Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/G7fDBgG68No8V5bgknsP3U7qI7c.roa
File: G7fDBgG68No8V5bgknsP3U7qI7c.roa (raw, json)
Hash identifier: 73UAqynDD/ButZq3Dz5oyHvAGsAivGYDWNkvOVPa9ck=
Subject key identifier: 1B:B7:C3:06:01:BA:F0:DA:3C:57:96:E0:92:7B:0F:DD:4E:EA:23:B7
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D84684AF9E956476CEC64933149E94FF9
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/G7fDBgG68No8V5bgknsP3U7qI7c.roa
Signing time: Mon 13 Apr 2026 01:15:20 +0000
ROA not before: Mon 13 Apr 2026 01:15:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216475
IP address blocks: 2.26.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:84:68:4a:f9:e9:56:47:6c:ec:64:93:31:49:e9:4f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 13 01:15:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1bb7c30601baf0da3c5796e0927b0fdd4eea23b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fc:03:f6:6e:67:06:69:0b:8c:d7:5a:01:c5:
4c:b6:50:c3:85:ad:ae:0e:db:c3:01:5c:0e:5e:8a:
fd:ec:94:05:2b:69:3a:f2:49:4c:53:5f:db:17:86:
e2:9d:a8:83:9f:79:a4:ce:a3:02:da:80:76:6f:45:
72:e3:e2:97:90:c1:dc:98:7a:22:50:f0:24:cb:63:
a6:f9:11:df:30:de:a9:e6:85:6b:c2:81:2b:55:58:
2d:bc:10:05:66:f2:90:4b:59:3b:6b:9c:e4:76:66:
b9:83:f9:c4:75:45:00:de:59:26:ec:c1:50:52:4b:
5b:b4:d8:2a:1b:d0:7b:99:54:dc:8c:24:1e:43:9e:
a2:87:08:f8:33:97:d1:53:e6:3f:1b:9c:d4:50:cd:
a3:df:6c:65:20:5f:a5:3d:8c:ab:8d:1f:04:e7:21:
15:24:3f:94:0e:a2:c4:11:79:43:cb:3d:38:32:bc:
7f:db:38:19:0f:1e:3f:02:75:16:13:bb:6e:cf:80:
65:18:72:e5:90:24:37:92:73:70:e5:e0:fe:ab:3e:
bf:89:69:03:44:70:a9:44:77:06:44:65:ad:fc:e3:
5a:33:de:87:75:e5:24:26:d5:fa:05:27:4f:4a:06:
a7:fc:3a:3d:2e:b0:46:90:ba:9d:1d:30:56:d4:05:
1e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B7:C3:06:01:BA:F0:DA:3C:57:96:E0:92:7B:0F:DD:4E:EA:23:B7
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/G7fDBgG68No8V5bgknsP3U7qI7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.138.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ad:f4:1e:f5:9a:a9:20:08:f5:12:e5:97:ca:ab:45:00:60:
38:dd:6d:fd:47:94:3b:50:35:2d:0e:1e:db:70:2f:f4:b0:54:
10:5d:73:98:ac:8b:3b:35:f0:0e:b2:ff:06:20:5f:60:b6:44:
72:24:b5:e8:1d:af:b6:96:ab:0e:de:87:f4:98:41:cb:e9:92:
39:4e:50:e2:18:2a:29:a8:01:a3:db:b5:8c:b9:13:9a:59:58:
05:19:08:0e:b1:24:8b:d2:06:17:f3:6b:aa:39:56:70:52:27:
e6:fc:e8:c4:e5:69:29:fa:87:32:95:b4:97:64:67:7f:bf:a1:
6a:96:67:78:4c:8d:02:05:44:ca:69:a4:9f:5f:96:41:44:02:
f5:ce:38:ce:ae:06:c7:75:c4:0f:65:00:20:53:b0:65:27:c6:
fb:a0:36:e3:66:a6:27:35:e8:a8:19:c2:fd:2c:9b:97:00:23:
48:97:0e:ed:df:84:6b:b7:81:f7:b3:10:b8:60:20:aa:03:bf:
72:8f:94:46:e5:9e:07:1f:7b:ee:40:ae:64:17:41:30:98:17:
f5:ca:ab:47:fc:4a:91:0d:36:6d:3c:5a:25:24:79:d8:fe:f6:
58:f7:ff:2b:f6:f1:a2:70:d6:1d:a4:ee:ac:4b:aa:e9:ee:07:
b5:ad:5d:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2EaEr56VZHbOxkkzFJ6U/5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNDEzMDExNTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmI3YzMwNjAxYmFmMGRhM2M1Nzk2ZTA5MjdiMGZkZDRlZWEyM2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vwD9m5nBmkLjNdaAcVMtlDDha2u
DtvDAVwOXor97JQFK2k68klMU1/bF4binaiDn3mkzqMC2oB2b0Vy4+KXkMHcmHoi
UPAky2Om+RHfMN6p5oVrwoErVVgtvBAFZvKQS1k7a5zkdma5g/nEdUUA3lkm7MFQ
UktbtNgqG9B7mVTcjCQeQ56ihwj4M5fRU+Y/G5zUUM2j32xlIF+lPYyrjR8E5yEV
JD+UDqLEEXlDyz04Mrx/2zgZDx4/AnUWE7tuz4BlGHLlkCQ3knNw5eD+qz6/iWkD
RHCpRHcGRGWt/ONaM96HdeUkJtX6BSdPSgan/Do9LrBGkLqdHTBW1AUeMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBu3wwYBuvDaPFeW4JJ7D91O6iO3MB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvRzdmREJnRzY4Tm84VjViZ2tuc1AzVTdxSTdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAhqKMA0G
CSqGSIb3DQEBCwUAA4IBAQARrfQe9ZqpIAj1EuWXyqtFAGA43W39R5Q7UDUtDh7b
cC/0sFQQXXOYrIs7NfAOsv8GIF9gtkRyJLXoHa+2lqsO3of0mEHL6ZI5TlDiGCop
qAGj27WMuROaWVgFGQgOsSSL0gYX82uqOVZwUifm/OjE5Wkp+ocylbSXZGd/v6Fq
lmd4TI0CBUTKaaSfX5ZBRAL1zjjOrgbHdcQPZQAgU7BlJ8b7oDbjZqYnNeioGcL9
LJuXACNIlw7t34Rrt4H3sxC4YCCqA79yj5RG5Z4HH3vuQK5kF0EwmBf1yqtH/EqR
DTZtPFolJHnY/vZY9/8r9vGicNYdpO6sS6rp7ge1rV0w
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:26:10 2026 by rpki-client