Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Sfg-gEnJXe12ZMN5KA_uIBE3z4o.roa
File: Sfg-gEnJXe12ZMN5KA_uIBE3z4o.roa (raw, json)
Hash identifier: qOMIGu/YTJgXnU+VFVM2kjVxb2QTe2sDt6zg/Aijy6A=
Subject key identifier: 49:F8:3E:80:49:C9:5D:ED:76:64:C3:79:28:0F:EE:20:11:37:CF:8A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D932C816D2A42BA47DEEC036A29AF020F
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Sfg-gEnJXe12ZMN5KA_uIBE3z4o.roa
Signing time: Wed 15 Apr 2026 22:04:20 +0000
ROA not before: Wed 15 Apr 2026 22:04:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401152
IP address blocks: 2.26.32.0/22 maxlen: 24
2.26.36.0/22 maxlen: 24
2.26.40.0/22 maxlen: 24
2.26.44.0/22 maxlen: 24
2.26.56.0/22 maxlen: 24
2.26.95.0/24 maxlen: 24
144.31.8.0/23 maxlen: 24
144.31.110.0/24 maxlen: 24
144.31.160.0/22 maxlen: 24
144.31.235.0/24 maxlen: 24
150.241.69.0/24 maxlen: 24
185.207.135.0/24 maxlen: 24
185.216.104.0/22 maxlen: 24
193.23.192.0/24 maxlen: 24
193.23.198.0/24 maxlen: 24
193.23.204.0/22 maxlen: 22
193.23.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:93:2c:81:6d:2a:42:ba:47:de:ec:03:6a:29:af:02:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 15 22:04:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49f83e8049c95ded7664c379280fee201137cf8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ee:87:98:f1:d2:2e:21:1d:59:e8:3a:ae:13:
40:bb:6a:31:36:77:38:e6:d8:ae:84:0a:b3:92:f4:
19:e0:c6:03:1f:38:aa:2f:08:76:b0:ca:6b:01:44:
0b:05:08:b9:a9:28:49:e4:e1:d6:0a:39:58:e5:74:
e1:09:fb:c0:a6:be:65:f1:63:1c:d7:eb:10:a7:c4:
be:98:b5:12:67:9c:69:d4:00:86:bc:22:e0:ce:da:
c2:88:c8:ee:60:87:c5:67:a4:d2:e2:67:18:98:6e:
9a:59:dd:d9:1c:02:f2:d5:1e:05:ea:2a:f7:3c:0d:
53:99:db:4b:db:1f:fb:1d:cd:5c:87:95:63:04:f7:
e0:b7:8e:e3:48:ab:22:39:9d:90:12:f1:b5:1e:bf:
80:53:f3:79:d2:fc:85:67:fb:03:18:f5:34:b3:d6:
c0:0b:28:da:43:38:0e:7f:99:6a:dd:4e:aa:d4:89:
56:e9:ec:42:dd:ce:c0:8f:ec:2c:37:eb:f5:90:ac:
98:63:62:51:25:84:be:63:53:88:79:22:36:64:b4:
de:9a:32:4c:75:66:fe:46:bd:5c:79:a4:ae:83:09:
49:13:75:f1:7c:d1:fb:2e:3d:ab:d3:3e:96:73:6b:
da:75:e8:ab:f0:9b:12:1e:b1:e5:5f:1a:7d:f8:b6:
29:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F8:3E:80:49:C9:5D:ED:76:64:C3:79:28:0F:EE:20:11:37:CF:8A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Sfg-gEnJXe12ZMN5KA_uIBE3z4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.32.0/20
2.26.56.0/22
2.26.95.0/24
144.31.8.0/23
144.31.110.0/24
144.31.160.0/22
144.31.235.0/24
150.241.69.0/24
185.207.135.0/24
185.216.104.0/22
193.23.192.0/24
193.23.198.0/24
193.23.204.0/22
193.23.212.0/22
Signature Algorithm: sha256WithRSAEncryption
19:13:05:7f:b9:db:5e:14:98:88:40:fa:b1:6c:0e:74:18:36:
fe:fa:a9:f3:50:6f:9c:94:17:21:5c:67:e0:4b:30:a1:f7:d0:
cf:4e:4e:d1:32:eb:26:32:1d:82:3f:51:1d:13:61:07:40:5b:
fd:87:f6:c0:19:7e:85:a7:72:42:70:3e:80:df:a3:3c:f1:73:
d9:a9:29:ac:8f:11:9f:d4:9f:5b:6b:f4:f5:2b:85:cc:85:0d:
30:15:c8:49:17:82:1d:a6:bd:b2:96:9f:3b:38:83:1a:e1:ba:
27:63:7c:09:ec:85:4e:7e:3b:2a:c7:0c:be:80:08:19:2b:25:
a3:98:3d:80:05:8a:cf:48:0f:9e:97:ae:fe:06:ae:be:6c:31:
c0:d7:7b:a7:06:7a:84:48:b9:5e:c2:4f:30:cc:30:3b:bb:0b:
fa:4e:43:cb:7a:3f:42:88:d9:63:6a:f3:d5:14:c6:a7:fd:23:
4c:05:ef:83:b8:6d:0c:ce:bd:71:49:cf:e5:58:ea:73:34:e5:
85:ad:d2:37:d6:08:8f:bd:d6:86:31:c3:8a:69:55:24:66:c2:
1b:f8:cf:d6:dc:05:91:db:e4:c5:e7:68:1d:55:68:c2:a0:bd:
46:2b:73:d4:44:fb:2d:e6:13:3a:9e:11:7c:b7:7e:1d:11:3b:
23:88:73:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:23 2026 by rpki-client