Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4hTzhNh0RAljY7XzM3ZwGHdxm30.roa
File: 4hTzhNh0RAljY7XzM3ZwGHdxm30.roa (raw, json)
Hash identifier: 6tzT7to3hFo8uIpONtCIcUE0WkT2TPxkdwfklovl4jg=
Subject key identifier: E2:14:F3:84:D8:74:44:09:63:63:B5:F3:33:76:70:18:77:71:9B:7D
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F4D1B55BEDC8459C670300628AC9F1438
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4hTzhNh0RAljY7XzM3ZwGHdxm30.roa
Signing time: Fri 10 Jul 2026 17:37:44 +0000
ROA not before: Fri 10 Jul 2026 17:37:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215590
IP address blocks: 2.26.20.0/22 maxlen: 24
2.26.60.0/22 maxlen: 24
2.26.68.0/22 maxlen: 24
2.26.104.0/21 maxlen: 24
2.27.32.0/21 maxlen: 24
2.27.52.0/23 maxlen: 24
2.27.54.0/23 maxlen: 24
13.143.64.0/22 maxlen: 24
31.76.12.0/22 maxlen: 24
31.76.48.0/22 maxlen: 24
31.76.230.0/23 maxlen: 24
31.77.196.0/22 maxlen: 24
31.77.202.0/23 maxlen: 24
31.77.204.0/23 maxlen: 24
64.188.118.0/23 maxlen: 24
77.239.108.0/22 maxlen: 24
144.31.52.0/24 maxlen: 24
144.31.126.0/24 maxlen: 24
144.31.127.0/24 maxlen: 24
144.31.140.0/22 maxlen: 24
144.31.152.0/23 maxlen: 24
144.31.186.0/23 maxlen: 24
150.241.88.0/23 maxlen: 24
150.241.96.0/22 maxlen: 24
150.241.106.0/23 maxlen: 24
150.241.115.0/24 maxlen: 24
150.241.116.0/24 maxlen: 24
150.241.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4d:1b:55:be:dc:84:59:c6:70:30:06:28:ac:9f:14:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 10 17:37:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e214f384d87444096363b5f33376701877719b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:30:6a:a6:5b:12:00:5f:40:9d:ab:64:27:17:
6e:4e:f7:15:bb:b6:e2:4d:30:92:13:6b:5d:f6:e7:
8c:66:40:5e:87:f7:45:91:7f:bd:ac:ee:9b:b7:62:
44:d8:52:4f:75:2e:53:70:30:96:2f:8d:56:f1:15:
43:8a:45:e2:bf:ba:09:d9:61:e4:11:ea:0a:b0:1e:
68:a9:89:a9:ce:e4:9c:06:d5:3d:2b:ad:79:ed:03:
11:2f:c7:b7:ea:94:1f:3d:5d:f1:7c:6a:2d:28:c5:
48:ad:f4:b9:ea:a5:8a:be:78:a4:55:7b:6a:b3:04:
1c:ea:06:38:c4:25:0f:98:a1:5e:ce:aa:59:79:31:
72:34:26:bf:23:cf:2d:64:14:0c:14:1a:ae:7f:e0:
85:85:1f:68:9a:a9:ab:9e:f2:17:9d:f7:6a:89:82:
44:e7:4f:b6:fc:e8:4c:b3:ef:59:a9:32:af:09:9d:
b6:d8:ac:aa:7a:22:3e:74:24:f9:d2:e0:20:78:09:
75:ac:5d:78:40:27:86:72:f8:20:d2:94:37:30:09:
23:cd:a9:e6:3f:7a:7c:29:d9:a4:63:c6:46:fb:83:
e6:3e:9d:12:1c:81:7a:22:82:d3:37:8a:cd:58:71:
eb:37:0a:06:c2:f2:82:9a:bf:19:54:88:3c:37:a2:
05:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:14:F3:84:D8:74:44:09:63:63:B5:F3:33:76:70:18:77:71:9B:7D
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4hTzhNh0RAljY7XzM3ZwGHdxm30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.20.0/22
2.26.60.0/22
2.26.68.0/22
2.26.104.0/21
2.27.32.0/21
2.27.52.0/22
13.143.64.0/22
31.76.12.0/22
31.76.48.0/22
31.76.230.0/23
31.77.196.0/22
31.77.202.0-31.77.205.255
64.188.118.0/23
77.239.108.0/22
144.31.52.0/24
144.31.126.0/23
144.31.140.0/22
144.31.152.0/23
144.31.186.0/23
150.241.88.0/23
150.241.96.0/22
150.241.106.0/23
150.241.115.0-150.241.116.255
150.241.123.0/24
Signature Algorithm: sha256WithRSAEncryption
05:74:d1:61:d7:25:df:cc:46:df:65:ec:91:b6:b3:c4:8c:cc:
41:43:61:d7:4c:c3:51:d5:c4:89:f1:29:3f:ef:07:4f:ac:0f:
f6:a5:67:23:1c:64:15:d6:51:06:d0:e8:14:cf:41:e3:24:53:
fe:a8:54:22:8d:70:75:f3:32:3d:7d:29:6a:6a:dc:c1:24:97:
df:33:12:a7:00:28:5b:17:3c:99:88:cd:3a:09:18:e1:73:41:
4d:38:8d:c4:15:1c:aa:ee:15:ff:99:49:4e:a5:5b:2d:1e:52:
95:6c:2e:43:91:43:68:d1:11:fa:3b:f4:cf:d4:c9:cd:0b:91:
51:ca:ea:d2:94:60:a0:74:12:cd:1e:43:19:fe:42:09:e6:d9:
eb:f3:b7:ba:e6:a8:6b:49:2a:a7:a6:f0:7b:45:1b:dd:3a:1c:
53:45:b7:4e:e6:7f:5b:ce:27:54:4d:f6:bc:16:89:d0:b5:17:
d1:80:16:31:91:d1:5a:01:96:a6:31:a4:10:08:40:d1:0f:ff:
ca:3f:d9:47:7e:41:ea:16:82:54:9e:7b:63:66:f0:d0:6c:8a:
f4:c2:ac:6a:2d:e0:2a:45:e0:ee:6d:a8:15:e3:af:a1:68:69:
ad:48:59:4a:a8:b2:b8:4e:6f:da:9b:be:6b:c8:c2:dc:5d:c6:
38:c8:db:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:01:54 2026 by rpki-client