Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/a5bKxZBvXC96lWopoTJ8fKYbqIA.roa
File: a5bKxZBvXC96lWopoTJ8fKYbqIA.roa (raw, json)
Hash identifier: Dxr0BxVqu9/9izfCBxfmBU8XWmwMl0sZn4ZpiUplhs8=
Subject key identifier: 6B:96:CA:C5:90:6F:5C:2F:7A:95:6A:29:A1:32:7C:7C:A6:1B:A8:80
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D72FCC266EF65CB452278EEE7202A337F
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/a5bKxZBvXC96lWopoTJ8fKYbqIA.roa
Signing time: Thu 09 Apr 2026 16:04:20 +0000
ROA not before: Thu 09 Apr 2026 16:04:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 2.26.144.0/24 maxlen: 24
2.26.146.0/24 maxlen: 24
2.26.147.0/24 maxlen: 24
2.26.148.0/24 maxlen: 24
2.26.149.0/24 maxlen: 24
2.26.150.0/24 maxlen: 24
2.27.162.0/24 maxlen: 24
2.27.171.0/24 maxlen: 24
144.31.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:fc:c2:66:ef:65:cb:45:22:78:ee:e7:20:2a:33:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 9 16:04:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b96cac5906f5c2f7a956a29a1327c7ca61ba880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4f:1f:6f:c4:a2:eb:59:4b:bb:56:50:6e:35:
bf:96:16:68:be:a2:1d:31:ec:d6:bd:34:61:59:f6:
e8:17:91:82:1a:5c:54:86:27:98:dc:f8:f5:a9:2d:
f3:ab:dc:92:ad:1f:f3:48:e7:b5:b2:c6:aa:5e:7c:
48:88:c0:35:21:ec:c6:ab:ef:45:8b:e6:26:56:b1:
f0:1a:11:7f:fa:93:2c:ac:80:b2:45:c1:b3:e0:b4:
72:8d:ef:08:9e:0b:7b:9a:68:83:5f:23:4c:90:4b:
05:03:64:6a:0a:32:4c:18:df:c4:49:b0:f8:da:05:
30:bf:d9:bb:0c:c5:3d:15:b3:65:75:cf:37:07:89:
50:0e:5d:e6:74:85:e3:46:58:c5:22:90:df:7e:c6:
55:88:e2:20:da:4d:ed:72:a1:b4:5f:f4:56:66:86:
48:b9:24:d6:23:c2:98:17:35:ab:0c:48:d4:da:75:
b2:ec:a6:06:a4:07:d6:56:3b:7e:1d:ce:51:56:c4:
f8:8e:e8:aa:a1:48:54:58:0d:48:b5:ac:4b:5c:34:
90:0b:ac:a7:dd:6b:2b:a3:ef:64:fc:5d:cd:1b:2a:
f4:4d:88:a3:0c:1b:46:e4:fa:c1:6e:4e:87:17:16:
ee:6f:c3:84:e9:95:f1:84:24:4d:45:ad:f9:ac:84:
34:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:96:CA:C5:90:6F:5C:2F:7A:95:6A:29:A1:32:7C:7C:A6:1B:A8:80
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/a5bKxZBvXC96lWopoTJ8fKYbqIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.144.0/24
2.26.146.0-2.26.150.255
2.27.162.0/24
2.27.171.0/24
144.31.33.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a4:94:81:3c:d1:75:60:1d:c9:0d:9b:d2:26:85:6e:d1:c5:
c6:2c:31:2d:80:d0:02:0c:82:de:26:2f:b3:a3:b4:5d:28:3a:
e3:1d:53:ab:5f:8a:b5:0b:fc:c8:2b:ee:88:cf:30:1b:3d:54:
7d:cf:96:68:9b:d7:df:b2:88:10:e2:35:59:b6:6d:72:eb:84:
c3:61:d6:b0:e9:0a:b2:10:3a:b7:18:c4:c9:49:77:0a:1b:38:
26:ff:fd:b0:9c:25:cb:6c:37:fe:ac:f6:77:36:45:13:79:0f:
7d:9a:ab:e8:09:c2:c6:40:32:6f:4d:67:38:b8:8d:b6:e5:5c:
35:f7:30:30:ec:03:fb:f9:dd:d5:8d:0b:e8:53:69:6f:18:5b:
4b:9e:95:c9:b6:66:f5:98:29:6f:17:9e:bf:e9:87:57:a2:15:
85:be:37:6b:e1:0a:ec:31:92:af:96:96:65:e1:b4:33:b6:9e:
d8:8b:6a:76:3e:a4:2a:24:d4:64:2b:c9:c1:c4:5c:51:3d:da:
3a:85:be:d4:b9:01:a9:4b:b7:9e:01:5a:ad:f9:e3:75:0c:0e:
45:4f:c4:25:75:38:fd:40:01:33:c9:f3:df:47:66:e4:f9:dd:
9f:c2:8f:ba:f4:a5:ac:4e:6e:ce:94:ba:14:5b:13:1d:07:79:
78:79:8c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:00:14 2026 by rpki-client