Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/dHCqV2TzT3M4Ts6P2h0B6Tpb-oc.roa
File: dHCqV2TzT3M4Ts6P2h0B6Tpb-oc.roa (raw, json)
Hash identifier: me9A703dTfvdKqGIGHtefqB60Nbtgy/PTWwbaYuGjmA=
Subject key identifier: 74:70:AA:57:64:F3:4F:73:38:4E:CE:8F:DA:1D:01:E9:3A:5B:FA:87
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F86668D9CEDC91B99FE8F0DC28049A4BD
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/dHCqV2TzT3M4Ts6P2h0B6Tpb-oc.roa
Signing time: Tue 21 Jul 2026 20:38:15 +0000
ROA not before: Tue 21 Jul 2026 20:38:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203154
IP address blocks: 2.26.4.0/24 maxlen: 24
2.26.5.0/24 maxlen: 24
2.26.6.0/24 maxlen: 24
2.27.56.0/24 maxlen: 24
2.27.136.0/24 maxlen: 24
2.27.137.0/24 maxlen: 24
31.76.25.0/24 maxlen: 24
31.77.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:66:8d:9c:ed:c9:1b:99:fe:8f:0d:c2:80:49:a4:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 21 20:38:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7470aa5764f34f73384ece8fda1d01e93a5bfa87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6f:ad:6a:f9:4b:39:99:53:9c:41:ef:a1:bd:
42:7c:f2:bf:04:23:16:74:13:8e:c3:f5:d5:10:c9:
c4:50:60:b7:c9:3a:e7:55:0e:85:e4:7c:e3:35:74:
4b:80:31:55:2f:ed:66:88:82:85:89:14:33:7f:2d:
1f:ab:8e:1e:fb:24:48:9a:e0:7b:d5:53:96:e0:2e:
1a:3d:83:74:94:7b:74:b8:6a:7b:b7:63:43:0c:fc:
0d:8a:1d:b9:f7:4e:ba:7b:9a:a0:dc:d4:ec:5a:03:
7d:5e:0b:d5:7e:f0:84:2d:0f:99:48:cf:73:a9:dd:
96:fa:7c:9a:e6:c0:25:47:e0:b9:61:92:88:29:56:
f7:70:22:1c:07:55:64:39:24:c7:66:0d:4e:2b:f3:
63:71:34:37:64:36:ff:60:3d:10:f8:a2:4a:b4:43:
70:2a:e1:d2:3c:a3:cd:ee:30:df:22:b5:ee:30:ec:
63:e9:23:f9:a2:7a:cf:9f:fc:87:4f:f1:6b:d6:30:
57:6a:b4:23:0b:a4:ae:26:6d:9d:0d:16:7f:02:42:
6c:b7:9c:1a:4c:83:63:f7:8e:b1:1a:52:1c:45:24:
36:72:c9:c6:fe:1d:85:33:41:f6:35:38:db:49:d4:
d6:22:c6:f0:21:0c:87:2b:43:f7:f5:03:d2:49:0f:
ea:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:70:AA:57:64:F3:4F:73:38:4E:CE:8F:DA:1D:01:E9:3A:5B:FA:87
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/dHCqV2TzT3M4Ts6P2h0B6Tpb-oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.4.0-2.26.6.255
2.27.56.0/24
2.27.136.0/23
31.76.25.0/24
31.77.150.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:a1:09:09:46:97:10:cd:bc:7b:ea:d1:fa:bd:66:f1:41:bc:
f2:26:a6:3b:fb:f2:81:af:c0:5b:7b:87:88:88:ca:73:7f:eb:
9f:a7:83:21:0c:3d:27:84:d1:77:3f:07:dd:b5:55:18:ec:06:
f5:a8:a7:ca:f3:5e:04:28:1d:1c:15:5e:28:80:53:1c:1d:ed:
12:20:aa:42:cd:9e:fa:0d:cd:a4:79:07:14:3a:e2:5a:b6:92:
81:ab:f7:87:32:3f:d9:54:f1:6b:6b:f3:c9:51:55:54:3a:70:
17:6e:b2:65:e2:4b:09:ef:7a:cd:bd:d6:34:8a:9d:e5:97:09:
a7:77:55:f5:44:b2:2e:af:2e:c4:fc:f7:a4:11:1b:d5:b5:46:
83:68:a4:b2:92:32:b9:3b:31:e8:9a:3a:7c:99:6c:f9:2c:e0:
04:9c:77:96:ba:02:0e:80:cc:25:c0:4f:74:a2:c1:5f:52:da:
62:b0:e6:47:88:10:43:27:46:b0:09:36:99:60:49:0f:b7:96:
ca:14:f2:00:8e:4a:22:c6:89:c3:9d:5b:38:b7:1b:e1:1a:c4:
d1:c6:c1:36:4d:b8:ed:9b:63:d5:ff:c8:b1:a7:5a:94:b3:37:
51:44:34:89:b1:66:83:cf:b2:26:6d:94:08:dd:f9:1f:4e:e5:
6f:d8:69:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:32:25 2026 by rpki-client