Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zM_s2DBVigc89mYq514oWkkJ9Hw.roa
File: zM_s2DBVigc89mYq514oWkkJ9Hw.roa (raw, json)
Hash identifier: MQMiXoSmayGgmB+8Cm0H3RBQwSbScQMOexdV2smYHUM=
Subject key identifier: CC:CF:EC:D8:30:55:8A:07:3C:F6:66:2A:E7:5E:28:5A:49:09:F4:7C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FA983341E982F7CDB5B5CF671706C70F1
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zM_s2DBVigc89mYq514oWkkJ9Hw.roa
Signing time: Tue 28 Jul 2026 16:16:15 +0000
ROA not before: Tue 28 Jul 2026 16:16:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146892
IP address blocks: 2.26.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:83:34:1e:98:2f:7c:db:5b:5c:f6:71:70:6c:70:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 28 16:16:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cccfecd830558a073cf6662ae75e285a4909f47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5d:1e:2b:89:50:e8:96:12:85:c8:1f:ce:29:
fc:2c:39:90:24:12:af:7e:64:7c:ca:7d:d3:8d:57:
9c:db:fc:e9:99:33:4f:89:4b:5d:16:2e:18:9f:9f:
bd:8f:93:87:68:5c:e1:aa:81:27:20:c7:7d:c7:15:
e0:71:a0:80:31:2f:d3:d3:23:d8:12:86:3c:c2:de:
be:89:e0:d3:e4:b6:19:89:3c:15:89:fe:5f:f7:1b:
2b:5f:4a:aa:cd:74:b8:e9:37:41:1f:0d:61:cb:d3:
a0:03:95:e0:e9:40:bc:3d:4e:c9:98:fa:9a:d7:da:
9e:7a:10:99:89:c8:4f:87:52:51:43:7b:8b:6a:8e:
86:97:a9:44:b4:4c:7e:e3:2d:af:fa:b0:22:ee:61:
6a:bb:f8:7e:31:80:53:12:46:05:95:45:f4:4b:d8:
c7:17:8f:4d:a1:22:bb:38:87:98:7a:26:d0:0e:68:
1e:3b:c5:6d:57:29:37:70:5f:32:d2:ba:b2:3e:ee:
48:ba:3d:26:76:aa:88:3b:79:5e:2d:4d:5c:d4:6f:
bd:90:d2:c0:8d:3e:3c:1a:55:70:26:17:28:c4:1e:
f0:0d:be:7c:43:5a:ee:61:a3:a6:41:0a:36:86:77:
bf:f3:08:a0:1a:15:fe:f2:3e:cc:2a:57:bc:28:56:
a1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CF:EC:D8:30:55:8A:07:3C:F6:66:2A:E7:5E:28:5A:49:09:F4:7C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zM_s2DBVigc89mYq514oWkkJ9Hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.178.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:b6:b6:ba:a7:ea:3e:31:8d:44:c6:ef:41:56:b1:ee:e9:5f:
a1:8a:c0:e7:0c:70:14:a7:05:1b:7f:2a:ae:b7:49:33:b7:ce:
c3:b2:be:0e:9e:50:6b:06:2d:63:d7:33:b8:a6:61:16:a2:3b:
29:9f:3a:40:19:9d:b3:95:b3:a4:34:4c:c1:9a:4b:24:f3:55:
59:de:2e:3c:ad:c0:6b:35:31:7f:4a:67:e6:f2:e8:54:55:15:
86:3b:5a:50:c3:2f:4b:95:8d:e1:3d:25:c0:ae:40:56:b1:cc:
e0:15:62:8c:16:c0:b0:cb:37:4b:bb:21:e6:f6:53:43:0a:13:
16:97:4a:37:07:7c:2a:11:50:88:63:82:8a:3b:11:3f:9c:9f:
02:b5:34:a5:6e:99:e5:dd:84:c0:92:7d:e9:72:6f:36:4b:ae:
10:1c:6d:e4:44:d5:c3:2f:c8:c3:4e:3c:64:12:2b:0d:f7:03:
a3:f9:88:27:37:47:9a:17:75:25:33:55:96:c4:a0:fb:4d:54:
be:2a:4d:de:c8:1c:b9:a7:9f:2d:d0:d5:ea:e6:29:bd:9b:8e:
f7:ba:ff:53:f4:cc:e3:9c:5d:c0:f0:a3:f2:66:bb:2b:94:0c:
ed:79:8c:e4:0d:6e:f4:74:08:0e:82:12:c6:ab:fc:17:6b:8b:
46:5d:68:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+pgzQemC9821tc9nFwbHDxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNzI4MTYxNjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2NmZWNkODMwNTU4YTA3M2NmNjY2MmFlNzVlMjg1YTQ5MDlmNDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs10eK4lQ6JYShcgfzin8LDmQJBKv
fmR8yn3TjVec2/zpmTNPiUtdFi4Yn5+9j5OHaFzhqoEnIMd9xxXgcaCAMS/T0yPY
EoY8wt6+ieDT5LYZiTwVif5f9xsrX0qqzXS46TdBHw1hy9OgA5Xg6UC8PU7JmPqa
19qeehCZichPh1JRQ3uLao6Gl6lEtEx+4y2v+rAi7mFqu/h+MYBTEkYFlUX0S9jH
F49NoSK7OIeYeibQDmgeO8VtVyk3cF8y0rqyPu5Iuj0mdqqIO3leLU1c1G+9kNLA
jT48GlVwJhcoxB7wDb58Q1ruYaOmQQo2hne/8wigGhX+8j7MKle8KFahgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMzP7NgwVYoHPPZmKudeKFpJCfR8MB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvek1fczJEQlZpZ2M4OW1ZcTUxNG9Xa2tKOUh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAhqyMA0G
CSqGSIb3DQEBCwUAA4IBAQCytra6p+o+MY1Exu9BVrHu6V+hisDnDHAUpwUbfyqu
t0kzt87Dsr4OnlBrBi1j1zO4pmEWojspnzpAGZ2zlbOkNEzBmksk81VZ3i48rcBr
NTF/Smfm8uhUVRWGO1pQwy9LlY3hPSXArkBWsczgFWKMFsCwyzdLuyHm9lNDChMW
l0o3B3wqEVCIY4KKOxE/nJ8CtTSlbpnl3YTAkn3pcm82S64QHG3kRNXDL8jDTjxk
EisN9wOj+YgnN0eaF3UlM1WWxKD7TVS+Kk3eyBy5p58t0NXq5im9m473uv9T9Mzj
nF3A8KPyZrsrlAzteYzkDW70dAgOghLGq/wXa4tGXWh8
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:06:47 2026 by rpki-client