Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/N9nal4HOb3R_P8r0BuosaDtn7_s.roa
File: N9nal4HOb3R_P8r0BuosaDtn7_s.roa (raw, json)
Hash identifier: kKFLqNwA/STL1k3Q9czWL6c1gKcvuZUhgj9gQpwlw6c=
Subject key identifier: 37:D9:DA:97:81:CE:6F:74:7F:3F:CA:F4:06:EA:2C:68:3B:67:EF:FB
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D91E5AA1EEC48EC6337CC3700401F1229
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/N9nal4HOb3R_P8r0BuosaDtn7_s.roa
Signing time: Wed 15 Apr 2026 16:07:20 +0000
ROA not before: Wed 15 Apr 2026 16:07:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 2.26.132.0/24 maxlen: 24
2.26.153.0/24 maxlen: 24
2.26.166.0/24 maxlen: 24
2.27.172.0/24 maxlen: 24
2.27.243.0/24 maxlen: 24
144.31.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:91:e5:aa:1e:ec:48:ec:63:37:cc:37:00:40:1f:12:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 15 16:07:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37d9da9781ce6f747f3fcaf406ea2c683b67effb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:07:00:86:97:43:eb:0d:9b:c8:99:b9:5f:
c0:6a:ed:83:4f:2f:db:d6:7c:22:e0:ba:59:34:02:
a6:d6:31:17:2c:e1:60:bd:83:3c:ba:66:6c:2a:d7:
86:d0:38:7e:71:f5:58:34:7d:0f:db:04:62:84:0a:
ab:0b:70:54:bc:ca:1d:aa:58:d7:2b:60:92:fd:be:
0c:d7:1d:e3:9b:30:32:cc:c7:e4:f9:9e:82:f0:32:
4f:bd:10:af:ec:1e:1d:fa:ca:fe:c8:ab:ad:bb:23:
3c:dc:ac:01:af:35:df:9d:82:96:82:29:fc:e9:e9:
fb:89:8d:1f:b4:f4:a3:da:04:34:b3:df:60:15:ba:
be:b5:b1:73:d3:8c:e9:17:29:f4:86:aa:9d:69:18:
80:47:bf:3f:3a:81:ba:2a:9c:f0:39:12:44:71:c9:
39:81:32:4a:0e:b0:50:2d:71:eb:81:f3:32:ca:f6:
47:fa:bf:3d:70:2d:d2:01:fe:e6:60:ee:18:0e:55:
95:65:0b:fd:72:24:59:a8:06:41:6f:f3:96:15:ca:
84:d0:db:fb:2b:97:f4:90:fb:e5:3e:f2:56:95:fe:
fc:c6:e6:2d:bf:8c:ff:1e:04:55:7c:e7:3f:5f:fc:
a2:f0:89:a8:9a:86:0a:cb:5b:78:5f:13:7d:c0:fc:
f4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D9:DA:97:81:CE:6F:74:7F:3F:CA:F4:06:EA:2C:68:3B:67:EF:FB
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/N9nal4HOb3R_P8r0BuosaDtn7_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.132.0/24
2.26.153.0/24
2.26.166.0/24
2.27.172.0/24
2.27.243.0/24
144.31.149.0/24
Signature Algorithm: sha256WithRSAEncryption
96:a1:98:17:4f:4b:fc:6a:6b:d9:cb:e4:71:83:e7:e1:96:de:
3f:ef:bd:8a:78:0b:f8:b9:66:3c:6b:ae:30:d8:4f:f4:3c:40:
15:a3:b3:e7:41:70:e9:88:b9:9f:e0:23:2d:67:de:07:1d:74:
f2:b7:c6:a8:b6:4b:25:18:77:4a:4e:cc:08:15:11:b3:ba:44:
b2:9a:79:c0:52:00:96:99:7c:79:ea:f2:3b:6f:62:0a:65:3e:
e4:b6:88:a4:8a:60:db:24:a7:b4:0f:2b:08:77:6a:e9:2c:2f:
12:cc:9e:30:2e:5a:ee:6e:cb:0f:a6:0e:09:19:21:0e:33:d6:
f4:6c:a5:27:31:6c:d4:d8:bd:a8:ff:eb:0e:6d:0a:c3:fe:28:
cd:99:52:5a:9a:48:36:67:4e:73:87:3c:a3:55:d4:5f:6a:6e:
11:6b:ff:8e:00:1f:a9:c3:92:3a:c5:ba:1a:af:a4:8f:ab:08:
5f:a2:09:82:62:86:97:e3:98:6b:51:1a:a1:8b:34:ae:89:c2:
55:27:ab:61:2b:93:b0:60:33:3b:23:81:ca:0b:97:a6:97:71:
b1:b4:98:d2:b7:c3:38:62:5d:9c:19:a7:49:1e:c7:21:de:56:
88:2c:1c:3b:ba:62:60:f9:e5:0f:f8:f8:db:8a:9e:cd:a2:a3:
ef:54:5d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:50:25 2026 by rpki-client