Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wJGb5HNKtFhGFL-pnCTICwq8WDY.roa
File: wJGb5HNKtFhGFL-pnCTICwq8WDY.roa (raw, json)
Hash identifier: Dx11Mp798oGJndcbILAxITcinPnwAQ/liWt+XDKebQU=
Subject key identifier: C0:91:9B:E4:73:4A:B4:58:46:14:BF:A9:9C:24:C8:0B:0A:BC:58:36
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F90063D6C4D23870490B13EA1D51137E4
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wJGb5HNKtFhGFL-pnCTICwq8WDY.roa
Signing time: Thu 23 Jul 2026 17:29:15 +0000
ROA not before: Thu 23 Jul 2026 17:29:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139791
IP address blocks: 2.26.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:06:3d:6c:4d:23:87:04:90:b1:3e:a1:d5:11:37:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 23 17:29:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0919be4734ab4584614bfa99c24c80b0abc5836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b5:23:42:12:fa:13:86:38:8f:88:35:38:d9:
4c:f9:93:35:87:c5:17:b5:15:67:d7:49:20:02:84:
4a:d0:9f:9b:77:5d:9a:de:47:f5:2a:3d:26:b7:c3:
ae:d5:79:4d:58:45:e3:60:5f:b8:95:b5:bd:18:24:
ab:67:05:c9:2b:70:35:f8:0b:1d:33:92:73:70:1d:
12:f5:99:46:24:d0:aa:fe:bc:c7:d1:c8:14:c6:f0:
20:fa:d1:5c:5c:b8:00:0b:d5:82:6a:ce:cc:9a:dd:
0c:c4:d4:b3:76:dd:08:31:8c:3d:fe:00:d4:ca:08:
19:9e:d6:7b:8d:28:e9:ca:51:09:93:11:80:ed:6c:
23:0c:32:b6:44:47:ec:5f:7c:d9:ff:c8:06:15:17:
2e:1c:2b:4b:e2:c0:c2:3c:77:eb:db:57:47:fb:16:
5a:28:d5:84:4d:c0:58:1f:24:80:8c:e7:7e:06:ac:
21:0b:ab:09:ae:dd:73:ac:b9:7b:bd:bd:34:a5:59:
56:51:64:14:d3:16:73:6e:ac:0b:f1:c4:10:63:7a:
df:eb:07:31:90:e2:06:af:1b:f0:eb:6c:44:b4:de:
e2:44:3a:96:51:e2:a2:d9:50:a0:2a:b9:86:76:8e:
0b:97:43:f4:b5:c6:38:79:39:55:e5:e0:50:cc:89:
63:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:91:9B:E4:73:4A:B4:58:46:14:BF:A9:9C:24:C8:0B:0A:BC:58:36
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wJGb5HNKtFhGFL-pnCTICwq8WDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.184.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:02:8e:4c:2b:43:4d:a1:23:fa:59:5c:d3:c3:28:1e:93:bf:
d1:22:83:c2:4f:db:3a:61:1a:75:0f:7e:63:e3:da:c6:73:60:
04:e0:c6:4c:b8:08:8d:e5:82:fa:df:bb:fc:8b:a1:d7:5f:b3:
0f:b3:e5:79:dc:6c:9c:28:bc:4a:50:15:ec:15:da:0e:84:58:
9e:43:aa:f8:e3:8f:46:9d:00:4d:e8:a8:9a:87:16:76:95:c3:
46:b9:38:26:49:aa:ca:ea:95:62:64:c6:b8:4c:df:e2:4e:83:
34:eb:1c:9e:67:97:38:df:80:13:03:27:ae:54:af:cb:67:87:
f9:a1:b9:7e:4c:e6:b8:39:9f:31:c1:1e:e1:8c:66:ef:7e:f3:
b5:23:29:06:54:71:5c:ff:86:b4:dc:5e:46:a9:fb:1f:91:42:
9f:23:3e:f4:3b:2c:d0:40:6b:8f:54:fb:fe:dd:b0:ff:25:5c:
55:73:87:10:c3:7d:52:fb:94:7a:43:1b:02:82:e9:58:b9:9f:
85:dc:3c:3f:2a:27:9f:34:36:35:15:0a:9b:56:df:ef:09:1e:
52:b4:98:8d:96:f1:a6:5a:6d:fa:ec:49:13:a8:e3:13:7d:54:
62:a8:a1:b9:d7:36:6c:4a:d2:45:40:48:1a:79:73:43:94:6f:
3c:52:a5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:16:37 2026 by rpki-client