Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/vnQd9lhuzjVP9doD9KuWygM0CvA.roa
File: vnQd9lhuzjVP9doD9KuWygM0CvA.roa (raw, json)
Hash identifier: klQ7L6RaaIDN/DN9hj2N+bPkmjhZpfXd+yxmjfAP12I=
Subject key identifier: BE:74:1D:F6:58:6E:CE:35:4F:F5:DA:03:F4:AB:96:CA:03:34:0A:F0
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E842EEB807A4E5FBA7411D2239C3A2D45
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/vnQd9lhuzjVP9doD9KuWygM0CvA.roa
Signing time: Mon 01 Jun 2026 17:15:27 +0000
ROA not before: Mon 01 Jun 2026 17:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199529
IP address blocks: 2.26.78.0/24 maxlen: 24
2.26.79.0/24 maxlen: 24
2.26.94.0/24 maxlen: 24
2.26.95.0/24 maxlen: 24
2.26.127.0/24 maxlen: 24
31.76.37.0/24 maxlen: 24
31.76.123.0/24 maxlen: 24
31.76.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:84:2e:eb:80:7a:4e:5f:ba:74:11:d2:23:9c:3a:2d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 1 17:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be741df6586ece354ff5da03f4ab96ca03340af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b4:5b:1a:d0:bd:6b:14:08:aa:69:5d:aa:f8:
39:61:2f:47:c5:21:5d:d4:5b:91:98:67:b5:2b:5a:
58:7c:d3:c7:79:d0:40:83:47:7f:fe:a3:4c:6a:b8:
ca:75:85:f7:94:c0:bb:04:b5:f5:83:b8:dd:11:39:
7a:d8:dc:69:1c:31:79:ec:e7:f9:29:50:17:d7:d1:
7e:04:19:a2:55:6a:0a:32:a5:2a:e0:1e:2d:46:9a:
1b:e1:bb:88:0a:d9:40:62:a5:82:a8:13:d7:9d:8f:
cc:c2:87:42:a8:6c:32:1b:3b:75:eb:dc:cf:10:ca:
e3:61:87:9b:93:79:01:dd:6a:be:59:cd:12:74:ca:
38:3b:71:a0:62:08:f8:f5:3b:89:6f:0f:5f:d9:01:
b7:78:47:30:1e:ac:7d:24:15:58:4f:d4:69:b9:0c:
ee:1b:ea:27:03:f0:41:f6:80:b3:99:2c:a0:31:f4:
2f:e0:58:4f:b6:8f:bb:64:01:58:b0:45:16:b8:cd:
77:3f:9c:c0:59:c2:99:f2:ca:6e:73:70:26:54:d8:
cf:7a:49:51:99:21:61:a5:be:d8:aa:ff:bf:fe:59:
0b:e6:31:f2:3a:30:fc:d9:e1:49:d3:6a:08:22:45:
53:16:01:f6:1a:32:06:44:c8:37:c2:13:2f:54:3d:
7c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:74:1D:F6:58:6E:CE:35:4F:F5:DA:03:F4:AB:96:CA:03:34:0A:F0
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/vnQd9lhuzjVP9doD9KuWygM0CvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.78.0/23
2.26.94.0/23
2.26.127.0/24
31.76.37.0/24
31.76.123.0/24
31.76.253.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:a6:8a:8f:07:42:31:5f:93:66:a6:71:70:c9:e9:97:64:1d:
09:52:c4:8a:5b:1d:7b:e9:71:c2:f2:a1:03:bc:ca:5c:29:41:
ed:cf:7d:f0:7c:0d:e9:32:01:ac:ce:b0:f1:92:d1:1f:2e:10:
e6:bb:63:07:c0:86:b5:6d:0a:5b:28:25:f3:b6:3f:d9:2c:7b:
e7:e9:ac:e3:21:86:cd:61:5b:b5:0c:63:46:e1:71:85:02:3e:
ce:ef:71:d5:0e:ef:48:37:d8:08:fa:f7:7b:24:7e:40:ca:a1:
5a:69:34:db:b5:14:20:4d:3a:86:5a:49:61:29:ca:0f:2b:d8:
fd:02:bc:a6:5e:db:96:51:8f:5b:04:51:84:48:e9:5f:0e:a4:
77:4b:bc:08:01:cb:61:b2:1e:b3:01:14:a4:79:0c:b4:4d:73:
74:b6:93:4d:87:6e:a7:7e:cf:21:ec:2f:10:eb:a1:db:b8:c7:
86:9e:7b:22:6a:34:a8:00:7f:bb:47:7d:fb:c0:5d:ab:4b:8e:
32:46:9d:1f:ec:6b:02:f8:3d:54:ac:44:8c:56:82:d1:41:3f:
31:f8:7b:a0:7d:5e:2f:a5:ee:89:7a:2e:ac:8b:f3:69:cf:08:
15:f0:71:65:35:8d:00:3b:03:3d:f3:76:59:0e:cc:ef:1c:5f:
2c:a2:fa:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:05:03 2026 by rpki-client