Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ZkBMLQmhQtMERcExmL0VjJfAmg4.roa
File: ZkBMLQmhQtMERcExmL0VjJfAmg4.roa (raw, json)
Hash identifier: 14dBFwxm/eOkf5eZQHjtDj8UhZ2pGUWPplFtbMDiqOs=
Subject key identifier: 66:40:4C:2D:09:A1:42:D3:04:45:C1:31:98:BD:15:8C:97:C0:9A:0E
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D796AE3BEA8E56A6B2C7796E3F8A3B584
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ZkBMLQmhQtMERcExmL0VjJfAmg4.roa
Signing time: Fri 10 Apr 2026 22:02:21 +0000
ROA not before: Fri 10 Apr 2026 22:02:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215103
IP address blocks: 2.26.120.0/23 maxlen: 24
2.27.3.0/24 maxlen: 24
77.239.115.0/24 maxlen: 24
144.31.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:79:6a:e3:be:a8:e5:6a:6b:2c:77:96:e3:f8:a3:b5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 10 22:02:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66404c2d09a142d30445c13198bd158c97c09a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:07:f0:24:39:3a:18:1f:d2:6c:70:6f:fa:f6:
97:cc:72:80:ef:b6:8d:31:7c:1f:31:af:53:21:a3:
20:e7:8c:b8:20:42:1b:fb:12:9e:c3:44:1e:99:0a:
97:ed:61:3f:6c:5c:9b:6b:a5:46:f0:27:84:fa:64:
b3:3a:d7:8a:27:f4:6e:10:ec:17:bc:df:f9:62:ab:
53:34:9a:b4:73:3d:6d:fb:57:be:af:38:15:15:9d:
68:0d:68:f8:5a:3c:27:d0:a6:65:54:6e:3c:02:96:
e9:68:dd:ad:11:5a:b5:e6:fb:82:83:76:16:dc:2b:
74:7e:3f:e3:22:dd:6c:61:b4:4b:83:43:e3:98:f7:
5d:b3:05:3c:80:7b:22:91:de:a2:bf:02:a2:44:87:
2f:04:b4:f7:76:1c:70:ef:05:85:d7:da:df:00:85:
d0:7e:6f:58:5a:89:6e:25:3c:d4:72:45:4f:42:0c:
5f:58:92:fc:c5:00:b7:5c:c2:d3:92:23:16:ce:8d:
0e:52:27:39:ae:0f:03:32:1e:d0:40:09:e4:66:10:
76:05:dc:16:a1:ee:28:71:60:0d:64:72:cc:80:2d:
68:41:38:dd:db:e6:43:30:dd:26:8a:1b:cb:f8:40:
69:6f:99:88:cc:d3:19:ca:a2:bb:ae:e9:30:a2:79:
11:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:40:4C:2D:09:A1:42:D3:04:45:C1:31:98:BD:15:8C:97:C0:9A:0E
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ZkBMLQmhQtMERcExmL0VjJfAmg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.120.0/23
2.27.3.0/24
77.239.115.0/24
144.31.202.0/24
Signature Algorithm: sha256WithRSAEncryption
80:b1:79:00:0e:58:21:00:90:56:5c:c5:0f:1c:f9:e6:fc:89:
a4:b3:62:db:7a:2d:d4:a0:ab:42:50:3f:09:8e:c1:9f:ca:7f:
0c:d0:41:f2:b3:6a:cc:fe:02:b5:5c:65:2e:ad:9a:c9:c4:c8:
f8:99:07:27:17:bb:e3:93:e8:33:42:f9:8b:77:da:b0:c8:c8:
4d:53:97:5f:fb:7b:ac:57:a8:6a:18:40:a7:ee:a1:8a:e6:70:
58:6e:b0:02:d1:2e:c6:cd:32:99:3b:aa:16:23:15:e9:6a:61:
3d:f7:a6:24:a4:34:e2:8f:2f:29:dc:b5:a6:e7:28:e1:69:52:
ac:3c:78:65:ce:73:59:c7:48:9c:d3:28:6b:dd:46:40:f7:42:
f2:69:ed:21:53:5f:67:be:69:14:57:6b:33:11:23:12:15:20:
75:27:3c:b8:98:af:58:8d:29:31:e4:4f:e8:39:bf:cd:f7:2d:
db:17:d6:c1:09:a8:98:da:c1:06:e7:98:3b:f9:2f:f3:df:a6:
42:f8:c0:77:f1:6a:5d:ba:66:3a:78:22:98:67:b2:19:15:e8:
c2:3e:58:c5:f5:47:b8:50:b6:6c:23:7e:ca:6a:bb:87:2b:84:
91:7c:db:4f:2b:82:ea:24:5f:50:00:85:ef:64:d5:15:8d:77:
c7:f4:33:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:37 2026 by rpki-client