Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/UFdIumkAAXXC9P3OBCxjKVjycu4.roa
File: UFdIumkAAXXC9P3OBCxjKVjycu4.roa (raw, json)
Hash identifier: pvu6lb8MflKvVbM7mbDxme48vnTVI730bf3Ca0cYm00=
Subject key identifier: 50:57:48:BA:69:00:01:75:C2:F4:FD:CE:04:2C:63:29:58:F2:72:EE
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F3D78A5E5863E44538890185BEC34B43C
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/UFdIumkAAXXC9P3OBCxjKVjycu4.roa
Signing time: Tue 07 Jul 2026 16:45:44 +0000
ROA not before: Tue 07 Jul 2026 16:45:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199479
IP address blocks: 2.26.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3d:78:a5:e5:86:3e:44:53:88:90:18:5b:ec:34:b4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 7 16:45:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=505748ba69000175c2f4fdce042c632958f272ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e0:15:51:cc:f7:85:56:7f:3d:d0:7f:4d:1b:
ca:ff:c3:5e:04:ac:05:f9:2b:bc:50:cb:2d:5c:10:
91:f5:cb:01:fd:6f:6d:89:e9:51:1f:dd:f4:5e:e1:
a6:bf:fc:2d:00:bb:35:f1:2c:73:76:78:f3:a0:da:
d4:04:8d:62:d3:00:13:36:1e:3d:c1:89:ba:3c:b2:
d6:d9:a5:ed:ac:fa:e3:46:20:0c:65:52:65:b8:28:
c7:7c:91:12:c3:37:64:37:24:b5:21:65:cb:72:0d:
6a:23:32:a3:d1:b3:4c:dc:86:13:ae:b1:94:a9:7d:
5d:0b:65:12:ef:57:87:a6:03:45:a5:ac:d9:5e:5c:
44:fc:3d:6c:4b:de:5f:31:1a:4a:8b:55:c1:2c:f5:
f6:d8:14:2a:0e:06:57:04:79:b4:a8:6d:80:c9:cd:
e7:48:a5:24:8e:d7:cc:79:2b:fa:92:be:74:d8:49:
25:28:d9:a0:6f:35:63:0b:cc:e2:e3:25:71:0c:1a:
7b:c0:78:c7:e1:68:2a:0d:c0:17:64:fa:2c:49:cf:
cf:17:32:15:b3:2f:9a:7a:76:72:0b:05:ec:2c:6c:
ed:80:70:c2:77:43:cc:f2:2a:c4:e1:3e:d2:bc:19:
7a:7c:0f:b1:29:9c:2d:8f:83:f3:77:e8:e2:c4:c9:
41:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:57:48:BA:69:00:01:75:C2:F4:FD:CE:04:2C:63:29:58:F2:72:EE
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/UFdIumkAAXXC9P3OBCxjKVjycu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.126.0/24
Signature Algorithm: sha256WithRSAEncryption
53:d7:57:ec:04:e0:85:8b:68:fb:20:dd:59:e4:3c:a7:f6:b8:
23:6f:93:61:bb:70:7e:4b:71:68:cb:30:07:42:66:54:30:85:
e9:4b:bf:17:6f:49:7d:6f:d0:71:fb:03:82:25:49:49:52:c2:
d7:3f:82:cf:a2:25:46:f9:75:55:e1:37:c6:2f:f1:b4:16:3b:
4e:89:d4:71:7f:42:23:ef:69:c1:76:eb:dc:88:2b:70:ac:b1:
f2:1a:b6:10:17:31:00:94:7a:c9:e2:60:7e:0e:45:49:12:90:
69:d2:e4:94:36:ff:0d:ea:c0:07:fd:c4:ae:6c:df:97:79:b0:
b8:e0:c7:c8:c3:a8:b4:40:55:ba:86:77:a8:a9:82:5a:60:c4:
53:b1:f7:60:4a:ac:0c:63:08:b7:d2:67:be:70:7c:f0:5e:40:
f6:72:b4:f3:53:70:81:ed:a8:0a:d9:55:7b:42:d2:d4:6b:4b:
56:48:f7:4b:2c:be:62:51:33:61:aa:71:0a:ce:6c:31:5b:e8:
1d:10:5d:c4:8d:36:60:73:3a:2d:24:79:7f:b2:56:8a:b4:a6:
e0:08:93:6a:64:83:fe:f7:7a:a2:b6:aa:a6:76:74:cc:20:09:
b5:f8:df:a4:44:22:32:a7:bd:b2:e1:c2:0d:3c:47:c8:61:d2:
4f:c6:3f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:22:26 2026 by rpki-client