Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/aZMZcNBaNFpK5RzO9IsncGbIXPw.roa
File: aZMZcNBaNFpK5RzO9IsncGbIXPw.roa (raw, json)
Hash identifier: aq1sQbOVB80LLWflOqz9Fcm/ERHpmxef2/wxDvdj5qA=
Subject key identifier: 69:93:19:70:D0:5A:34:5A:4A:E5:1C:CE:F4:8B:27:70:66:C8:5C:FC
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FA47CE320E4800E2BB40F3158D9562666
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/aZMZcNBaNFpK5RzO9IsncGbIXPw.roa
Signing time: Mon 27 Jul 2026 16:51:15 +0000
ROA not before: Mon 27 Jul 2026 16:51:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20326
IP address blocks: 2.26.240.0/22 maxlen: 22
2.26.244.0/22 maxlen: 22
2.27.208.0/22 maxlen: 24
31.77.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:7c:e3:20:e4:80:0e:2b:b4:0f:31:58:d9:56:26:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 27 16:51:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69931970d05a345a4ae51ccef48b277066c85cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:eb:f1:10:37:3e:46:df:90:d5:05:ff:a6:43:
18:e8:85:59:9e:01:fc:b1:41:3d:ee:0b:f2:83:f0:
f7:cc:bc:03:28:82:6e:c7:40:07:7c:21:f9:58:61:
aa:e9:52:56:9d:4e:47:95:bc:1d:56:7b:c8:49:8f:
d2:0a:85:fa:60:b9:76:5a:08:5a:1e:e5:be:a3:1f:
8b:db:26:c3:3c:07:d4:e4:5c:55:e6:4e:57:df:a3:
7f:10:14:73:e3:c3:3f:69:3f:43:d3:79:d1:13:82:
83:ca:f4:c7:93:10:8b:20:df:4c:3f:37:89:d1:06:
01:d2:dc:39:33:a2:18:c0:81:3a:8e:34:f9:83:5f:
4e:ad:b2:c5:44:e0:fa:e5:5b:30:c1:a7:e7:bc:c5:
23:53:3e:0a:15:99:88:4c:af:fc:8c:c9:47:f4:ce:
6f:26:48:71:55:3c:30:fe:1d:3d:0b:5c:f2:03:0a:
75:86:b4:8c:0f:2e:04:36:df:44:2f:20:76:cb:8b:
7d:b2:5b:a6:0b:e9:70:b7:9b:de:96:e8:a6:e8:42:
e7:4a:8e:e9:a1:bf:cf:35:82:dd:70:97:e2:5a:56:
3f:03:bd:ea:8e:3a:aa:bd:fe:49:1e:6e:c0:5b:3d:
9f:6b:f1:5b:2a:a5:7c:bc:4d:75:34:94:4c:8b:cf:
b5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:93:19:70:D0:5A:34:5A:4A:E5:1C:CE:F4:8B:27:70:66:C8:5C:FC
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/aZMZcNBaNFpK5RzO9IsncGbIXPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.240.0/21
2.27.208.0/22
31.77.80.0/20
Signature Algorithm: sha256WithRSAEncryption
85:0f:16:74:88:55:51:24:f5:ba:db:ab:73:51:e4:41:15:f4:
31:9d:34:45:06:01:4c:6c:1c:65:38:c4:b5:2e:b9:f2:f8:41:
82:19:d0:c8:e0:40:a7:c5:4f:bc:b3:68:4a:2c:87:31:f7:7d:
5e:cb:79:ae:4c:9f:c4:d0:c1:cf:fc:46:31:24:6d:dd:49:4f:
a5:38:52:3b:5a:78:3f:6c:68:18:72:69:b1:0b:37:9e:72:13:
90:a5:b0:8d:c6:79:a5:d4:f8:5a:4f:70:1e:e3:7a:e2:6f:e5:
4a:b8:1e:2f:b8:d8:b6:ec:a7:54:fc:17:f5:43:6b:69:43:41:
cc:73:41:53:9f:3a:93:a1:2e:ac:ac:a8:ae:49:11:52:e7:7f:
0d:4d:e2:6b:13:09:2e:be:8f:be:a9:5c:af:2f:fe:fb:8c:84:
4f:c5:93:1b:be:b7:c0:b4:70:1f:83:41:a8:92:70:fd:39:ef:
31:a8:db:ae:d5:08:8c:13:47:e8:03:18:06:57:bb:38:89:b3:
f4:54:9f:2b:c4:df:fd:0e:dd:82:7f:8a:d1:a4:a4:ad:a3:f5:
34:2c:7e:ac:8a:2c:23:e4:b7:55:b3:66:50:46:a7:88:e9:f7:
42:9c:e3:5e:1f:67:92:c2:16:19:24:9f:2a:5c:f2:e6:ca:a3:
8a:3d:83:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:53:54 2026 by rpki-client