Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JoU_TDMsC9mbJ2l4sKwDJjYd5pM.roa
File: JoU_TDMsC9mbJ2l4sKwDJjYd5pM.roa (raw, json)
Hash identifier: 3RtWAVu/kdvo8dft6k+ACGkn7Ly1RrV7PWKfr2d34Mw=
Subject key identifier: 26:85:3F:4C:33:2C:0B:D9:9B:27:69:78:B0:AC:03:26:36:1D:E6:93
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D976D1315A79264702CDFFDDB2987AAF2
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JoU_TDMsC9mbJ2l4sKwDJjYd5pM.roa
Signing time: Thu 16 Apr 2026 17:53:21 +0000
ROA not before: Thu 16 Apr 2026 17:53:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198924
IP address blocks: 2.26.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:6d:13:15:a7:92:64:70:2c:df:fd:db:29:87:aa:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 16 17:53:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26853f4c332c0bd99b276978b0ac0326361de693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:58:0c:97:27:79:3e:8e:4b:9e:27:0e:35:f6:
55:d7:2f:30:29:b8:b8:19:53:2c:c6:64:7d:2c:eb:
09:bd:b3:ef:e5:39:27:be:eb:13:4e:1d:60:9b:07:
99:c6:c5:94:90:80:fd:29:d0:61:61:4e:c2:ec:37:
0d:ca:a4:35:da:17:bb:ab:c1:8e:ef:57:48:7e:2d:
34:21:f0:7a:31:1b:6f:3e:4f:09:95:d1:df:09:63:
4f:1e:13:8d:cb:ae:f5:b5:a5:e8:49:c3:03:0c:81:
81:b9:e7:43:01:c8:26:1d:71:a5:99:6a:2d:90:61:
ba:a4:03:94:58:8d:b5:17:70:1f:99:56:7b:58:11:
b1:01:fc:c7:ce:08:b8:4b:6e:20:45:7d:1e:c2:c4:
37:d3:84:e0:2d:9c:ca:6c:9c:6b:32:77:9f:66:c5:
15:8b:92:64:a6:b1:73:c4:d5:c4:a7:03:1b:60:2e:
c9:51:f9:4c:3b:84:11:b0:ce:9e:1b:d4:83:97:d6:
43:80:84:95:d2:f2:40:2a:92:cf:43:19:7b:fa:29:
b7:b6:11:d2:dc:40:5e:d1:28:c0:54:27:b9:ac:3e:
f1:3c:25:9e:61:23:6c:09:f1:8d:6a:03:1f:ef:96:
86:f6:d4:7e:57:af:0d:fd:7f:8f:89:32:94:d7:1e:
f5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:85:3F:4C:33:2C:0B:D9:9B:27:69:78:B0:AC:03:26:36:1D:E6:93
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JoU_TDMsC9mbJ2l4sKwDJjYd5pM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.126.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ac:5f:5a:e5:f6:fa:43:61:c8:b9:a3:10:a6:62:68:29:dd:
fd:8f:45:cb:3d:cb:55:f8:87:c1:fc:80:54:f3:81:0a:34:97:
4c:1d:f6:11:fd:5c:38:79:46:46:31:ed:24:aa:06:2e:b9:fb:
1b:04:57:ee:b3:f7:48:40:25:9e:62:18:35:b8:13:85:22:84:
41:fa:4d:cb:db:2a:1f:58:91:d2:69:ca:df:ef:c1:b5:db:7f:
4b:64:51:de:46:ba:ef:9a:c8:a0:81:a0:79:bc:8d:6d:aa:02:
39:e2:a3:67:24:5a:c2:9a:46:fa:8e:98:fc:5e:f8:72:63:c5:
8a:1a:36:12:25:4b:d0:91:f6:68:4d:89:1c:d5:6b:b2:f5:1f:
41:fc:c6:37:0b:5a:25:17:b0:94:30:23:b7:ad:41:ce:71:08:
c8:85:db:d3:e7:62:db:23:1c:df:e8:92:70:81:06:d9:2c:5c:
08:f2:ed:55:a8:1d:4e:af:31:c5:4a:30:08:19:c8:b6:ad:e3:
95:5d:93:a9:bd:c2:22:80:18:ce:43:f4:6a:4d:5f:91:00:80:
29:76:3c:d8:97:89:9a:c4:af:1a:bf:35:6f:1c:4c:a4:08:28:
da:b3:ba:35:e2:2f:42:76:e3:83:2b:bb:87:fd:c8:be:93:37:
07:12:b2:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2XbRMVp5JkcCzf/dsph6ryMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNDE2MTc1MzIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjg1M2Y0YzMzMmMwYmQ5OWIyNzY5NzhiMGFjMDMyNjM2MWRlNjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVgMlyd5Po5LnicONfZV1y8wKbi4
GVMsxmR9LOsJvbPv5TknvusTTh1gmweZxsWUkID9KdBhYU7C7DcNyqQ12he7q8GO
71dIfi00IfB6MRtvPk8JldHfCWNPHhONy671taXoScMDDIGBuedDAcgmHXGlmWot
kGG6pAOUWI21F3AfmVZ7WBGxAfzHzgi4S24gRX0ewsQ304TgLZzKbJxrMnefZsUV
i5JkprFzxNXEpwMbYC7JUflMO4QRsM6eG9SDl9ZDgISV0vJAKpLPQxl7+im3thHS
3EBe0SjAVCe5rD7xPCWeYSNsCfGNagMf75aG9tR+V68N/X+PiTKU1x718QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCaFP0wzLAvZmydpeLCsAyY2HeaTMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvSm9VX1RETXNDOW1iSjJsNHNLd0RKallkNXBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAhp+MA0G
CSqGSIb3DQEBCwUAA4IBAQAsrF9a5fb6Q2HIuaMQpmJoKd39j0XLPctV+IfB/IBU
84EKNJdMHfYR/Vw4eUZGMe0kqgYuufsbBFfus/dIQCWeYhg1uBOFIoRB+k3L2yof
WJHSacrf78G1239LZFHeRrrvmsiggaB5vI1tqgI54qNnJFrCmkb6jpj8XvhyY8WK
GjYSJUvQkfZoTYkc1Wuy9R9B/MY3C1olF7CUMCO3rUHOcQjIhdvT52LbIxzf6JJw
gQbZLFwI8u1VqB1OrzHFSjAIGci2reOVXZOpvcIigBjOQ/RqTV+RAIApdjzYl4ma
xK8avzVvHEykCCjas7o14i9CduODK7uH/ci+kzcHErIG
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:11 2026 by rpki-client