Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/gqk_jDm8M_zRauCdhMmuif8yMmc.roa
File: gqk_jDm8M_zRauCdhMmuif8yMmc.roa (raw, json)
Hash identifier: fxfyKlEvK/KWjjCwA4Hpg5x/xS/kN75BI77YS2YiqgQ=
Subject key identifier: 82:A9:3F:8C:39:BC:33:FC:D1:6A:E0:9D:84:C9:AE:89:FF:32:32:67
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F05B861111577AEF3347FCA11EBA7083A
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/gqk_jDm8M_zRauCdhMmuif8yMmc.roa
Signing time: Fri 26 Jun 2026 20:56:37 +0000
ROA not before: Fri 26 Jun 2026 20:56:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202051
IP address blocks: 2.26.160.0/24 maxlen: 24
2.26.181.0/24 maxlen: 24
2.27.105.0/24 maxlen: 24
2.27.108.0/24 maxlen: 24
144.31.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:05:b8:61:11:15:77:ae:f3:34:7f:ca:11:eb:a7:08:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 26 20:56:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82a93f8c39bc33fcd16ae09d84c9ae89ff323267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bf:e3:0e:b5:b1:54:91:ab:df:de:36:49:d2:
7c:3e:0f:ae:e3:25:56:c0:94:76:56:69:a0:91:7c:
6d:68:02:d9:fa:d3:af:38:00:ea:d9:96:50:a5:48:
99:dd:7d:9e:03:a5:fd:59:5b:76:ec:b1:9f:c6:a5:
51:bc:00:c7:d6:e1:e4:a1:f4:90:1e:25:24:37:a1:
2f:ce:42:a2:d0:82:da:a2:e5:3d:b5:18:7f:fe:41:
7c:8c:90:13:d4:48:80:5a:52:74:5b:d3:ae:42:ce:
ec:dd:00:00:69:7a:25:62:87:34:6d:ee:97:a6:08:
ec:43:0c:48:84:f7:8c:b6:9c:39:7c:4d:26:ba:2f:
80:fc:99:6d:ae:3f:4b:af:a4:28:aa:6b:3b:7f:b7:
9a:f1:67:4b:b6:be:38:69:d2:0d:c6:83:ff:62:c0:
fa:33:b4:9e:bd:fd:af:45:5b:3a:81:5c:30:47:18:
8d:0d:a7:54:c6:60:3b:3c:15:e5:ae:db:42:ad:24:
7f:7b:0b:f0:e4:47:99:93:f3:b0:2e:9d:25:14:eb:
50:15:23:54:31:51:ea:69:5a:19:74:c4:c4:23:36:
60:4b:ee:67:0b:88:18:1a:79:7f:91:bc:65:c0:24:
1e:56:01:4c:06:be:55:99:e3:57:32:da:df:06:8f:
46:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A9:3F:8C:39:BC:33:FC:D1:6A:E0:9D:84:C9:AE:89:FF:32:32:67
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/gqk_jDm8M_zRauCdhMmuif8yMmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.160.0/24
2.26.181.0/24
2.27.105.0/24
2.27.108.0/24
144.31.159.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:db:59:f7:56:e1:32:13:ae:d5:00:5f:d5:0e:9d:3d:20:d1:
ea:16:c6:42:07:fa:0e:d5:ea:1d:7b:7d:25:19:2a:16:fa:4e:
33:8e:f7:cd:5f:77:11:ce:01:29:30:3c:4b:9d:92:27:7d:d8:
a8:29:05:8a:d1:06:e9:85:00:09:0a:f2:66:65:02:12:59:a0:
59:14:e3:46:a3:cc:a3:a3:d2:e6:0a:67:17:81:79:e4:c5:35:
89:c7:90:0c:ac:e8:f4:74:8f:d4:23:a1:03:11:be:c2:6c:4c:
27:e6:1e:04:0e:64:63:3c:73:31:e1:c7:5c:18:8f:e1:68:1e:
7f:55:3d:b0:b1:12:f2:66:15:c9:fb:03:4a:b9:d8:89:b9:9a:
e7:ac:d4:02:76:0b:d3:2a:2f:a7:ca:34:8a:2d:cc:65:35:ae:
55:6d:c4:23:2e:32:c9:ca:25:2c:e5:d7:88:f0:d4:05:18:77:
34:d8:a4:12:21:61:05:18:ff:14:9a:f3:0a:83:39:5d:a6:1f:
08:f4:4f:25:bc:3e:cf:e0:e7:7e:f0:de:fb:e6:43:ff:2e:4d:
58:5e:0c:a0:c3:bd:d6:1e:bd:1e:ef:dc:7c:3a:b7:c1:82:2c:
7d:27:04:01:7b:15:5f:03:fe:0e:c7:c7:81:0e:f0:22:51:80:
aa:ff:54:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:40:38 2026 by rpki-client