Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8OLgLeF8ZpebqbnIE3UVtJpKZpA.roa
File: 8OLgLeF8ZpebqbnIE3UVtJpKZpA.roa (raw, json)
Hash identifier: O9bKHj6wav/TLI3z4geFphAxAW0gUlqPmoDeAd/oATY=
Subject key identifier: F0:E2:E0:2D:E1:7C:66:97:9B:A9:B9:C8:13:75:15:B4:9A:4A:66:90
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D79D4791E69D2252F609A5561C9C398D7
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8OLgLeF8ZpebqbnIE3UVtJpKZpA.roa
Signing time: Fri 10 Apr 2026 23:57:40 +0000
ROA not before: Fri 10 Apr 2026 23:57:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205104
IP address blocks: 2.26.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:79:d4:79:1e:69:d2:25:2f:60:9a:55:61:c9:c3:98:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 10 23:57:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0e2e02de17c66979ba9b9c8137515b49a4a6690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:24:93:10:6a:fd:71:ca:bd:c3:00:6f:a9:
71:63:e9:e3:d0:6d:e6:79:3d:90:29:29:4d:ba:d8:
05:be:e8:b2:6f:4b:f0:49:48:91:30:0e:70:89:94:
54:4e:49:87:13:d7:a3:a5:e2:5c:25:a8:28:ec:22:
81:73:6a:3c:c5:5f:20:02:74:29:45:7f:9a:a7:15:
ce:85:ed:33:75:4a:1a:5e:6d:a2:bc:5d:ab:c4:46:
c5:b6:68:c7:34:30:8c:91:f2:09:f2:c8:6c:7d:2b:
cc:2e:9a:4d:49:e3:47:de:96:ec:f5:b7:40:36:17:
55:11:a8:47:9e:3e:4a:07:f6:7f:f9:59:2a:a1:1d:
d6:de:2c:46:35:d5:a6:15:ca:11:05:82:14:c9:65:
dd:28:3b:43:e2:bd:8e:2b:f3:c2:13:91:c7:aa:71:
8a:ce:cf:3d:cd:e4:ff:c4:c3:22:82:3e:e0:f1:88:
15:97:2e:af:e1:59:ad:b7:9b:7b:ae:b4:82:a6:1a:
fe:4b:bc:23:fa:e3:fa:a0:1d:5b:61:7a:a2:8e:1a:
6d:38:5b:58:14:47:12:85:bd:76:57:d8:9b:38:37:
7c:e8:9d:32:a2:ad:9e:ff:a3:00:55:74:03:72:26:
0f:27:d9:5f:f2:5f:c7:e1:44:1f:90:6d:6d:85:52:
6e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E2:E0:2D:E1:7C:66:97:9B:A9:B9:C8:13:75:15:B4:9A:4A:66:90
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8OLgLeF8ZpebqbnIE3UVtJpKZpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.155.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:86:76:8c:b9:3a:f7:20:5d:11:31:b5:48:ae:83:82:e8:76:
f9:89:7b:47:2b:3d:97:bb:b5:b3:19:98:a1:87:2d:ad:14:7b:
89:ec:4c:4f:6b:1d:af:47:e9:d3:2c:84:63:2f:40:cb:d0:f5:
82:9f:f1:1e:e0:3c:b8:85:fa:15:ba:06:90:87:56:bb:0d:3a:
1a:40:05:91:84:11:33:90:80:d8:54:2b:53:32:03:15:d4:d5:
f5:e4:b4:b2:da:f6:0d:55:df:08:18:76:06:6d:c1:5e:c5:55:
75:87:51:47:2e:2c:80:35:ca:dd:7e:26:39:c2:c8:6e:25:f5:
77:89:64:1f:fc:f8:24:6d:4e:6b:53:96:ea:c1:44:3a:26:56:
d3:b2:29:ea:f3:25:51:0d:79:88:c2:ba:cd:04:93:f6:4e:60:
c3:23:c4:35:4a:4e:b1:06:0d:00:d9:68:cf:c9:ee:77:dc:4f:
91:aa:70:16:4b:b3:9c:df:65:7d:30:05:9e:82:4e:b4:71:ac:
5d:a8:b2:27:c9:1e:42:31:7f:b7:1f:b6:24:66:dd:bc:07:f2:
8c:cf:0a:6b:1a:94:11:0b:b3:07:2c:e0:30:a7:d9:f8:7d:10:
17:b4:7b:c5:da:89:5b:04:04:64:4b:8b:96:18:54:14:4f:72:
a6:b1:fc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:06 2026 by rpki-client