Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/w7UZ_iXsV4Ce8f9TQQer8lbdES0.roa
File: w7UZ_iXsV4Ce8f9TQQer8lbdES0.roa (raw, json)
Hash identifier: S4LLmxRBvb8hMhPsFc0XA8u3xnWeLji4t1EYrl7Q1Lw=
Subject key identifier: C3:B5:19:FE:25:EC:57:80:9E:F1:FF:53:41:07:AB:F2:56:DD:11:2D
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D926C3E1BCCD528FDD18122F0DF9FB232
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/w7UZ_iXsV4Ce8f9TQQer8lbdES0.roa
Signing time: Wed 15 Apr 2026 18:34:20 +0000
ROA not before: Wed 15 Apr 2026 18:34:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206134
IP address blocks: 2.26.16.0/22 maxlen: 24
2.26.28.0/22 maxlen: 24
2.26.116.0/22 maxlen: 24
2.27.16.0/22 maxlen: 24
2.27.120.0/22 maxlen: 24
64.188.115.0/24 maxlen: 24
77.239.127.0/24 maxlen: 24
144.31.98.0/24 maxlen: 24
144.31.154.0/23 maxlen: 24
144.31.180.0/22 maxlen: 24
144.31.188.0/23 maxlen: 24
144.31.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:92:6c:3e:1b:cc:d5:28:fd:d1:81:22:f0:df:9f:b2:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 15 18:34:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3b519fe25ec57809ef1ff534107abf256dd112d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:31:55:ca:55:5e:7a:24:78:ed:c7:f3:54:
91:73:06:13:f4:6a:cc:f2:12:84:fa:d2:cb:a4:e9:
3b:94:9a:73:b2:17:35:4d:a0:46:5f:30:d5:28:ec:
7a:61:dc:eb:ad:56:e3:24:91:5a:12:76:75:4a:fd:
5d:6a:31:13:d9:a7:8e:37:33:54:6d:32:d7:ac:b0:
5d:b6:96:cc:97:ae:c9:25:0c:09:b1:88:99:6f:93:
7f:69:6a:55:53:a9:41:71:f1:4e:03:0f:d7:91:74:
24:4b:e3:79:68:99:f5:aa:4f:1f:a0:00:71:d8:1b:
73:b7:37:1f:d3:3e:6a:a4:36:7b:40:08:f4:e1:fc:
66:5c:de:d7:9d:6a:a8:2b:f6:18:cf:48:11:98:54:
a0:8e:cd:80:7f:be:fd:f4:b0:1d:1c:8c:ea:ee:5b:
66:52:bb:90:0d:e7:91:f6:67:83:05:ab:09:1d:ab:
3e:d8:73:a7:71:6d:bc:a6:e9:7a:18:11:0c:fe:1e:
d5:ff:c4:3b:68:d2:6b:2c:80:1a:c8:f6:74:ee:59:
6e:ee:47:19:3d:3b:9c:4a:81:19:5d:9e:cc:e1:1e:
60:66:5a:3b:f1:0c:1a:9f:c3:22:60:5f:2e:42:2e:
17:74:69:48:5c:43:6d:1a:d4:c4:65:59:06:95:ee:
68:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B5:19:FE:25:EC:57:80:9E:F1:FF:53:41:07:AB:F2:56:DD:11:2D
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/w7UZ_iXsV4Ce8f9TQQer8lbdES0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.16.0/22
2.26.28.0/22
2.26.116.0/22
2.27.16.0/22
2.27.120.0/22
64.188.115.0/24
77.239.127.0/24
144.31.98.0/24
144.31.154.0/23
144.31.180.0/22
144.31.188.0/23
144.31.251.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:fa:13:68:f1:86:a6:83:a4:d9:0f:ad:26:db:d4:3b:db:7d:
b3:d3:a0:17:ce:c8:3f:c2:59:9a:55:40:2e:92:01:ac:2e:75:
92:16:c7:0c:61:35:22:63:a6:de:23:cc:4d:bd:1d:e6:b9:16:
78:d5:af:e9:70:4c:1d:27:9c:de:b0:af:b6:83:b7:73:44:56:
bc:49:d2:a8:54:95:5b:67:05:3b:c1:f9:24:f5:e2:4f:81:ca:
80:9e:7e:10:f5:25:bd:df:b0:0e:ea:9f:dc:2a:f4:83:2b:e9:
c3:86:c6:e6:aa:f6:fd:4e:cd:85:ae:e8:3f:6e:1e:cc:13:ac:
2b:06:86:1e:60:d9:6f:6b:a6:77:f3:59:db:40:09:bc:ab:3f:
c9:0b:da:0d:61:bf:0a:86:f3:34:40:fe:f4:50:8c:b9:51:01:
bb:81:ed:9d:bb:c1:06:95:1b:65:4d:23:69:51:05:13:53:a6:
3d:ab:f2:1d:56:f6:b2:f4:d2:ca:bd:29:9d:59:95:ce:4e:c6:
01:cd:f9:7d:24:0e:1f:2c:e5:0b:1f:c0:25:f9:83:67:0d:04:
7e:af:7e:6b:af:e8:28:c2:ff:2e:36:36:a2:1f:74:5d:27:d6:
6e:9e:c8:39:42:60:62:36:0e:fd:2b:d1:ca:25:14:2a:2f:7b:
d0:0d:68:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:18 2026 by rpki-client