Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rNmgWesHDVZeLeSKnaDzJqCDKN0.roa
File: rNmgWesHDVZeLeSKnaDzJqCDKN0.roa (raw, json)
Hash identifier: KVS0wArpPa1r5zeq6SLBSuZqJKMDH85yFrDmJMrietI=
Subject key identifier: AC:D9:A0:59:EB:07:0D:56:5E:2D:E4:8A:9D:A0:F3:26:A0:83:28:DD
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F66CAB0E42E686F90CFE174E1A54DB3EA
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rNmgWesHDVZeLeSKnaDzJqCDKN0.roa
Signing time: Wed 15 Jul 2026 17:19:47 +0000
ROA not before: Wed 15 Jul 2026 17:19:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212194
IP address blocks: 2.26.200.0/21 maxlen: 24
2.27.146.0/23 maxlen: 24
2.27.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:66:ca:b0:e4:2e:68:6f:90:cf:e1:74:e1:a5:4d:b3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 15 17:19:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=acd9a059eb070d565e2de48a9da0f326a08328dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:87:16:05:15:de:f0:1a:9e:f9:8f:52:e2:3c:
a8:95:ff:c9:53:7a:42:31:be:98:d8:b8:33:14:bd:
5a:72:b2:3b:c6:6d:48:4b:a2:dd:c9:71:41:fc:3c:
ea:c2:89:30:3d:71:7e:ff:2d:54:b8:62:df:c8:a2:
c1:f9:62:70:d5:84:e4:36:f9:64:ca:e9:9f:5c:83:
66:08:cf:ec:42:0c:2b:2d:e0:bf:06:e1:55:75:28:
53:29:0d:9e:0a:82:81:36:df:e5:2c:b7:23:73:6c:
e5:e3:53:85:ce:42:87:94:12:d5:0c:a2:9e:b3:25:
bb:11:f8:90:a2:34:be:37:ef:1b:ea:4c:63:f8:19:
a3:30:7b:b8:f3:61:61:13:0e:28:31:af:6d:d8:28:
2f:22:bd:d0:d7:89:43:86:ea:47:5a:7b:3c:72:5b:
33:4a:8a:95:20:68:bf:2f:72:51:14:29:be:2a:b9:
86:dc:f6:d1:e3:f8:cd:2a:26:63:e3:9b:c1:87:af:
4e:73:e2:81:98:46:3e:ef:bd:4f:39:08:2f:15:03:
b8:c0:1c:38:d9:4d:7a:36:d4:ec:27:85:a1:21:4a:
d4:95:4f:e1:1e:f4:87:8a:cd:9f:18:c8:fa:6f:ca:
2b:b5:67:29:23:16:bc:4e:8a:26:a1:4c:72:1a:c1:
5d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D9:A0:59:EB:07:0D:56:5E:2D:E4:8A:9D:A0:F3:26:A0:83:28:DD
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rNmgWesHDVZeLeSKnaDzJqCDKN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.200.0/21
2.27.146.0/23
2.27.212.0/23
Signature Algorithm: sha256WithRSAEncryption
35:f0:29:04:9f:b0:fe:84:7e:45:96:de:29:aa:d3:2b:1e:cf:
3c:59:c1:8c:0b:e3:a8:d7:e8:1e:1b:1f:fa:87:3b:bd:7c:c4:
4c:81:15:0a:d5:c1:4e:e7:2c:7e:9c:f5:21:9c:fe:0c:5e:c1:
03:57:50:08:00:a6:c6:0e:59:1e:00:d2:74:62:94:63:b9:3d:
07:dc:65:71:a4:45:3c:a0:8c:7f:57:c6:b4:d0:e5:ae:d9:b0:
0a:3f:fa:7a:f1:2c:da:99:b9:f6:18:20:7e:34:5f:22:0b:4e:
58:c8:ea:c1:27:4c:61:68:84:f2:60:13:c3:78:24:ba:d6:4d:
80:f5:e7:42:03:3e:9f:71:32:b1:bc:7c:d3:33:29:12:6f:c9:
5c:07:fb:6f:88:45:43:61:f8:ed:08:f4:a0:c6:3d:00:1a:a3:
17:d1:74:cc:fe:25:8d:c1:5c:9d:9d:f0:63:fe:7f:54:df:ac:
c3:6b:33:98:11:5e:5a:b9:74:3d:b5:e0:c2:e2:de:70:2a:e9:
97:18:d3:81:6c:43:c8:0c:bb:d4:d5:9d:18:e3:f3:2c:8d:75:
84:5d:13:46:2b:c3:16:36:16:fc:be:e2:53:09:0a:fd:8c:38:
1b:86:90:ac:fc:2d:90:be:34:98:fb:2f:18:1f:77:10:5b:3c:
2d:34:7d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:11:36 2026 by rpki-client