Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Lulhc0N3SjBqqWAx4FDdj_E9NwA.roa
File: Lulhc0N3SjBqqWAx4FDdj_E9NwA.roa (raw, json)
Hash identifier: gFc54voJMcqw7Se8KP2VWi8D9I2M6V6L6eXyPfRoBQQ=
Subject key identifier: 2E:E9:61:73:43:77:4A:30:6A:A9:60:31:E0:50:DD:8F:F1:3D:37:00
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D6EDC400E6848AAA3B9891BE994D449F8
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Lulhc0N3SjBqqWAx4FDdj_E9NwA.roa
Signing time: Wed 08 Apr 2026 20:50:21 +0000
ROA not before: Wed 08 Apr 2026 20:50:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214560
IP address blocks: 2.26.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6e:dc:40:0e:68:48:aa:a3:b9:89:1b:e9:94:d4:49:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 8 20:50:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ee9617343774a306aa96031e050dd8ff13d3700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4b:d2:c0:3f:20:82:5a:4e:3c:c2:d0:63:55:
d2:10:80:ac:6a:37:84:f1:f9:4d:7a:50:c0:30:2f:
ab:90:5b:2f:4f:dc:5d:d6:dc:ef:4f:45:a9:ca:fa:
04:72:5b:86:c4:36:b6:16:86:a6:2d:0e:8e:17:b1:
53:1e:f1:70:09:f8:ac:f3:54:54:3f:76:db:ec:9b:
81:15:80:b2:1d:65:66:23:f2:27:1c:0c:7e:32:46:
0e:a8:af:a1:c2:b9:67:5b:58:d1:41:19:cc:0d:65:
ce:4b:b2:32:2f:5d:51:ee:c0:25:31:1c:9b:11:81:
3a:47:b8:bb:da:9c:f5:59:03:21:b9:dd:ce:a7:46:
e0:02:1c:85:c0:4e:61:4e:60:50:18:17:d1:21:a9:
72:f3:fd:86:47:f9:bf:66:e8:0e:07:ff:11:0d:3d:
7e:c0:a9:2e:76:66:1d:43:3a:c5:b3:33:9e:b5:4b:
cc:05:42:e4:72:53:25:65:7e:f6:7a:e6:4c:7a:c0:
d9:5f:0a:ba:a8:02:f5:81:8b:ed:12:fd:1d:b7:d1:
88:1c:e9:53:4d:6f:54:3c:d5:66:69:2c:20:4e:f8:
6f:14:5d:36:29:c3:75:e5:85:1c:ce:95:12:16:2a:
66:e7:55:05:21:d5:67:54:33:6e:a1:60:65:07:b9:
ca:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E9:61:73:43:77:4A:30:6A:A9:60:31:E0:50:DD:8F:F1:3D:37:00
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Lulhc0N3SjBqqWAx4FDdj_E9NwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.145.0/24
Signature Algorithm: sha256WithRSAEncryption
83:93:12:75:aa:71:f6:72:f8:af:65:de:95:3c:8c:ba:fc:e0:
bc:a9:71:e8:23:65:3a:8e:54:fe:b0:7e:84:d1:9e:33:5e:d8:
0f:12:72:b8:3a:e1:6e:8a:41:d6:8f:87:9d:87:38:55:87:de:
12:cf:0f:6a:3f:9a:87:ba:57:e3:2f:f6:d9:44:42:a3:0d:89:
1b:4f:87:9f:42:7f:2a:5d:01:5b:af:4d:4c:af:74:1f:93:d1:
dd:d5:91:de:f1:84:c6:18:c1:b6:53:c3:9e:e7:ad:a5:a1:96:
96:7a:f3:71:00:f4:3c:02:c7:f7:76:e5:16:0b:77:0a:06:dc:
d3:76:c8:5c:c4:34:5f:85:49:08:db:c9:05:2d:90:d1:d1:72:
27:9f:32:c2:5e:ca:fd:5e:ac:5c:95:06:6f:73:a6:78:21:86:
69:f5:9b:34:71:19:a4:d9:9d:a0:18:e5:17:0d:10:de:3e:d3:
26:c2:a3:cb:8e:64:47:33:85:d7:ad:63:5c:0a:3f:84:41:68:
5e:ab:e3:7b:72:e6:a3:45:86:4a:db:68:4b:15:2b:cc:4b:db:
4c:5a:8d:1a:a4:d9:cc:e3:5e:19:48:45:e2:ea:a7:67:30:35:
20:e2:8b:b9:ed:30:cd:31:12:62:c9:03:6e:5f:13:0d:7c:db:
27:f5:52:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:28:41 2026 by rpki-client