Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JbWcYKClJYcjVp1Hpa4onsTxgUo.roa
File: JbWcYKClJYcjVp1Hpa4onsTxgUo.roa (raw, json)
Hash identifier: j3ItP+7lcwXo3mKKNdjVt9ws5/ph5gmwAqM34oTHYy4=
Subject key identifier: 25:B5:9C:60:A0:A5:25:87:23:56:9D:47:A5:AE:28:9E:C4:F1:81:4A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FA46E27E7EEDD1A7B6D113C062ED49200
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JbWcYKClJYcjVp1Hpa4onsTxgUo.roa
Signing time: Mon 27 Jul 2026 16:35:10 +0000
ROA not before: Mon 27 Jul 2026 16:35:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200775
IP address blocks: 2.26.192.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:6e:27:e7:ee:dd:1a:7b:6d:11:3c:06:2e:d4:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 27 16:35:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25b59c60a0a5258723569d47a5ae289ec4f1814a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:19:df:b8:3b:89:e1:59:1f:a7:70:24:5e:7c:
7d:a4:e3:8a:8a:c2:01:c9:63:a8:e7:89:a0:eb:e0:
c8:2c:b5:c9:ba:d1:05:d7:d3:58:b7:3c:fc:c3:d2:
ae:37:1f:e0:9a:00:dc:cf:97:35:25:73:9a:8c:62:
52:6c:7c:65:e4:bb:41:bd:ea:c3:e4:9e:5d:e2:55:
bb:34:4a:a3:92:f8:e9:df:b3:c5:64:f6:77:c3:aa:
74:84:38:f1:c8:fd:e3:a3:94:95:b6:ba:00:3a:f2:
4e:9f:ea:bd:1f:d3:ea:e5:e8:b6:31:30:d2:a0:39:
25:84:35:df:73:a5:ad:c3:d9:52:09:25:74:57:a7:
d3:f7:b6:3f:8a:8b:c1:9c:02:91:8a:f2:f2:ae:ac:
a7:0b:5b:b8:92:d0:71:9a:18:92:50:3c:7c:3b:11:
e1:7e:69:e5:29:f5:6e:f6:b8:14:ea:29:45:4e:07:
a4:7b:2c:bd:90:78:3f:53:a6:4f:3d:e2:69:59:49:
f9:e9:bd:85:36:ca:24:92:6f:96:61:c5:01:69:3a:
49:d0:35:0f:ee:a2:73:dc:d2:cf:3a:ac:06:87:8f:
74:03:77:d8:74:0f:1f:fe:49:cb:7a:ce:96:11:08:
a9:6f:be:70:df:b0:08:ef:ea:2c:1d:4c:2b:64:84:
7b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B5:9C:60:A0:A5:25:87:23:56:9D:47:A5:AE:28:9E:C4:F1:81:4A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JbWcYKClJYcjVp1Hpa4onsTxgUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.192.0/21
Signature Algorithm: sha256WithRSAEncryption
64:8d:26:57:b9:0c:ee:bb:de:e7:a5:19:7f:fe:0a:5d:a0:47:
9d:bf:06:eb:76:b7:cc:03:0c:d8:d1:1f:ed:45:d6:cb:c9:eb:
53:bd:6c:84:99:b5:19:5b:eb:e3:49:59:c7:c0:31:d8:c6:52:
6e:7d:47:db:5f:7f:4f:74:9b:8f:fd:62:f5:03:bb:7a:66:31:
c9:d8:29:c8:e7:eb:39:e4:38:f8:50:09:7f:7e:f2:95:f8:a3:
8f:d5:92:6e:53:ad:c6:f4:d4:fe:c0:01:a5:79:a1:5b:2d:ed:
0d:0c:53:e6:46:96:9c:bc:75:ff:37:a1:6a:d5:e1:84:da:f8:
ba:f6:81:0c:aa:05:b6:88:76:1f:fc:16:0f:31:42:0f:a1:ff:
e9:c2:5a:aa:70:c9:29:67:13:6c:2d:ae:9b:8d:5f:31:c8:89:
cb:25:5a:56:ad:78:3a:9a:de:05:8c:d0:52:8d:de:8c:b9:cd:
84:81:16:f7:04:48:77:60:62:f0:5d:83:48:d3:90:da:13:e0:
0c:7d:78:f5:e6:b5:e1:c9:82:5f:67:11:5f:20:ef:8f:5a:38:
3b:d7:71:d9:48:51:ba:3f:46:63:e7:c3:f4:ef:1a:6b:52:f3:
10:2b:45:c7:24:76:72:d4:82:fa:8e:b7:75:64:96:f1:32:bf:
ff:fb:bf:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:33:10 2026 by rpki-client