Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-vSajBwMie1ghFoDPNjatHgmoJE.roa
File: 1-vSajBwMie1ghFoDPNjatHgmoJE.roa (raw, json)
Hash identifier: RRpaTPmZSY0YS+r4E6suYoTr62EPycMkc+kbXaG5XnY=
Subject key identifier: FA:F4:9A:8C:1C:0C:89:ED:60:84:5A:03:3C:D8:DA:B4:78:26:A0:91
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D797A716BD016BB8719F31E67A66B06C0
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-vSajBwMie1ghFoDPNjatHgmoJE.roa
Signing time: Fri 10 Apr 2026 22:19:20 +0000
ROA not before: Fri 10 Apr 2026 22:19:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215590
IP address blocks: 2.26.20.0/22 maxlen: 24
2.26.60.0/22 maxlen: 24
2.26.68.0/22 maxlen: 24
2.26.104.0/21 maxlen: 24
2.27.32.0/21 maxlen: 24
2.27.52.0/23 maxlen: 24
2.27.54.0/23 maxlen: 24
64.188.118.0/23 maxlen: 24
77.239.108.0/22 maxlen: 24
144.31.52.0/24 maxlen: 24
144.31.126.0/24 maxlen: 24
144.31.127.0/24 maxlen: 24
144.31.140.0/22 maxlen: 24
144.31.152.0/23 maxlen: 24
144.31.186.0/23 maxlen: 24
150.241.88.0/23 maxlen: 24
150.241.96.0/22 maxlen: 24
150.241.106.0/23 maxlen: 24
150.241.115.0/24 maxlen: 24
150.241.116.0/24 maxlen: 24
150.241.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:79:7a:71:6b:d0:16:bb:87:19:f3:1e:67:a6:6b:06:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 10 22:19:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=faf49a8c1c0c89ed60845a033cd8dab47826a091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:66:46:d3:d1:e8:e8:09:be:55:1b:1d:7c:6b:
48:3a:67:f3:f6:84:94:fe:73:c3:48:76:1e:d5:bf:
cd:bb:af:22:c6:5b:29:e7:12:a1:8f:66:4e:3b:54:
7e:d5:f9:38:a8:0f:c6:c2:05:89:55:2d:ec:b5:a1:
9e:47:16:b1:1e:85:f3:89:0f:49:d5:6d:28:0f:c2:
4c:47:23:c7:cf:09:f8:fb:e0:04:be:08:77:8f:03:
82:a0:82:50:b4:66:6c:9e:f9:d1:35:6e:ce:d2:fc:
6c:5c:fb:b5:ac:a2:ce:ca:04:b4:58:d6:39:0e:a5:
8a:1a:87:68:6f:a7:56:3e:ce:35:71:f7:d1:87:60:
f5:5d:45:cc:61:07:de:7a:6c:bb:a5:5e:76:bb:b1:
9d:62:b6:c4:83:c7:60:ee:a1:97:03:1e:50:f0:8c:
43:1a:48:0c:69:f3:28:99:e9:05:0d:62:f0:90:8e:
73:ac:c9:dd:49:63:68:4a:0d:d1:bb:29:fb:39:1e:
b6:91:21:08:73:94:50:06:db:8d:7a:be:da:26:76:
6a:9d:04:a9:ec:ad:79:65:fc:0b:45:b9:b1:da:72:
22:24:cf:53:26:57:cc:31:dc:08:29:cb:9d:df:25:
c6:da:9b:03:74:9a:fb:91:c5:a7:04:7b:64:87:a7:
80:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F4:9A:8C:1C:0C:89:ED:60:84:5A:03:3C:D8:DA:B4:78:26:A0:91
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-vSajBwMie1ghFoDPNjatHgmoJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.20.0/22
2.26.60.0/22
2.26.68.0/22
2.26.104.0/21
2.27.32.0/21
2.27.52.0/22
64.188.118.0/23
77.239.108.0/22
144.31.52.0/24
144.31.126.0/23
144.31.140.0/22
144.31.152.0/23
144.31.186.0/23
150.241.88.0/23
150.241.96.0/22
150.241.106.0/23
150.241.115.0-150.241.116.255
150.241.123.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:06:56:7f:e0:97:46:b7:f7:e1:d0:aa:f3:24:a4:9e:73:ee:
28:1d:71:3a:4d:eb:c8:62:a6:bf:15:71:47:93:be:43:92:74:
49:2f:85:85:5a:cd:18:49:2a:12:14:32:d6:a6:04:d9:60:71:
be:cf:8e:f1:0c:15:79:66:57:a4:40:38:a3:45:7f:5a:e4:66:
4b:f2:0d:83:31:01:55:85:4f:64:eb:b1:00:80:65:fe:06:b1:
45:1b:ec:05:71:a7:41:c9:85:a2:53:5e:74:48:14:b7:a7:a4:
3f:ec:7a:cb:a0:5a:98:c3:f8:d9:18:67:81:8a:a1:ac:9e:90:
ce:f9:30:5d:52:a1:5a:6c:ef:b0:f9:54:d8:2d:19:5b:f7:ea:
76:3c:d2:62:59:7d:ed:b7:34:f5:54:25:5a:a2:a8:ed:a4:91:
b8:7f:91:57:ce:14:af:95:86:28:2c:1d:ad:a0:0c:13:6e:b5:
f5:37:8c:7c:69:6a:2c:98:20:16:12:61:20:2b:85:ca:5b:47:
22:ab:6b:3a:25:e3:e0:c9:f8:12:7e:72:f0:b9:a5:f8:ab:45:
ae:51:f7:97:88:d2:a9:e5:e2:af:13:80:47:d0:e2:44:22:74:
dd:f9:f1:43:9c:79:d2:e1:95:44:98:bb:ef:4f:6e:5d:cb:f0:
03:44:9c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:34:22 2026 by rpki-client