Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/QVUm9jDx8ZHmM6vQjkvwv8ZFN2M.roa
File: QVUm9jDx8ZHmM6vQjkvwv8ZFN2M.roa (raw, json)
Hash identifier: umrMp1wxAt943EtrzEJ85WNzlMG0AJWExp2gUBKqvy0=
Subject key identifier: 41:55:26:F6:30:F1:F1:91:E6:33:AB:D0:8E:4B:F0:BF:C6:45:37:63
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FA983347D725E05BDB3167E89CF37D148
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/QVUm9jDx8ZHmM6vQjkvwv8ZFN2M.roa
Signing time: Tue 28 Jul 2026 16:16:15 +0000
ROA not before: Tue 28 Jul 2026 16:16:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 2.26.173.0/24 maxlen: 24
2.26.184.0/24 maxlen: 24
2.27.163.0/24 maxlen: 24
31.77.116.0/24 maxlen: 24
31.77.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:83:34:7d:72:5e:05:bd:b3:16:7e:89:cf:37:d1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 28 16:16:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=415526f630f1f191e633abd08e4bf0bfc6453763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:24:d7:c4:e7:2d:de:48:43:b5:96:31:a0:74:
60:90:93:63:00:10:dc:6d:ba:d8:34:8f:11:24:c0:
07:af:d9:8c:7c:7d:50:c7:bc:f3:a6:6e:7d:a7:09:
a4:37:8d:da:96:e7:cb:72:5b:96:ca:f3:9e:50:30:
c6:2c:65:67:ec:69:5e:b4:d0:a8:bf:ed:b8:8a:12:
82:10:8e:0e:c4:97:77:f5:35:68:63:fb:38:a2:eb:
82:50:18:0f:c8:de:fc:14:3b:32:d5:49:6e:50:94:
db:ca:19:cd:ba:27:67:7c:0c:ab:90:c7:3d:7f:ad:
26:2f:e9:51:d7:84:9f:6a:0d:72:16:12:6a:6d:02:
9d:e6:82:c8:8b:fe:d5:09:4e:8d:a7:91:c7:a1:e7:
0c:a8:5f:1d:dd:2b:cc:68:af:f6:cd:0a:17:15:0b:
53:e1:0a:8a:07:3b:a4:3b:ed:58:cb:a5:9d:87:51:
ab:ad:f8:22:1e:b3:26:1d:5f:99:96:c4:09:32:3e:
2b:24:50:b4:a5:bf:33:42:60:44:26:a2:ae:3e:e4:
89:bf:16:d0:8d:6e:bb:51:ca:12:95:6d:a7:51:05:
08:37:7d:96:a4:21:db:2f:7e:1b:cf:f9:f5:4d:7c:
1a:50:f6:55:38:99:64:14:47:d3:a1:d1:67:7a:0c:
c9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:55:26:F6:30:F1:F1:91:E6:33:AB:D0:8E:4B:F0:BF:C6:45:37:63
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/QVUm9jDx8ZHmM6vQjkvwv8ZFN2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.173.0/24
2.26.184.0/24
2.27.163.0/24
31.77.116.0/24
31.77.119.0/24
Signature Algorithm: sha256WithRSAEncryption
01:bd:22:b3:68:11:f6:1b:03:5e:0f:76:37:ac:b0:13:b9:94:
b0:eb:4b:e6:96:5e:97:6d:3d:69:d4:f7:00:6c:79:5d:60:f0:
38:fd:55:47:d1:7b:75:b5:c4:2f:42:7b:3d:01:e6:a1:c5:97:
24:ef:ef:be:e4:fa:9b:2b:61:68:81:99:d3:a7:a3:ae:ed:9e:
a8:4b:a3:b8:14:92:24:f3:2e:84:23:99:39:d0:54:67:10:85:
be:ad:d4:e2:7e:3a:e9:24:69:76:52:5b:5a:d4:5d:08:b3:a1:
52:2e:b8:de:60:c9:2c:05:28:72:98:ba:20:a9:c8:bb:a4:d7:
eb:9a:35:c5:66:4e:43:c0:9d:fe:41:b6:68:21:85:5c:3a:65:
ec:de:53:9c:85:d9:92:a0:75:99:a5:47:52:27:4c:a1:6b:9b:
c2:5c:f9:5b:5a:3a:fc:ff:ed:73:5b:fc:17:b7:a7:c1:1b:7c:
8a:6f:9e:4a:7d:74:f9:4c:da:3e:03:06:ed:c5:05:d0:72:b3:
bf:45:a3:78:eb:9f:32:23:c1:4f:b6:51:b0:b2:d7:fb:ad:e7:
ce:fd:42:ed:cb:e5:20:8a:60:9a:f4:b5:b4:72:7d:47:97:03:
f4:18:17:bf:22:e0:ba:03:57:20:8c:0a:82:52:ef:58:9a:bc:
01:5a:75:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:06:10 2026 by rpki-client