Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1h5n9909wqH1yn58sQ-oRDepg6w.roa
File: 1h5n9909wqH1yn58sQ-oRDepg6w.roa (raw, json)
Hash identifier: gvhPZoBL/3YQmdo+L7jHVS2Bw10DP/5g3gMU29+AfME=
Subject key identifier: D6:1E:67:F7:DD:3D:C2:A1:F5:CA:7E:7C:B1:0F:A8:44:37:A9:83:AC
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E6ADB28BB8E5DB968B89D780F81FF5CFC
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1h5n9909wqH1yn58sQ-oRDepg6w.roa
Signing time: Wed 27 May 2026 19:13:28 +0000
ROA not before: Wed 27 May 2026 19:13:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201988
IP address blocks: 2.26.122.0/24 maxlen: 24
2.26.123.0/24 maxlen: 24
31.76.30.0/24 maxlen: 24
31.76.94.0/24 maxlen: 24
31.76.100.0/23 maxlen: 24
31.76.102.0/23 maxlen: 24
31.76.244.0/24 maxlen: 24
31.76.245.0/24 maxlen: 24
31.76.251.0/24 maxlen: 24
31.76.252.0/24 maxlen: 24
144.31.53.0/24 maxlen: 24
144.31.148.0/24 maxlen: 24
144.31.169.0/24 maxlen: 24
144.31.223.0/24 maxlen: 24
144.31.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6a:db:28:bb:8e:5d:b9:68:b8:9d:78:0f:81:ff:5c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 27 19:13:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d61e67f7dd3dc2a1f5ca7e7cb10fa84437a983ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a0:c0:84:1b:9f:e8:0e:b8:b4:3e:9e:fa:ee:
80:5c:9b:d5:46:de:85:5d:52:09:a9:52:28:cf:e5:
de:f8:a5:92:e5:1e:f9:64:12:87:3d:d5:53:01:b2:
4b:96:5c:bf:9a:0d:45:df:b6:0d:14:aa:1c:1b:7f:
57:13:e7:03:28:c8:0b:42:c0:24:02:ea:03:a4:0d:
6d:b4:c3:fe:9b:2d:f0:18:55:0e:5f:32:b1:0e:63:
fa:4c:7b:15:3d:0a:ab:e0:e6:d8:25:9e:e4:2e:b2:
ad:d2:63:e3:e4:5b:e7:63:43:f9:a6:af:ea:6b:ec:
2f:f0:0e:74:ad:32:96:11:83:7c:96:a7:2c:fc:8c:
2b:91:84:c7:df:e8:08:11:27:07:80:29:06:84:39:
75:81:18:aa:f6:b1:f0:0b:59:31:7a:fb:97:bb:b6:
1e:a6:ef:07:89:5b:a4:7b:87:f2:8b:d5:6d:c8:d2:
6b:58:5c:69:a3:d6:f8:fd:e1:04:ba:31:5e:08:0f:
1f:a3:74:f9:24:2d:5b:26:b5:f9:b3:5e:a0:1a:96:
22:8a:69:ce:bf:92:f8:1c:62:e4:85:bd:2c:a7:16:
4e:36:87:9d:b2:67:ef:62:c8:5a:9b:50:12:98:45:
2f:d3:a5:46:67:e1:ae:ca:28:04:20:d0:36:e4:d5:
0c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1E:67:F7:DD:3D:C2:A1:F5:CA:7E:7C:B1:0F:A8:44:37:A9:83:AC
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1h5n9909wqH1yn58sQ-oRDepg6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.122.0/23
31.76.30.0/24
31.76.94.0/24
31.76.100.0/22
31.76.244.0/23
31.76.251.0-31.76.252.255
144.31.53.0/24
144.31.148.0/24
144.31.169.0/24
144.31.223.0/24
144.31.238.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:e9:1b:25:48:a4:fa:c2:94:74:af:1d:cc:7b:32:05:3f:c8:
5b:bf:48:b2:99:e7:ce:c3:52:aa:97:24:18:8c:75:37:df:a5:
82:be:79:ed:37:4a:5d:42:3f:c7:da:28:0e:7e:a1:f1:9c:5a:
a5:17:11:55:f7:83:89:8c:a8:37:b2:25:de:8b:62:ad:b2:de:
1e:08:05:38:ce:a5:be:56:93:49:c1:c2:1a:fb:99:06:20:3c:
be:71:43:78:d3:a0:63:2a:05:a2:b0:f7:57:0a:76:5e:da:a0:
d1:a2:44:e4:e3:71:ce:32:10:b8:60:39:f7:fe:05:85:d8:f7:
87:88:d3:77:28:b6:7c:3d:f7:05:c9:a8:6f:40:62:b3:3e:64:
d9:5a:6e:48:2a:f2:a3:30:38:a6:72:4a:ec:c4:81:7d:ed:12:
03:44:f1:71:02:e7:a8:da:b6:e2:1d:7a:5f:a2:83:62:fe:d3:
3e:77:eb:0c:ea:d7:4f:ea:06:1f:03:0d:9c:39:27:cd:38:1c:
e0:71:1b:e2:48:b9:fa:70:eb:79:7d:a4:e4:da:93:a9:0e:a7:
db:f5:a2:d5:0c:1b:de:c8:f0:1a:dd:5d:84:0b:06:c4:c2:9c:
c7:b1:58:15:4b:13:3a:c4:6c:2a:80:b3:a8:21:03:79:37:8e:
0f:ae:2d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:04:20 2026 by rpki-client