Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HDx9xvkcgNE4kweuJ5Nm69gMHiY.roa
File: HDx9xvkcgNE4kweuJ5Nm69gMHiY.roa (raw, json)
Hash identifier: 2cxUbNiFapX0pSwNjEL0FGeNv/FvIixcGYxlJUULtDo=
Subject key identifier: 1C:3C:7D:C6:F9:1C:80:D1:38:93:07:AE:27:93:66:EB:D8:0C:1E:26
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019EAE5256EF5CE8FAAFB3253F1DFB338AB9
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HDx9xvkcgNE4kweuJ5Nm69gMHiY.roa
Signing time: Tue 09 Jun 2026 21:38:12 +0000
ROA not before: Tue 09 Jun 2026 21:38:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206134
IP address blocks: 2.26.16.0/22 maxlen: 24
2.26.28.0/22 maxlen: 24
2.26.116.0/22 maxlen: 24
2.26.151.0/24 maxlen: 24
2.26.248.0/22 maxlen: 24
2.27.16.0/22 maxlen: 24
2.27.120.0/22 maxlen: 24
31.76.16.0/22 maxlen: 24
31.76.44.0/22 maxlen: 24
31.76.72.0/22 maxlen: 24
31.76.96.0/22 maxlen: 24
31.76.224.0/22 maxlen: 24
31.77.132.0/22 maxlen: 24
31.77.174.0/23 maxlen: 24
64.188.115.0/24 maxlen: 24
77.239.127.0/24 maxlen: 24
144.31.98.0/24 maxlen: 24
144.31.154.0/23 maxlen: 24
144.31.180.0/22 maxlen: 24
144.31.188.0/23 maxlen: 24
144.31.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ae:52:56:ef:5c:e8:fa:af:b3:25:3f:1d:fb:33:8a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 9 21:38:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c3c7dc6f91c80d1389307ae279366ebd80c1e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:55:e8:6f:3c:7f:33:e2:9b:db:86:03:23:db:
2d:a7:6b:9c:37:7d:a8:74:32:5a:ff:d1:38:90:a4:
04:a3:24:b5:18:bf:4c:30:da:2b:89:a6:52:2a:88:
40:83:56:96:1b:37:5c:40:0a:a8:d7:04:dc:5a:fd:
e6:07:7a:0f:b5:1c:51:63:60:4f:5e:a5:4d:23:51:
fa:33:f2:a0:a0:0c:a6:20:31:10:fe:fe:e5:9a:cc:
a3:8c:4f:ea:0b:40:6e:9c:1a:2d:ef:2c:0b:8c:34:
f2:8c:80:fc:f0:8a:53:dd:e5:e3:5a:2d:31:26:73:
8a:43:a5:3e:37:36:d6:5c:82:aa:4e:b9:1b:af:25:
f3:be:ea:13:ad:87:d6:5d:2a:bf:a3:82:0a:ba:84:
93:bc:1e:33:a3:29:26:f0:60:c5:0c:41:7f:81:a8:
5b:05:31:35:cd:50:99:ba:88:80:9a:a6:1e:25:02:
50:45:a5:93:ec:30:47:ee:fb:d9:0f:d6:3b:f7:29:
01:56:f5:4c:be:1f:79:dc:d1:22:e5:38:21:26:f8:
a0:76:e2:8e:59:5c:4d:31:c4:1c:2e:26:81:34:06:
be:6b:7a:87:35:27:8e:5c:15:04:68:1f:c4:56:39:
7a:a4:10:a3:69:87:38:e7:8a:9e:78:e3:a7:c4:02:
e5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3C:7D:C6:F9:1C:80:D1:38:93:07:AE:27:93:66:EB:D8:0C:1E:26
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HDx9xvkcgNE4kweuJ5Nm69gMHiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.16.0/22
2.26.28.0/22
2.26.116.0/22
2.26.151.0/24
2.26.248.0/22
2.27.16.0/22
2.27.120.0/22
31.76.16.0/22
31.76.44.0/22
31.76.72.0/22
31.76.96.0/22
31.76.224.0/22
31.77.132.0/22
31.77.174.0/23
64.188.115.0/24
77.239.127.0/24
144.31.98.0/24
144.31.154.0/23
144.31.180.0/22
144.31.188.0/23
144.31.251.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:87:05:88:bd:d0:92:88:da:9e:cd:e3:dd:73:a6:09:ab:4b:
ce:e9:8b:2a:09:19:2c:95:2a:ab:7d:ff:6b:ca:eb:ad:e3:b7:
55:14:8a:45:21:67:c0:30:e1:1c:ef:ed:35:1d:83:bd:ff:a2:
69:d1:4b:70:81:1d:5d:cb:08:47:36:a3:de:f4:c0:05:01:2c:
ff:cb:d7:5e:f5:7c:37:a3:29:05:8a:4b:f9:a6:f7:88:8b:4d:
9e:51:af:b8:32:1c:e8:4d:5f:10:a2:0c:8f:63:11:58:66:ca:
40:fd:91:f7:fa:99:7e:73:3b:e2:70:03:92:2e:43:75:4f:ca:
9f:4e:c0:06:f0:c9:ea:0a:7b:21:cf:2c:81:d9:20:a4:84:5c:
d4:27:ed:e7:e0:c8:0c:be:ff:38:54:84:01:3a:32:26:af:25:
62:49:67:dc:3a:7f:8d:5d:4f:fb:b3:41:b8:30:69:34:b5:ec:
8f:c3:08:39:01:61:41:61:43:6b:10:ba:85:50:d0:44:6d:66:
8a:a6:1a:5c:6d:a0:fb:4d:b9:80:ee:75:9a:33:f6:95:9c:ea:
0e:21:8a:81:d8:4d:2f:ab:c8:4c:6e:d3:b4:df:e0:0c:23:79:
24:61:e4:75:bb:a4:25:89:7b:3e:12:43:f7:0d:20:7c:50:c5:
22:f1:91:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:54:48 2026 by rpki-client