Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_7f9xEzeI7B8LwVNdhWgBNc0cUc.roa
File: _7f9xEzeI7B8LwVNdhWgBNc0cUc.roa (raw, json)
Hash identifier: eCmtnqzpcSyWpobCLUWhycUvogJ6/MMwv1p66SgO6Eg=
Subject key identifier: FF:B7:FD:C4:4C:DE:23:B0:7C:2F:05:4D:76:15:A0:04:D7:34:71:47
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E1D0799CEC927851472CA908691337328
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_7f9xEzeI7B8LwVNdhWgBNc0cUc.roa
Signing time: Tue 12 May 2026 16:31:37 +0000
ROA not before: Tue 12 May 2026 16:31:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4593
IP address blocks: 2.26.148.0/24 maxlen: 24
2.26.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:07:99:ce:c9:27:85:14:72:ca:90:86:91:33:73:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 12 16:31:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffb7fdc44cde23b07c2f054d7615a004d7347147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:aa:48:20:cb:e0:e7:b5:11:53:1e:60:66:82:
98:7b:6c:8c:94:da:0d:9c:1d:5c:0d:e3:35:16:43:
2c:4a:ef:00:7d:18:4b:fd:32:0c:95:ee:6d:f9:d4:
f1:c9:a1:39:57:64:51:c7:6a:71:e8:ff:38:af:0b:
57:fb:ad:f3:c9:31:3e:f2:48:4a:72:2f:c7:29:3c:
d7:64:5a:67:86:c6:4b:b0:d0:f1:45:f5:60:e5:39:
e7:cb:be:ea:d2:f0:c0:41:3f:00:94:5a:68:bf:9a:
40:57:70:be:5e:f5:d0:a8:c0:8f:5e:08:f3:c1:a4:
53:63:fd:81:8d:b2:90:8a:95:1f:72:48:1c:c5:5b:
9e:2b:17:15:bb:6f:f6:1a:18:a8:09:45:56:f7:dd:
e3:0f:3e:2b:5a:3f:95:c4:12:00:bb:93:8d:c4:5c:
7a:a4:d4:82:d4:17:d8:15:69:8b:46:34:ec:2d:a4:
eb:ed:28:e9:14:9d:0a:c8:ee:12:14:56:a9:8c:12:
15:15:6b:cf:e0:15:9b:92:ae:8b:c3:8d:21:d8:d9:
1e:c1:fc:e2:65:89:24:3b:c9:33:96:e0:47:90:13:
35:b8:fb:59:c6:99:63:3a:99:24:c8:91:8c:c9:ce:
d8:49:8b:8e:1b:8f:fc:44:bd:50:3a:87:7d:88:75:
ed:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B7:FD:C4:4C:DE:23:B0:7C:2F:05:4D:76:15:A0:04:D7:34:71:47
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_7f9xEzeI7B8LwVNdhWgBNc0cUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.148.0/24
2.26.219.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:89:c2:33:df:41:8e:b9:df:a4:bc:e7:b7:ba:0d:c6:e5:9d:
54:4f:00:23:56:36:b6:15:90:e8:b0:bd:36:aa:41:54:53:c6:
2e:ba:8b:7f:78:47:c4:30:58:97:dd:16:2d:d8:a9:63:94:14:
7f:e7:11:de:00:88:a9:1c:2d:00:f5:fe:d1:05:30:1b:64:fe:
23:3d:ad:c7:6e:1c:59:8a:6a:74:19:e3:da:77:0d:0d:e4:43:
fa:8a:1c:8e:0a:4a:b4:03:2d:7b:ce:6f:3c:97:aa:6f:85:e8:
c4:77:60:0a:d1:c3:2e:d7:8d:af:ec:cf:69:b4:39:ce:7a:e5:
6e:7b:04:91:f8:87:01:fa:26:57:fe:c5:7f:fa:6b:82:67:10:
f6:fb:74:1d:0f:66:9b:b9:7f:aa:4f:52:d8:ce:ee:55:a7:4c:
31:41:a3:f9:07:80:c6:17:98:4d:93:00:4a:69:d7:88:39:c4:
95:28:28:99:43:8d:d7:1b:a1:55:4f:42:6f:2b:a2:cc:09:1a:
d8:5d:50:d0:0d:3a:72:e7:32:4a:9c:28:23:22:27:ec:a0:7e:
d0:5c:26:7f:b4:23:8a:ed:56:d9:e8:da:ef:52:0a:cf:c8:fc:
2c:32:10:3c:dd:0e:c5:87:ac:95:db:b1:d2:58:be:7f:aa:c1:
4c:9e:fe:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:56:28 2026 by rpki-client