Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/si_9C-itZ4M12TERPHAo4had1oA.roa
File: si_9C-itZ4M12TERPHAo4had1oA.roa (raw, json)
Hash identifier: LeNqJisoshKz1WzuNxsBaLhx95fUaNHiCIMt9KTlFLY=
Subject key identifier: B2:2F:FD:0B:E8:AD:67:83:35:D9:31:11:3C:70:28:E2:16:9D:D6:80
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F7B2AE20731218CB8FE4A8BE0C1954CF4
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/si_9C-itZ4M12TERPHAo4had1oA.roa
Signing time: Sun 19 Jul 2026 16:17:15 +0000
ROA not before: Sun 19 Jul 2026 16:17:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395886
IP address blocks: 2.26.200.0/21 maxlen: 24
2.27.146.0/23 maxlen: 24
2.27.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7b:2a:e2:07:31:21:8c:b8:fe:4a:8b:e0:c1:95:4c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 19 16:17:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b22ffd0be8ad678335d931113c7028e2169dd680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e9:f5:8d:28:36:64:ef:42:4e:8f:8a:b7:39:
2e:7e:51:ec:61:61:6d:e9:bf:7e:36:5e:e7:c4:4e:
aa:1a:c3:f9:05:53:f9:19:7e:38:88:84:ef:ac:20:
4a:71:40:f5:20:f1:c1:71:bd:6b:ce:c2:03:ae:4a:
a7:68:e7:dc:a6:8e:c4:00:fa:7e:a1:c9:88:ca:1f:
8a:e3:c2:76:b5:fe:bf:68:eb:eb:1e:fb:c9:d0:a1:
04:da:a7:72:e5:61:96:25:ba:5b:58:28:77:5d:e5:
5c:fa:24:6a:d4:6e:31:60:41:1a:a3:bf:93:dd:8d:
f4:3e:40:1a:d4:d3:d6:2f:91:12:1d:63:be:d7:49:
18:04:d3:77:0e:5f:31:44:ae:1c:cd:db:1b:a3:0b:
9b:c8:67:e4:8f:7f:71:d7:71:d4:17:a4:08:cc:d3:
a1:f2:a0:c6:c5:2a:74:e4:b4:4c:d2:83:eb:ad:c2:
26:b8:c9:50:7b:c0:90:2e:36:43:59:c8:96:b2:de:
27:74:ff:25:b6:b3:99:e5:97:02:41:cb:cd:23:8b:
50:db:aa:65:2d:b9:7b:27:65:7c:34:d3:e8:a8:3f:
38:3e:a7:54:07:9c:47:ce:28:52:0d:fc:38:2c:29:
f8:90:a4:d1:6a:65:fe:4c:5f:79:ef:c9:71:21:ba:
a0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2F:FD:0B:E8:AD:67:83:35:D9:31:11:3C:70:28:E2:16:9D:D6:80
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/si_9C-itZ4M12TERPHAo4had1oA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.200.0/21
2.27.146.0/23
2.27.212.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:fa:48:1b:2a:b0:30:04:67:9a:fb:40:85:7d:78:88:b5:ac:
df:12:a6:46:c3:35:c2:0d:3f:95:1a:b7:73:77:7b:27:3e:f6:
40:a8:65:96:fd:0c:f3:24:ef:4a:9f:d0:f4:66:6e:2f:0d:b9:
6d:80:df:7c:2e:f7:cf:3b:be:99:74:f6:53:a2:a2:2a:fe:4b:
59:8c:52:13:df:73:e1:3c:5c:b7:84:81:de:a1:02:ea:7c:0b:
e3:66:cf:23:56:9b:87:af:22:30:0d:c1:1c:d5:ab:36:cc:ac:
22:46:69:76:66:e8:bd:5b:c5:1e:38:80:46:65:23:99:35:ff:
28:e3:06:fb:e1:4d:00:73:e9:e5:ab:0b:70:f3:e2:c7:0b:b6:
7d:46:09:fa:49:01:0a:fa:2f:bc:2d:79:db:e5:f4:f6:49:07:
76:d7:20:5d:57:b1:ad:0c:f0:18:ba:77:ed:4f:22:f2:e9:e2:
cc:5a:33:7e:f7:2a:80:ea:74:53:90:1d:31:9b:79:9b:65:d6:
1c:6e:f8:bf:16:68:79:f6:f7:64:8e:2d:13:95:1f:be:9c:54:
f7:cd:4e:a3:6a:a1:c8:45:2a:a0:12:fc:50:f2:20:88:17:2a:
1d:53:d3:7c:37:cd:cb:17:72:fd:c8:bd:b2:1f:91:8a:80:74:
51:f5:85:03
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ97KuIHMSGMuP5Ki+DBlUz0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNzE5MTYxNzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjJmZmQwYmU4YWQ2NzgzMzVkOTMxMTEzYzcwMjhlMjE2OWRkNjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3un1jSg2ZO9CTo+KtzkuflHsYWFt
6b9+Nl7nxE6qGsP5BVP5GX44iITvrCBKcUD1IPHBcb1rzsIDrkqnaOfcpo7EAPp+
ocmIyh+K48J2tf6/aOvrHvvJ0KEE2qdy5WGWJbpbWCh3XeVc+iRq1G4xYEEao7+T
3Y30PkAa1NPWL5ESHWO+10kYBNN3Dl8xRK4czdsbowubyGfkj39x13HUF6QIzNOh
8qDGxSp05LRM0oPrrcImuMlQe8CQLjZDWciWst4ndP8ltrOZ5ZcCQcvNI4tQ26pl
Lbl7J2V8NNPoqD84PqdUB5xHzihSDfw4LCn4kKTRamX+TF9578lxIbqgfwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLIv/QvorWeDNdkxETxwKOIWndaAMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvc2lfOUMtaXRaNE0xMlRFUlBIQW80aGFkMW9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDAhrIAwQB
AhuSAwQBAhvUMA0GCSqGSIb3DQEBCwUAA4IBAQBa+kgbKrAwBGea+0CFfXiItazf
EqZGwzXCDT+VGrdzd3snPvZAqGWW/QzzJO9Kn9D0Zm4vDbltgN98LvfPO76ZdPZT
oqIq/ktZjFIT33PhPFy3hIHeoQLqfAvjZs8jVpuHryIwDcEc1as2zKwiRml2Zui9
W8UeOIBGZSOZNf8o4wb74U0Ac+nlqwtw8+LHC7Z9Rgn6SQEK+i+8LXnb5fT2SQd2
1yBdV7GtDPAYunftTyLy6eLMWjN+9yqA6nRTkB0xm3mbZdYcbvi/Fmh59vdkji0T
lR++nFT3zU6jaqHIRSqgEvxQ8iCIFyodU9N8N83LF3L9yL2yH5GKgHRR9YUD
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:33:32 2026 by rpki-client