Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/aC3VwbCgfHRxfWJVYRHrE2rOPSE.roa
File: aC3VwbCgfHRxfWJVYRHrE2rOPSE.roa (raw, json)
Hash identifier: G3CQbccj9gShQmkHxVkwX9CO7S/KtJQUT5kFaAGYhwU=
Subject key identifier: 68:2D:D5:C1:B0:A0:7C:74:71:7D:62:55:61:11:EB:13:6A:CE:3D:21
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F90064032FCA5E2D0C61858080C533523
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/aC3VwbCgfHRxfWJVYRHrE2rOPSE.roa
Signing time: Thu 23 Jul 2026 17:29:16 +0000
ROA not before: Thu 23 Jul 2026 17:29:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402643
IP address blocks: 2.26.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:06:40:32:fc:a5:e2:d0:c6:18:58:08:0c:53:35:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 23 17:29:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=682dd5c1b0a07c74717d62556111eb136ace3d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a5:02:65:12:b6:36:f7:23:fe:b2:9f:0b:ba:
0b:9b:ce:61:a5:e9:f1:d5:12:85:52:f3:44:da:6b:
6d:26:f3:61:ef:b1:f2:d8:4e:e2:cb:86:cf:6c:a2:
2b:7a:9a:b2:30:06:be:23:12:da:2f:e7:41:b3:a3:
63:ac:ea:24:8f:f8:f2:a4:82:63:b6:10:57:29:06:
75:d7:f5:88:b3:3d:f2:91:07:42:68:bd:0e:8b:a9:
75:ce:88:3e:0d:ae:27:ab:6e:7a:e9:87:2e:75:4b:
65:51:ff:76:52:5c:49:28:94:9a:7a:11:52:69:28:
37:0b:8d:dd:59:33:20:3b:bf:87:98:7d:24:0c:50:
af:60:92:9f:86:d4:4b:bc:c6:bd:c4:2f:48:d1:c4:
da:0f:bf:bc:b6:70:f5:14:67:2e:0d:46:54:e2:a6:
36:12:88:32:67:2a:19:2b:e7:06:3d:08:cd:b2:a5:
87:13:4a:23:ea:3f:e9:d9:69:7c:d5:4f:f9:1b:22:
9a:22:90:21:bd:51:e7:42:01:99:47:77:01:0a:c5:
51:62:cd:9f:f1:29:7e:b0:71:25:66:d2:a5:d7:40:
fe:1f:00:40:14:86:1b:f4:c5:6d:68:63:ef:79:31:
4f:c8:eb:16:41:6b:dd:15:82:65:05:2f:b0:a7:4c:
0b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2D:D5:C1:B0:A0:7C:74:71:7D:62:55:61:11:EB:13:6A:CE:3D:21
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/aC3VwbCgfHRxfWJVYRHrE2rOPSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.187.0/24
Signature Algorithm: sha256WithRSAEncryption
93:a2:55:f1:44:91:e9:02:5f:f6:b1:6f:8a:ad:46:e3:d1:08:
f4:d8:d4:68:91:84:69:74:bc:5c:8f:73:0c:15:3f:bc:c3:72:
41:47:0d:02:4e:22:74:40:12:d7:f7:5a:cf:57:37:ee:ca:43:
53:74:aa:80:a9:16:72:61:0f:fe:70:ce:17:34:c0:be:a7:73:
41:3c:59:5d:19:1e:1b:3b:77:10:42:c9:0a:85:f4:9c:2d:86:
6f:7c:a0:ed:40:95:81:13:9f:0b:5d:ab:3c:5e:54:f4:fc:de:
4d:67:f4:a9:bf:38:a8:86:d2:e3:c4:9c:3d:1b:3f:59:8f:87:
82:9f:53:7b:f2:30:96:e5:e7:f8:03:e2:ea:76:dc:39:76:6a:
fc:c1:34:ed:de:b5:64:06:9b:1a:1b:a4:e6:3f:9a:3e:42:4f:
87:73:1d:c4:a6:0d:f7:b1:d4:d1:bb:96:77:3b:91:3a:31:b9:
de:e5:f0:a7:26:b2:43:d6:54:82:ee:bf:6f:ff:58:20:88:c3:
73:69:39:2e:21:57:92:fb:72:37:74:8d:97:c7:11:06:9b:f6:
69:39:26:73:5b:28:60:2d:ab:f7:a5:a7:c3:ba:e0:2a:f1:28:
3f:90:bc:fc:b1:62:e6:bb:18:d3:ec:f1:5e:4b:71:c2:35:e0:
e6:8d:2f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:00:03 2026 by rpki-client