Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3VmzLNYZxSRvDfd6-sXILU7iunU.roa
File: 3VmzLNYZxSRvDfd6-sXILU7iunU.roa (raw, json)
Hash identifier: qMvEOOEVQovfseWg19MVgc8+iwLr1ZnnFTFle5qzDHo=
Subject key identifier: DD:59:B3:2C:D6:19:C5:24:6F:0D:F7:7A:FA:C5:C8:2D:4E:E2:BA:75
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F86668E715FE33F074DB93972BE50A262
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3VmzLNYZxSRvDfd6-sXILU7iunU.roa
Signing time: Tue 21 Jul 2026 20:38:15 +0000
ROA not before: Tue 21 Jul 2026 20:38:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215439
IP address blocks: 2.26.0.0/21 maxlen: 24
2.26.48.0/21 maxlen: 24
2.26.80.0/21 maxlen: 24
2.26.96.0/21 maxlen: 24
2.26.228.0/24 maxlen: 24
2.26.229.0/24 maxlen: 24
2.26.230.0/24 maxlen: 24
2.26.231.0/24 maxlen: 24
2.27.20.0/22 maxlen: 24
2.27.40.0/24 maxlen: 24
2.27.41.0/24 maxlen: 24
2.27.42.0/24 maxlen: 24
2.27.43.0/24 maxlen: 24
31.76.8.0/22 maxlen: 24
31.76.20.0/24 maxlen: 24
31.76.21.0/24 maxlen: 24
31.76.24.0/24 maxlen: 24
31.76.27.0/24 maxlen: 24
31.76.28.0/24 maxlen: 24
31.76.29.0/24 maxlen: 24
31.76.76.0/24 maxlen: 24
31.76.77.0/24 maxlen: 24
31.76.78.0/24 maxlen: 24
31.76.79.0/24 maxlen: 24
31.76.80.0/24 maxlen: 24
31.76.81.0/24 maxlen: 24
31.77.128.0/24 maxlen: 24
31.77.129.0/24 maxlen: 24
31.77.130.0/24 maxlen: 24
31.77.131.0/24 maxlen: 24
31.77.144.0/24 maxlen: 24
31.77.145.0/24 maxlen: 24
31.77.146.0/24 maxlen: 24
31.77.147.0/24 maxlen: 24
31.77.148.0/24 maxlen: 24
31.77.149.0/24 maxlen: 24
31.77.151.0/24 maxlen: 24
31.77.156.0/22 maxlen: 24
64.188.64.0/22 maxlen: 24
77.239.125.0/24 maxlen: 24
144.31.14.0/24 maxlen: 24
144.31.30.0/24 maxlen: 24
144.31.47.0/24 maxlen: 24
144.31.54.0/24 maxlen: 24
144.31.95.0/24 maxlen: 24
144.31.147.0/24 maxlen: 24
144.31.156.0/24 maxlen: 24
144.31.157.0/24 maxlen: 24
144.31.158.0/24 maxlen: 24
144.31.164.0/22 maxlen: 24
144.31.203.0/24 maxlen: 24
144.31.207.0/24 maxlen: 24
144.31.212.0/24 maxlen: 24
144.31.224.0/24 maxlen: 24
144.31.230.0/24 maxlen: 24
144.31.234.0/23 maxlen: 24
150.241.70.0/24 maxlen: 24
150.241.71.0/24 maxlen: 24
150.241.94.0/24 maxlen: 24
193.23.194.0/24 maxlen: 24
193.23.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:66:8e:71:5f:e3:3f:07:4d:b9:39:72:be:50:a2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 21 20:38:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd59b32cd619c5246f0df77afac5c82d4ee2ba75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:44:ab:7f:39:5f:31:20:ed:6e:b8:04:9b:67:
43:57:64:7d:35:2b:3f:69:80:40:46:ac:9b:f1:77:
6c:cb:30:9d:7d:8a:58:29:5c:0b:aa:6f:db:02:44:
b0:13:3d:a6:71:dc:e0:72:ea:f8:28:8d:5a:c9:76:
f4:fd:ea:54:49:a3:00:1b:28:a8:94:68:87:32:0c:
77:23:87:8a:bd:86:76:3d:7c:c5:14:0c:0f:3e:31:
90:3f:c0:88:a4:8a:94:cd:af:6a:15:d3:26:e4:d4:
e4:59:a8:d6:9c:ce:00:b9:da:9f:9f:f0:8c:f4:f2:
52:f4:60:6c:d1:50:78:f0:0c:df:bc:65:06:ab:3d:
a9:a0:7e:47:06:21:e7:c8:91:4f:c6:06:f9:e9:d5:
74:99:d9:21:ee:3b:bc:02:11:16:22:a0:fe:b4:b8:
7d:5e:f8:3d:e2:b3:4f:f9:f4:52:5a:08:1e:ec:bd:
2a:4d:fc:c7:92:08:48:91:55:4a:bd:6a:ad:42:50:
9b:90:da:5d:9b:1d:2c:d9:e7:7a:ca:d3:cf:e8:8c:
94:a7:8e:1b:d5:5f:b4:90:0c:32:d9:2b:40:f6:54:
c3:24:6d:f8:a8:19:cc:0b:07:22:fd:7a:0b:cf:1c:
b5:0d:e6:89:dc:3b:17:95:7a:b7:57:f4:3b:18:d1:
16:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:59:B3:2C:D6:19:C5:24:6F:0D:F7:7A:FA:C5:C8:2D:4E:E2:BA:75
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3VmzLNYZxSRvDfd6-sXILU7iunU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.0.0/21
2.26.48.0/21
2.26.80.0/21
2.26.96.0/21
2.26.228.0/22
2.27.20.0/22
2.27.40.0/22
31.76.8.0/22
31.76.20.0/23
31.76.24.0/24
31.76.27.0-31.76.29.255
31.76.76.0-31.76.81.255
31.77.128.0/22
31.77.144.0-31.77.149.255
31.77.151.0/24
31.77.156.0/22
64.188.64.0/22
77.239.125.0/24
144.31.14.0/24
144.31.30.0/24
144.31.47.0/24
144.31.54.0/24
144.31.95.0/24
144.31.147.0/24
144.31.156.0-144.31.158.255
144.31.164.0/22
144.31.203.0/24
144.31.207.0/24
144.31.212.0/24
144.31.224.0/24
144.31.230.0/24
144.31.234.0/23
150.241.70.0/23
150.241.94.0/24
193.23.194.0/24
193.23.201.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:43:8f:41:8d:a8:5f:ba:90:8c:6d:8b:da:c8:e0:e8:bc:a9:
7b:9f:d8:9b:37:31:af:83:3d:11:e7:c9:2a:5e:d0:12:bc:4c:
4d:8f:5a:d9:22:f9:28:7b:f3:00:0c:8d:01:fa:45:d9:47:9f:
ce:c4:82:16:a6:f9:ce:4a:39:f0:e2:dd:ad:c6:de:9a:46:3e:
c8:eb:35:e6:7c:cc:63:e2:5e:7c:0d:e3:3d:e9:92:64:eb:73:
4e:88:d0:a8:47:c9:87:ab:f2:b8:3c:9b:89:41:7b:f2:9b:43:
c7:24:3b:fe:27:60:90:4b:0a:f8:30:c3:5f:73:91:53:d3:26:
3a:a1:5a:21:ee:d5:7d:26:36:5e:64:45:38:98:5d:69:24:90:
60:1d:ec:f7:4e:a0:88:a1:ab:66:28:7e:1b:e2:90:64:88:4d:
54:30:bf:f8:72:36:0b:8b:83:32:2f:0c:df:1c:78:6c:f4:40:
76:db:ee:7e:4a:0e:67:31:41:1a:59:51:5a:4d:f0:a1:2c:88:
84:31:75:11:61:6a:ca:19:1d:f2:75:ed:d0:02:c1:c8:81:05:
82:a4:98:36:0a:a1:c6:c6:8b:90:42:b9:21:d3:60:e8:6c:0f:
f7:60:6c:d1:51:0c:19:64:05:1e:85:75:d7:fe:6a:67:76:b2:
0a:af:e4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:16:48 2026 by rpki-client