Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xnccAWdSLfa3508sZwJ-Ce0krzw.roa
File: xnccAWdSLfa3508sZwJ-Ce0krzw.roa (raw, json)
Hash identifier: Zi50YdSLfp02BQJCmrAeL7frdBX4cbsAat/850+4H/0=
Subject key identifier: C6:77:1C:01:67:52:2D:F6:B7:E7:4F:2C:67:02:7E:09:ED:24:AF:3C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E419B9BD688633F95FDE01A1ADAC64473
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xnccAWdSLfa3508sZwJ-Ce0krzw.roa
Signing time: Tue 19 May 2026 18:59:37 +0000
ROA not before: Tue 19 May 2026 18:59:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60464
IP address blocks: 2.26.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:41:9b:9b:d6:88:63:3f:95:fd:e0:1a:1a:da:c6:44:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 19 18:59:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6771c0167522df6b7e74f2c67027e09ed24af3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:36:c8:79:98:87:2e:8d:72:4c:7f:7f:8c:8e:
05:50:3c:74:e0:27:e0:1f:dd:37:cc:96:54:15:13:
8d:f6:52:1c:8c:b8:c2:7d:23:f7:f0:3b:2f:24:63:
1e:85:7d:95:2d:1c:7b:e7:52:73:7d:eb:75:7f:09:
8f:fa:87:61:d8:8a:12:81:62:35:c9:67:09:70:42:
63:8b:db:c4:a6:71:2f:f7:81:85:de:95:9e:e5:15:
fe:92:55:9f:a9:ad:f6:af:76:7c:08:1a:9d:7c:d6:
95:3f:32:76:33:76:86:47:73:28:6a:1e:fd:e2:4c:
d8:64:7f:9e:ba:f0:0d:c2:e8:f5:19:21:22:8f:15:
4e:b5:35:f8:36:8a:1a:14:10:0b:08:ac:43:ba:92:
64:4c:7f:d5:4a:3a:d0:48:87:78:37:f1:7d:2d:7d:
6a:5a:bf:cf:47:5d:8b:0f:1a:a6:ba:96:05:e3:da:
a1:54:9b:9c:42:80:b6:1e:56:e5:1a:d5:b6:3d:06:
7c:1e:be:ae:13:02:c2:f4:0e:8e:b8:46:fe:eb:48:
95:6b:e9:48:14:e5:71:c7:82:1c:b5:87:5a:bb:f9:
00:c5:76:b6:d5:35:46:c5:be:2f:be:76:6b:8b:2c:
e4:f9:14:33:6e:13:2e:98:c2:d7:25:5c:90:a5:15:
4a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:77:1C:01:67:52:2D:F6:B7:E7:4F:2C:67:02:7E:09:ED:24:AF:3C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xnccAWdSLfa3508sZwJ-Ce0krzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.217.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:fe:d8:39:a5:df:2c:3b:a2:20:da:d3:ea:44:ac:ea:a7:e4:
49:11:5f:b1:8d:1b:64:fe:a0:66:5e:de:b9:45:02:24:20:26:
c4:97:ef:60:47:f1:b8:a4:40:b0:5b:bc:9c:66:f8:fc:00:60:
4d:b0:c0:a6:3c:22:99:d6:49:47:b7:91:81:6f:db:12:a5:9b:
37:8c:f8:c6:a4:a4:9c:73:71:19:78:95:ba:0e:0c:8e:82:ee:
06:a5:f4:2e:ad:e1:40:ca:10:f7:9d:d6:c2:8f:40:30:5e:10:
cd:e1:69:d2:e0:1d:a4:c4:7c:78:14:11:3a:25:bd:1e:fc:5b:
79:40:93:ab:82:5d:18:3d:a3:15:0e:af:53:b5:2c:a7:a9:79:
71:c4:0f:2f:3a:d4:61:63:68:93:6b:5c:77:5f:50:70:59:6f:
56:f3:36:58:f4:79:8e:d5:5c:76:a5:eb:88:c7:c5:79:aa:92:
49:4c:4a:e1:c7:21:39:84:cd:24:e4:56:b4:da:48:26:e3:19:
f8:e8:63:33:ce:80:05:a4:0d:b2:c1:56:b9:cc:54:f3:a2:cf:
fc:05:08:0d:4b:93:4e:fb:7c:c3:0a:8e:8b:50:71:f5:12:e8:
f0:d3:ac:c6:ae:ab:5c:a0:ff:ac:6b:2d:68:db:ab:a2:97:af:
83:be:0b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:06:34 2026 by rpki-client