8a:10:bc:80:c5:
6b:36:f0:4e:ad:84:0e:4b:fc:de:57:73:d9:e7:ea:cb:6d:3f:
29:5b:4d:7a:38:7e:a1:8f:77:a4:72:6d:33:06:c6:c8:c9:42:
47:ff:2f:0c:fd:22:ce:08:da:85:6a:77:a3:6b:e2:5d:2b:e3:
01:32:0a:0f:f9:0f:e3:1c:d5:07:ef:2e:17:b6:ab:36:5b:b8:
1b:08:c0:bd:91:0d:7f:6a:f3:cf:e2:4a:b2:82:44:ad:01:a1:
d3:24:42:98:06:60:69:a6:f1:8b:12:bd:49:68:0b:57:ef:5c:
ff:5d:21:a2:56:83:97:69:18:21:7f:b2:05:9e:44:2b:29:c3:
5a:6d:0c:2a:06:30:a1:0b:f0:a5:1f:c0:ed:e7:ec:a2:a6:50:
a1:e4:bd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:30 2026 by rpki-client