Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zHF8lv2kNHTsArt-rGE0PJIVPgw.roa
File: zHF8lv2kNHTsArt-rGE0PJIVPgw.roa (raw, json)
Hash identifier: 3iR2wi1WCRt9cEs1vEXI72FzKjNa5To3OgFBPGu8xYI=
Subject key identifier: CC:71:7C:96:FD:A4:34:74:EC:02:BB:7E:AC:61:34:3C:92:15:3E:0C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E6A38340CC7123AB4E134CD5E31E70252
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zHF8lv2kNHTsArt-rGE0PJIVPgw.roa
Signing time: Wed 27 May 2026 16:15:28 +0000
ROA not before: Wed 27 May 2026 16:15:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214266
IP address blocks: 2.26.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6a:38:34:0c:c7:12:3a:b4:e1:34:cd:5e:31:e7:02:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 27 16:15:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc717c96fda43474ec02bb7eac61343c92153e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:22:14:37:70:ec:43:78:5c:36:6c:7f:69:a4:
b1:66:d1:2c:70:91:fc:72:77:de:f0:3b:50:e7:78:
4f:08:21:01:fd:09:c9:57:bc:4f:95:8d:8b:19:3d:
05:f4:38:c1:42:49:ef:83:25:a3:88:86:99:c9:1e:
e3:b5:e6:1a:2a:8d:3b:2b:06:5a:46:88:93:f1:97:
cd:5f:34:85:a0:25:a0:7b:c0:f1:bf:39:37:6c:2d:
63:ef:92:3f:49:52:32:84:4d:7d:7a:12:e5:53:4c:
b6:fe:7e:29:bf:41:b3:45:d3:a7:cf:dc:d1:f8:b2:
76:97:d0:64:d0:5f:8c:01:34:49:35:15:b4:c0:37:
7b:61:3d:6e:b3:7f:03:6a:ed:da:00:6a:06:4c:14:
eb:86:af:36:ed:a4:c4:18:89:e6:8f:90:bb:09:c3:
98:e8:ce:b5:8b:8a:93:b8:10:93:d8:52:14:71:f8:
f2:d4:2a:a6:6b:a3:f7:41:1b:ce:70:4d:9c:bd:84:
77:6c:49:2d:98:2f:85:d9:98:c0:84:52:0f:ea:3d:
09:7e:d9:a7:1c:b5:88:fa:3d:04:74:f0:be:a7:b6:
0a:ec:da:85:6a:05:ed:04:ef:d3:c7:9f:23:db:e9:
b7:9b:88:03:19:24:8b:0a:8d:c8:55:3d:e5:40:ec:
e0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:71:7C:96:FD:A4:34:74:EC:02:BB:7E:AC:61:34:3C:92:15:3E:0C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zHF8lv2kNHTsArt-rGE0PJIVPgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.236.0/22
Signature Algorithm: sha256WithRSAEncryption
05:1c:f0:f9:b2:51:54:cc:4d:d2:94:d2:70:23:1b:42:f7:58:
c6:f4:a6:cd:af:5a:14:d9:32:88:a0:88:99:73:8a:d3:21:67:
d0:a7:f9:ed:86:6c:38:4d:b6:2d:ba:d1:1b:6b:12:f6:21:21:
67:4a:9e:2e:04:00:f0:92:5b:15:1e:6e:56:ae:c7:b2:2d:38:
38:b6:c1:96:21:7c:f0:e0:37:bb:76:b8:23:f2:29:e1:6a:0f:
88:76:e3:85:14:5e:8a:72:15:40:36:1a:4d:34:2c:d2:6c:06:
6e:ec:5e:a8:5e:e5:fa:24:09:4d:bb:db:53:38:a4:b2:73:e9:
da:47:08:b6:5a:26:7c:b5:d8:40:1d:0c:3a:11:b6:04:28:b4:
38:aa:2f:28:86:fa:17:fb:74:63:41:8d:f9:4e:80:9c:ae:3c:
d0:1e:4d:62:f0:2d:28:43:2f:6b:18:b7:4c:49:1f:86:81:7a:
2b:bb:d4:1e:c0:9c:22:1c:9a:13:c8:cb:15:30:0f:ee:be:50:
79:f7:49:86:1e:de:d2:54:c4:e5:cf:db:f9:04:2e:d7:72:c9:
3f:68:21:05:41:b5:4b:4c:ae:c7:c0:69:7e:e0:17:f4:04:57:
cd:d0:42:db:a1:02:c6:1c:db:71:e8:d4:10:95:e1:cb:e4:78:
3e:b2:18:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:21 2026 by rpki-client