Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xEbrZKVsdZIN4ZSUI-NDGcJX1Eo.roa
File: xEbrZKVsdZIN4ZSUI-NDGcJX1Eo.roa (raw, json)
Hash identifier: 3MDaupm/7rIQIaUm6wSi8Rzwg5yVLChF3x0PrCzfaYI=
Subject key identifier: C4:46:EB:64:A5:6C:75:92:0D:E1:94:94:23:E3:43:19:C2:57:D4:4A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E1E1DED3BE6A1D6D73D86FD3A86E3B9D8
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xEbrZKVsdZIN4ZSUI-NDGcJX1Eo.roa
Signing time: Tue 12 May 2026 21:35:38 +0000
ROA not before: Tue 12 May 2026 21:35:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 2.26.144.0/24 maxlen: 24
2.26.147.0/24 maxlen: 24
2.26.149.0/24 maxlen: 24
2.26.192.0/21 maxlen: 24
2.26.228.0/22 maxlen: 24
2.27.97.0/24 maxlen: 24
2.27.126.0/24 maxlen: 24
2.27.140.0/23 maxlen: 24
2.27.152.0/24 maxlen: 24
144.31.39.0/24 maxlen: 24
144.31.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:1d:ed:3b:e6:a1:d6:d7:3d:86:fd:3a:86:e3:b9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 12 21:35:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c446eb64a56c75920de1949423e34319c257d44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f7:fe:52:ff:77:f9:24:40:79:d1:eb:70:d2:
91:db:3c:78:ed:19:21:fa:50:ee:71:4d:38:7c:92:
98:94:35:4c:68:db:d1:cd:7c:04:2b:ac:21:8b:e7:
53:96:22:d0:bd:89:3f:02:fd:57:14:21:3f:77:0b:
16:bf:72:80:ad:e6:a3:e3:59:59:f6:2a:80:22:c1:
ef:af:b1:39:2d:aa:fd:de:f3:ae:77:b3:55:93:b5:
9d:0b:f7:e6:25:93:a1:37:02:b6:5f:5a:21:89:d5:
8c:8c:b1:3a:da:c8:72:70:75:eb:59:f1:8d:af:7c:
e6:29:10:ea:75:5a:39:1e:e6:5b:c7:85:d4:b3:6d:
1b:e2:9a:b8:c4:14:47:c0:17:be:2c:3d:75:a8:e0:
5a:09:60:04:15:6d:fa:bd:98:34:9e:7c:e3:5b:1f:
aa:c5:27:2b:ed:e2:be:4c:2b:d7:f2:7f:07:ba:3b:
b7:fa:ee:ef:ac:03:a1:88:f2:64:06:b9:a2:53:07:
ed:ea:b9:3c:ee:7c:65:8d:99:77:70:29:43:d7:16:
dd:17:19:7c:08:a0:a7:d7:dd:28:36:95:6a:c8:35:
c7:86:29:1a:ef:41:7c:ff:ab:e1:4b:07:20:e2:d4:
ea:37:f0:06:e7:26:38:26:0e:b4:cd:4b:3d:e0:83:
29:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:46:EB:64:A5:6C:75:92:0D:E1:94:94:23:E3:43:19:C2:57:D4:4A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xEbrZKVsdZIN4ZSUI-NDGcJX1Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.144.0/24
2.26.147.0/24
2.26.149.0/24
2.26.192.0/21
2.26.228.0/22
2.27.97.0/24
2.27.126.0/24
2.27.140.0/23
2.27.152.0/24
144.31.39.0/24
144.31.145.0/24
Signature Algorithm: sha256WithRSAEncryption
57:de:ae:ae:a7:7d:90:1a:f8:e5:62:a3:4b:53:dc:03:2a:c3:
30:5d:97:7a:84:a6:1c:ff:0d:f3:b3:b4:07:09:13:d7:01:01:
50:11:d6:1c:9f:a8:7c:b3:00:07:c4:96:67:d0:67:00:09:4a:
21:af:c5:93:7c:e2:8e:1f:10:a8:53:6b:30:95:e1:aa:47:83:
4e:74:d9:47:c8:e1:2d:10:8d:16:cc:c0:8a:0e:e3:c7:47:f4:
30:e3:2a:1b:d1:f9:dd:83:35:4e:d5:ed:51:b5:d4:50:3c:70:
1d:19:74:05:0b:7e:76:e8:2d:5a:1c:22:ff:c2:7b:ef:42:40:
a8:a2:91:0a:9f:cf:82:e0:48:e3:6b:e1:51:34:39:66:90:96:
de:d0:aa:ff:5c:8b:82:8e:f0:99:12:e2:32:61:3e:ea:ef:74:
4d:f5:6b:8e:64:48:14:45:c9:71:8e:52:8b:3a:32:79:2d:81:
5c:4c:3e:da:93:d2:7f:d8:36:76:ef:c8:10:23:2e:82:b3:88:
fd:d1:7c:36:81:1e:90:78:ba:bd:77:61:21:67:df:db:f3:74:
3e:c1:fa:63:79:86:ae:43:ef:0f:de:c9:9a:2f:1e:da:17:e4:
9d:fa:26:60:3d:7f:12:35:ec:60:b1:e6:91:53:a9:30:48:af:
e3:98:5e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:24 2026 by rpki-client