Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/re8lK_7CQDRvNYKE08BcyPvNo1Y.roa
File: re8lK_7CQDRvNYKE08BcyPvNo1Y.roa (raw, json)
Hash identifier: q4NblYmBITtKICTHnrxXZR7JMaNVlErhiC+CG8Wt7ZY=
Subject key identifier: AD:EF:25:2B:FE:C2:40:34:6F:35:82:84:D3:C0:5C:C8:FB:CD:A3:56
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E1383606EAEED9B8D5A9F9E7592432D2D
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/re8lK_7CQDRvNYKE08BcyPvNo1Y.roa
Signing time: Sun 10 May 2026 20:10:37 +0000
ROA not before: Sun 10 May 2026 20:10:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214560
IP address blocks: 2.26.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:13:83:60:6e:ae:ed:9b:8d:5a:9f:9e:75:92:43:2d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 10 20:10:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=adef252bfec240346f358284d3c05cc8fbcda356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ba:c3:c7:a7:c1:74:43:29:85:56:d8:47:26:
d2:1c:12:e6:4b:a3:d2:80:93:0f:0a:ae:2b:5d:4f:
ea:3b:13:5a:0b:4d:87:8a:ee:8a:4b:fa:32:0e:fc:
3c:22:c2:eb:98:39:e5:1b:fc:15:ff:6a:60:4e:cc:
32:2d:93:df:ae:6a:9a:10:52:16:4b:10:2c:48:bf:
50:ae:92:80:b4:80:a1:2d:7f:c6:91:71:60:48:d5:
4c:02:2f:6f:a1:20:f5:c2:fa:82:3f:80:1d:71:42:
f0:6f:e7:3a:ae:9c:87:31:ab:91:24:65:51:7f:e8:
a8:d1:a4:d7:b8:bb:85:6f:e2:fe:c7:1b:33:24:9d:
1c:3a:c0:40:e0:f4:35:ca:1d:79:d4:59:10:9d:55:
34:28:89:c2:8e:4d:2e:06:33:04:8d:26:ca:96:99:
56:f6:fd:56:bd:f7:2e:18:de:81:9a:d5:b8:d4:5e:
15:09:85:32:19:65:a0:2a:78:6a:38:10:df:1e:fb:
ca:7b:74:b2:0a:60:cd:09:c6:5f:0b:2e:c3:97:15:
4a:91:f3:16:1d:66:ba:f3:a5:ed:a8:a1:7b:c5:d2:
e3:62:18:96:15:ce:75:fa:03:3e:1c:a5:8c:40:1f:
d1:13:0a:3b:98:0c:05:f8:e9:06:ab:18:44:1b:a7:
52:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EF:25:2B:FE:C2:40:34:6F:35:82:84:D3:C0:5C:C8:FB:CD:A3:56
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/re8lK_7CQDRvNYKE08BcyPvNo1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.145.0/24
Signature Algorithm: sha256WithRSAEncryption
58:2e:ac:14:ad:65:e2:ad:8a:20:2e:07:0e:fe:8d:5a:37:8c:
16:03:61:59:d0:a0:69:29:29:0e:a3:23:26:da:45:f2:62:4e:
5a:8b:6b:78:44:5a:cf:4d:44:1b:75:93:a8:23:84:ea:c0:a7:
2b:6f:fd:a0:13:70:3e:bc:5b:42:ed:f6:79:7e:5b:dd:4b:b5:
99:04:63:fc:3d:50:cc:a2:95:46:8e:4d:03:61:31:00:a1:8f:
dc:7b:2b:d8:f7:e6:c9:c9:28:c7:98:cc:9c:d1:ea:8b:c8:0c:
c8:d8:26:d8:6b:5e:9b:e8:3f:42:03:1f:10:9e:2a:6f:75:80:
94:f7:a5:44:72:54:6e:ed:74:00:22:3a:db:37:f6:ee:83:b2:
ae:ff:02:1f:d4:88:83:0f:47:f0:16:96:f9:d9:9d:8b:48:7b:
eb:63:8d:35:e3:cc:53:54:47:f8:eb:66:3a:59:12:45:62:84:
37:48:36:d7:5b:22:ea:c3:06:4d:62:4c:a1:88:f7:88:1e:81:
a7:26:14:36:12:61:b7:a3:20:87:15:89:e1:14:26:a6:d5:bf:
d7:7c:7b:79:b1:4d:4a:2a:e6:c7:98:65:9b:36:62:9a:5c:d3:
01:d9:fa:39:30:b6:a8:c9:5a:3f:fb:b0:5c:4e:2c:a4:8e:0b:
bc:f4:7d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:43:20 2026 by rpki-client