Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lNE-80l2oTYB2Ry4vwcsI_X52Sg.roa
File: lNE-80l2oTYB2Ry4vwcsI_X52Sg.roa (raw, json)
Hash identifier: YklNLbJOANz4ImrdgqpXkLghj6+Kp9la8PrFGopLWDc=
Subject key identifier: 94:D1:3E:F3:49:76:A1:36:01:D9:1C:B8:BF:07:2C:23:F5:F9:D9:28
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F9008FC7011D54B9E894B5F963222DAF8
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lNE-80l2oTYB2Ry4vwcsI_X52Sg.roa
Signing time: Thu 23 Jul 2026 17:32:15 +0000
ROA not before: Thu 23 Jul 2026 17:32:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 2.26.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:08:fc:70:11:d5:4b:9e:89:4b:5f:96:32:22:da:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 23 17:32:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94d13ef34976a13601d91cb8bf072c23f5f9d928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:f3:dd:85:d5:af:c0:ce:eb:85:0c:01:61:
73:2b:33:c2:42:01:9d:f7:88:12:e5:e6:1b:ca:17:
70:fb:61:47:a2:0c:27:f9:9e:d9:6f:2f:bb:40:f2:
79:39:2d:f7:8a:cc:97:fc:3c:6e:93:c4:1c:61:76:
11:da:54:cb:79:78:a8:c0:7b:4d:97:6c:26:02:df:
52:e0:98:97:bb:96:8f:e1:38:19:48:58:47:88:ca:
8a:f5:92:09:14:e5:20:6a:f8:89:58:0d:de:d1:2f:
0f:6a:b3:d5:9c:3f:41:f4:94:01:ad:a6:d1:a6:6a:
fb:a2:74:c8:b2:1e:ec:c3:09:3a:31:1d:d9:2f:0f:
4c:b4:0b:11:d6:87:dc:23:c6:be:76:84:62:21:ed:
e7:74:1b:c8:c1:25:71:bb:10:dc:ac:e5:c8:8d:ed:
08:06:52:3e:b6:c1:1c:c2:a4:06:7d:ae:c1:68:11:
2d:fd:80:e5:1d:da:4c:3a:29:39:20:e8:b1:d8:77:
5d:fe:cd:29:b0:fb:53:10:d5:98:a0:ea:6f:59:23:
62:91:66:8c:6d:c0:a0:94:dc:3c:ff:f0:6e:98:84:
68:e3:42:3c:d9:87:2a:80:52:b1:fc:37:52:1d:68:
8c:cc:f7:f0:aa:6b:c1:2d:0b:69:fa:fd:39:e4:f4:
9c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D1:3E:F3:49:76:A1:36:01:D9:1C:B8:BF:07:2C:23:F5:F9:D9:28
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lNE-80l2oTYB2Ry4vwcsI_X52Sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.173.0/24
Signature Algorithm: sha256WithRSAEncryption
05:14:64:ff:bb:4c:e1:0e:e0:3d:e6:c3:bf:a1:e8:69:00:7a:
ac:59:7b:39:22:36:93:2d:fa:78:2e:ce:85:af:79:2e:45:94:
d1:cf:e5:4d:fe:3a:b1:0a:a8:e8:32:aa:e7:c7:70:27:e6:36:
34:62:54:3e:f2:61:a2:74:df:02:01:d5:5c:26:50:d6:54:df:
ee:ff:1c:a9:23:93:4b:0e:87:93:be:d1:5b:50:54:2e:dd:c7:
7f:37:da:18:b6:b5:ca:f4:f8:3e:8e:f8:36:b8:89:c5:fc:d4:
30:af:21:dd:b6:bc:66:c1:53:da:3e:ba:13:de:52:6a:80:2e:
40:ca:c6:d1:cc:cd:c7:ab:10:bf:5a:95:7a:a0:dc:3b:e2:b6:
bc:ed:f9:d0:4a:68:46:57:3e:a4:fe:27:05:6e:50:c9:8e:4e:
2a:f5:0a:67:4a:c9:d7:62:77:a7:89:6a:82:bc:3d:23:fc:95:
88:b0:28:93:ef:ad:e0:a4:c7:7c:ea:04:da:ee:6d:c4:55:bd:
4b:fb:4a:ec:f5:69:57:dc:bf:57:3e:7c:cd:70:bc:7b:20:d4:
4b:f2:b9:f2:63:e4:df:c9:c2:87:d9:8a:b8:77:2c:55:27:85:
97:41:33:cd:62:11:ac:79:3d:49:b2:2c:ce:7b:53:33:44:db:
a8:1f:2c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:33:33 2026 by rpki-client