Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7X4518EFzsN2cNBo8ImvdJOg3kc.roa
File: 7X4518EFzsN2cNBo8ImvdJOg3kc.roa (raw, json)
Hash identifier: AMc2PkvjSCL38KA1nxwR39yEGkoYLhJJxGs8X9hhxnE=
Subject key identifier: ED:7E:39:D7:C1:05:CE:C3:76:70:D0:68:F0:89:AF:74:93:A0:DE:47
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F90B25AF42F172539B5181D9443EB76A2
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7X4518EFzsN2cNBo8ImvdJOg3kc.roa
Signing time: Thu 23 Jul 2026 20:37:15 +0000
ROA not before: Thu 23 Jul 2026 20:37:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401152
IP address blocks: 2.26.95.0/24 maxlen: 24
13.143.28.0/22 maxlen: 24
13.143.48.0/22 maxlen: 22
13.143.76.0/22 maxlen: 22
31.76.192.0/22 maxlen: 24
31.76.208.0/22 maxlen: 24
31.76.228.0/23 maxlen: 24
31.76.232.0/23 maxlen: 24
31.76.236.0/23 maxlen: 24
31.76.242.0/23 maxlen: 24
144.31.8.0/23 maxlen: 24
144.31.110.0/24 maxlen: 24
144.31.160.0/22 maxlen: 24
144.31.208.0/22 maxlen: 24
144.31.235.0/24 maxlen: 24
150.241.69.0/24 maxlen: 24
177.1.176.0/22 maxlen: 24
177.1.199.0/24 maxlen: 24
185.207.135.0/24 maxlen: 24
185.216.104.0/22 maxlen: 24
191.223.154.0/24 maxlen: 24
191.223.158.0/24 maxlen: 24
193.23.192.0/24 maxlen: 24
193.23.198.0/24 maxlen: 24
193.23.204.0/22 maxlen: 22
193.23.212.0/22 maxlen: 24
201.10.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:b2:5a:f4:2f:17:25:39:b5:18:1d:94:43:eb:76:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 23 20:37:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed7e39d7c105cec37670d068f089af7493a0de47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:90:9b:58:10:eb:0a:94:b2:a8:b4:92:ad:9a:
21:6d:42:bb:e1:29:83:cb:97:9f:77:5e:78:b4:b1:
25:e2:f8:63:8f:50:90:77:a7:ec:0c:2d:73:eb:0d:
c2:a9:49:bd:2f:d0:4d:80:ac:db:b4:2b:ba:ea:15:
d3:5c:6d:df:83:64:5d:a1:12:a4:df:d6:9f:f2:78:
dc:a3:74:e1:fc:a5:31:35:ba:20:eb:a4:36:a8:37:
6f:9e:86:92:2f:0b:7c:64:2a:05:05:7c:ba:2f:23:
4e:8c:4a:e6:66:86:72:47:0c:eb:68:32:61:98:d4:
ab:95:32:fe:8d:9c:f0:9d:71:30:6b:34:2a:f8:48:
d9:c3:b4:6a:10:2a:55:96:cc:a9:0a:64:67:7d:1c:
13:27:96:b4:52:e7:4b:8f:23:3e:c0:a1:9b:85:f1:
b6:d5:f1:63:d9:0a:32:f5:73:f7:3e:56:12:ea:d5:
3d:10:4a:79:a5:cc:ae:ee:c0:28:f1:1a:e4:3b:0a:
c5:ee:cc:28:11:5d:76:b9:b9:fb:54:ea:0d:cc:e9:
25:e6:78:50:00:0b:19:71:c1:a2:f6:7f:78:ab:05:
58:40:30:d8:24:26:45:eb:3b:df:53:ca:2e:33:6e:
af:28:51:d0:10:06:3b:56:57:8a:fa:b6:6b:5c:42:
1d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7E:39:D7:C1:05:CE:C3:76:70:D0:68:F0:89:AF:74:93:A0:DE:47
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7X4518EFzsN2cNBo8ImvdJOg3kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.95.0/24
13.143.28.0/22
13.143.48.0/22
13.143.76.0/22
31.76.192.0/22
31.76.208.0/22
31.76.228.0/23
31.76.232.0/23
31.76.236.0/23
31.76.242.0/23
144.31.8.0/23
144.31.110.0/24
144.31.160.0/22
144.31.208.0/22
144.31.235.0/24
150.241.69.0/24
177.1.176.0/22
177.1.199.0/24
185.207.135.0/24
185.216.104.0/22
191.223.154.0/24
191.223.158.0/24
193.23.192.0/24
193.23.198.0/24
193.23.204.0/22
193.23.212.0/22
201.10.81.0/24
Signature Algorithm: sha256WithRSAEncryption
91:5c:13:17:03:f8:8a:85:44:80:f2:d2:80:37:89:56:01:3a:
74:b5:d8:e1:ac:54:58:3b:4d:f5:59:75:6e:9a:b8:c3:62:f9:
30:0a:fd:6e:6d:3b:72:21:8b:51:ac:25:eb:dc:2a:fe:b1:75:
fb:f1:11:01:d6:ab:da:59:2c:81:53:84:1d:23:eb:4a:c5:4c:
7a:bd:ca:f3:24:fb:35:33:79:a6:56:bf:80:75:6c:a8:15:0c:
2d:5e:ee:4c:d9:a5:78:fe:04:8c:5f:0a:cc:80:22:cc:0a:8d:
a6:30:1e:06:26:f6:c3:f9:83:79:98:84:c2:ec:57:6b:1f:0c:
64:cc:53:77:d5:29:4e:22:60:f4:43:51:a1:af:85:cb:79:36:
76:e5:91:7b:78:63:a6:2b:10:2c:f0:99:55:c6:53:d2:3d:b1:
49:35:fa:c1:08:ae:e7:5b:c0:40:a5:d0:98:a0:ca:42:05:fb:
6c:31:0e:c6:88:6f:79:1d:e9:20:70:dd:6d:f7:65:42:81:f0:
53:7c:c7:89:99:e1:6c:b2:ab:9e:50:5a:3d:50:6c:a3:47:b0:
00:3b:f4:07:51:02:be:bc:dc:90:40:50:86:cf:e9:80:80:43:
8c:e3:bd:cb:2c:0e:59:6e:c9:7d:cb:c0:ed:f8:a0:9a:e4:6a:
bb:4c:17:4e
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgISAZ+Qslr0LxclObUYHZRD63aiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNzIzMjAzNzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDdlMzlkN2MxMDVjZWMzNzY3MGQwNjhmMDg5YWY3NDkzYTBkZTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZCbWBDrCpSyqLSSrZohbUK74SmD
y5efd154tLEl4vhjj1CQd6fsDC1z6w3CqUm9L9BNgKzbtCu66hXTXG3fg2RdoRKk
39af8njco3Th/KUxNbog66Q2qDdvnoaSLwt8ZCoFBXy6LyNOjErmZoZyRwzraDJh
mNSrlTL+jZzwnXEwazQq+EjZw7RqECpVlsypCmRnfRwTJ5a0UudLjyM+wKGbhfG2
1fFj2Qoy9XP3PlYS6tU9EEp5pcyu7sAo8RrkOwrF7swoEV12ubn7VOoNzOkl5nhQ
AAsZccGi9n94qwVYQDDYJCZF6zvfU8ouM26vKFHQEAY7VleK+rZrXEId8wIDAQAB
o4ICqjCCAqYwHQYDVR0OBBYEFO1+OdfBBc7DdnDQaPCJr3SToN5HMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvN1g0NTE4RUZ6c04yY05CbzhJbXZkSk9nM2tjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG/BggrBgEFBQcBBwEB/wSBrzCBrDCBqQQCAAEwgaIDBAAC
Gl8DBAINjxwDBAINjzADBAINj0wDBAIfTMADBAIfTNADBAEfTOQDBAEfTOgDBAEf
TOwDBAEfTPIDBAGQHwgDBACQH24DBAKQH6ADBAKQH9ADBACQH+sDBACW8UUDBAKx
AbADBACxAccDBAC5z4cDBAK52GgDBAC/35oDBAC/354DBADBF8ADBADBF8YDBALB
F8wDBALBF9QDBADJClEwDQYJKoZIhvcNAQELBQADggEBAJFcExcD+IqFRIDy0oA3
iVYBOnS12OGsVFg7TfVZdW6auMNi+TAK/W5tO3Ihi1GsJevcKv6xdfvxEQHWq9pZ
LIFThB0j60rFTHq9yvMk+zUzeaZWv4B1bKgVDC1e7kzZpXj+BIxfCsyAIswKjaYw
HgYm9sP5g3mYhMLsV2sfDGTMU3fVKU4iYPRDUaGvhct5NnblkXt4Y6YrECzwmVXG
U9I9sUk1+sEIrudbwECl0JigykIF+2wxDsaIb3kd6SBw3W33ZUKB8FN8x4mZ4Wyy
q55QWj1QbKNHsAA79AdRAr683JBAUIbP6YCAQ4zjvcssDlluyX3LwO34oJrkartM
F04=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:27 2026 by rpki-client