Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/usIkBMsKdD-BoKkSkixLo26zJZg.roa
File: usIkBMsKdD-BoKkSkixLo26zJZg.roa (raw, json)
Hash identifier: 0PWlAsgDljyItLCaBkCLzXYnLiDgWGwpjkMGxft5pVA=
Subject key identifier: BA:C2:24:04:CB:0A:74:3F:81:A0:A9:12:92:2C:4B:A3:6E:B3:25:98
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E180147C83F56E2D3F09BD889EB8B3535
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/usIkBMsKdD-BoKkSkixLo26zJZg.roa
Signing time: Mon 11 May 2026 17:06:37 +0000
ROA not before: Mon 11 May 2026 17:06:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198250
IP address blocks: 2.26.152.0/24 maxlen: 24
2.26.172.0/24 maxlen: 24
144.31.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:18:01:47:c8:3f:56:e2:d3:f0:9b:d8:89:eb:8b:35:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 11 17:06:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bac22404cb0a743f81a0a912922c4ba36eb32598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:77:99:3f:01:29:03:b6:2d:0d:ba:f8:50:c5:
69:89:c2:3b:16:b0:d6:e0:6e:70:48:58:d8:e4:43:
2a:9b:db:bb:f4:0e:29:5c:07:67:13:56:67:f9:5c:
c1:54:7c:8b:2f:72:f9:02:6d:f5:95:a6:20:c6:fc:
4a:f2:84:9f:f7:f0:97:63:88:c9:6c:a9:33:91:0c:
a9:0b:95:97:ff:3c:aa:78:9d:ca:05:3e:92:28:0e:
15:19:90:85:8c:5f:50:da:f4:01:fa:ef:b5:1d:f3:
38:ee:ab:b4:0b:05:e3:5a:33:c2:4a:f6:29:cf:2b:
ae:1c:db:bd:e6:16:4f:06:b3:b9:6f:a3:85:79:dd:
dd:48:e8:a9:ed:64:1f:e8:99:f7:21:57:1e:6a:0b:
a8:03:1c:e2:0d:a9:85:41:88:6a:54:43:74:5b:7d:
ee:b3:0b:b2:32:2d:54:97:17:03:99:60:8d:87:dd:
c9:f1:50:50:ce:15:7a:56:08:95:7e:a3:39:d5:51:
d7:fc:6d:dc:f2:4d:ac:b3:55:d7:70:26:ef:0d:7f:
82:7e:4f:96:2e:74:2a:3a:71:03:18:02:ce:9c:00:
b2:32:ea:de:07:e7:e9:d2:51:e8:4f:0c:52:03:33:
5a:b9:69:db:c6:d1:13:69:74:dc:d0:72:b9:ba:09:
46:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C2:24:04:CB:0A:74:3F:81:A0:A9:12:92:2C:4B:A3:6E:B3:25:98
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/usIkBMsKdD-BoKkSkixLo26zJZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.152.0/24
2.26.172.0/24
144.31.146.0/24
Signature Algorithm: sha256WithRSAEncryption
27:fb:62:6b:6f:e1:b4:c0:85:9c:8d:88:6e:a4:e9:5b:84:0a:
67:b9:44:b6:7a:54:e2:4c:ee:af:7f:23:33:97:a1:55:b8:6f:
27:c2:1f:03:4b:e5:e1:6d:9f:c9:d5:1e:4c:42:f0:4d:d8:93:
d8:cb:ef:45:3f:4c:02:31:b6:0f:11:c9:34:e1:b5:b1:1b:b4:
e9:4d:46:32:55:7a:72:50:49:ef:a4:da:00:f9:a5:f2:56:dc:
25:6f:e8:a3:fb:68:7e:da:35:37:e5:f7:68:15:22:40:15:a4:
b9:bf:78:5f:80:cf:f7:23:25:05:28:c4:ca:f1:15:c1:88:7f:
ff:e8:98:a3:8d:b2:7e:ef:8d:e5:35:cd:8e:d5:f5:03:bf:76:
2a:1f:c4:20:38:a3:a8:b8:43:81:fa:56:27:a3:8e:14:b4:06:
ce:cf:f2:16:f9:8f:bd:57:bf:d1:8d:c8:4a:3b:f6:73:ad:51:
ed:97:18:f7:1c:8d:7d:45:a3:8f:54:5d:27:c1:5d:bd:6c:57:
25:f5:03:85:34:88:f7:a4:03:78:df:68:27:22:bb:10:ca:d0:
81:bb:c5:5c:14:3f:50:b3:fd:6b:2d:57:f5:ee:e4:3c:bd:c9:
1c:96:5b:c8:8b:eb:f1:ae:14:49:e9:6b:e7:ec:c2:34:18:63:
56:61:19:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:48:15 2026 by rpki-client