Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/V9GJSEBRSFQE3g7orZzq7U6j9SE.roa
File: V9GJSEBRSFQE3g7orZzq7U6j9SE.roa (raw, json)
Hash identifier: jndbNXk4Pgh6M6raN444IsG8kAcd5yZsquVR4qwVv0k=
Subject key identifier: 57:D1:89:48:40:51:48:54:04:DE:0E:E8:AD:9C:EA:ED:4E:A3:F5:21
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E56ADE51C58B62A9DB7F475E24CDA26F2
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/V9GJSEBRSFQE3g7orZzq7U6j9SE.roa
Signing time: Sat 23 May 2026 21:11:37 +0000
ROA not before: Sat 23 May 2026 21:11:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 2.26.177.0/24 maxlen: 24
2.26.178.0/24 maxlen: 24
2.26.179.0/24 maxlen: 24
2.26.180.0/24 maxlen: 24
2.26.181.0/24 maxlen: 24
2.26.184.0/24 maxlen: 24
2.26.187.0/24 maxlen: 24
2.27.108.0/24 maxlen: 24
2.27.142.0/23 maxlen: 24
2.27.146.0/23 maxlen: 24
2.27.249.0/24 maxlen: 24
193.23.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:56:ad:e5:1c:58:b6:2a:9d:b7:f4:75:e2:4c:da:26:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 23 21:11:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57d189484051485404de0ee8ad9ceaed4ea3f521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5b:78:ab:46:fe:63:77:8b:60:89:67:18:3d:
75:8f:47:5b:bd:37:fc:aa:27:7b:74:f9:12:ea:9e:
5a:61:34:9b:ff:04:1d:31:41:de:2c:c2:34:b9:d1:
c8:1e:54:1c:a2:46:82:08:ed:1f:05:d0:90:da:c1:
e3:87:d1:79:2e:5c:93:e2:ef:cf:48:f7:b1:48:99:
e5:ca:d4:5c:34:38:46:80:7f:d4:43:23:2f:5e:75:
32:0a:f0:6b:72:9e:f2:08:e5:d5:ef:38:ee:ac:ac:
4c:97:7f:0d:50:59:53:0f:6f:97:42:9a:84:b9:bd:
c5:4b:d6:6e:2a:b2:36:fd:38:57:b8:f2:06:25:91:
5b:5e:0a:04:ed:cd:1e:7d:9b:85:0e:a3:81:34:5d:
bb:b6:77:3b:f1:0f:c9:21:82:5a:96:07:8f:6b:d3:
6b:d1:68:3b:4f:03:9c:29:da:b1:ea:02:97:a3:47:
df:74:87:8b:ae:15:b4:f4:a0:2b:1c:04:d8:1d:77:
c5:9f:58:b7:0d:58:f8:fa:1b:1f:61:94:c3:62:9f:
3e:a5:73:ab:fd:53:78:98:e4:6d:d4:f6:6f:dc:4f:
6e:0d:1a:d4:b7:0f:21:81:68:3c:09:bb:af:bb:9c:
8b:fa:18:fd:7f:5e:c7:2a:0d:be:20:dc:ec:e5:b1:
40:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D1:89:48:40:51:48:54:04:DE:0E:E8:AD:9C:EA:ED:4E:A3:F5:21
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/V9GJSEBRSFQE3g7orZzq7U6j9SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.177.0-2.26.181.255
2.26.184.0/24
2.26.187.0/24
2.27.108.0/24
2.27.142.0/23
2.27.146.0/23
2.27.249.0/24
193.23.217.0/24
Signature Algorithm: sha256WithRSAEncryption
87:d4:9c:95:45:5f:d7:b1:73:a4:81:1b:ac:02:bb:9c:a0:bf:
a9:81:c4:d2:df:c3:6a:8d:f6:4d:a8:4f:fb:3f:90:37:e1:1c:
35:40:dc:25:59:8a:83:24:99:bf:07:17:9c:18:2f:13:7a:d9:
ca:2a:ec:74:bf:61:32:16:fd:c8:8a:87:ad:24:9f:d9:af:5f:
1d:0c:92:06:9c:3a:fc:3b:db:40:71:b2:99:30:14:10:36:60:
49:72:9d:b4:80:81:d7:aa:fa:78:cd:62:a8:e9:ee:05:ea:3f:
54:4b:de:a7:53:37:85:88:d5:b1:a7:55:20:1e:41:42:80:54:
8c:a6:e5:2e:45:5f:42:e4:e4:b6:ed:ab:c4:e3:3a:5b:05:3b:
38:86:e1:4d:5b:a2:28:ef:de:8d:e1:a1:75:74:f4:f5:b9:a4:
a0:8d:b8:0b:7e:62:a5:e0:f5:02:ee:8a:48:56:29:82:d0:c8:
5f:58:98:1b:4a:92:b9:fc:60:13:69:63:d6:06:54:68:ea:95:
78:ca:be:41:25:d1:d6:80:ab:45:4b:d8:a9:b9:4b:4f:c3:07:
71:1c:fa:3e:5f:cd:f9:ec:e9:f7:5f:83:39:bd:c6:89:5c:06:
27:43:c8:26:c5:6f:7e:a7:02:14:9b:e8:a9:f3:a7:d3:65:c3:
fc:f7:90:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:07 2026 by rpki-client