Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Br66P1VbLW0uSz6nkHr6DcvQuF8.roa
File: Br66P1VbLW0uSz6nkHr6DcvQuF8.roa (raw, json)
Hash identifier: fFwGF2rL6HCdB8AQm5h/OJFjTJz965o1XeymITQLjEU=
Subject key identifier: 06:BE:BA:3F:55:5B:2D:6D:2E:4B:3E:A7:90:7A:FA:0D:CB:D0:B8:5F
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0CF82B32C2D60F371FC6A8EDD0198FED3
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Br66P1VbLW0uSz6nkHr6DcvQuF8.roa
Signing time: Wed 23 Sep 2026 18:24:04 +0000
ROA not before: Wed 23 Sep 2026 18:24:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207957
IP address blocks: 2.26.8.0/24 maxlen: 24
2.26.9.0/24 maxlen: 24
2.26.10.0/24 maxlen: 24
2.26.11.0/24 maxlen: 24
2.26.88.0/24 maxlen: 24
2.26.89.0/24 maxlen: 24
2.26.90.0/24 maxlen: 24
2.26.91.0/24 maxlen: 24
2.26.92.0/24 maxlen: 24
2.26.93.0/24 maxlen: 24
2.26.95.0/24 maxlen: 24
2.27.208.0/24 maxlen: 24
2.27.209.0/24 maxlen: 24
2.27.210.0/24 maxlen: 24
2.27.211.0/24 maxlen: 24
13.143.137.0/24 maxlen: 24
13.143.142.0/24 maxlen: 24
13.143.180.0/22 maxlen: 24
13.143.184.0/24 maxlen: 24
13.143.185.0/24 maxlen: 24
13.143.186.0/24 maxlen: 24
13.143.187.0/24 maxlen: 24
13.143.188.0/22 maxlen: 24
13.143.192.0/24 maxlen: 24
13.143.193.0/24 maxlen: 24
13.143.194.0/24 maxlen: 24
13.143.195.0/24 maxlen: 24
13.143.196.0/22 maxlen: 24
31.76.0.0/24 maxlen: 24
31.76.1.0/24 maxlen: 24
31.76.2.0/24 maxlen: 24
31.76.3.0/24 maxlen: 24
31.76.4.0/24 maxlen: 24
31.76.5.0/24 maxlen: 24
31.76.6.0/24 maxlen: 24
31.76.7.0/24 maxlen: 24
31.76.52.0/24 maxlen: 24
31.76.53.0/24 maxlen: 24
31.76.54.0/24 maxlen: 24
31.76.55.0/24 maxlen: 24
31.76.60.0/24 maxlen: 24
31.76.61.0/24 maxlen: 24
31.76.62.0/24 maxlen: 24
31.76.63.0/24 maxlen: 24
31.76.64.0/24 maxlen: 24
31.76.65.0/24 maxlen: 24
31.76.66.0/24 maxlen: 24
31.76.68.0/24 maxlen: 24
31.76.69.0/24 maxlen: 24
31.76.70.0/24 maxlen: 24
31.76.71.0/24 maxlen: 24
31.76.82.0/24 maxlen: 24
31.76.83.0/24 maxlen: 24
31.76.84.0/24 maxlen: 24
31.76.85.0/24 maxlen: 24
31.76.114.0/24 maxlen: 24
31.76.115.0/24 maxlen: 24
31.77.38.0/24 maxlen: 24
31.77.39.0/24 maxlen: 24
31.77.46.0/24 maxlen: 24
31.77.47.0/24 maxlen: 24
31.77.140.0/24 maxlen: 24
31.77.141.0/24 maxlen: 24
31.77.142.0/24 maxlen: 24
31.77.143.0/24 maxlen: 24
64.188.89.0/24 maxlen: 24
64.188.90.0/24 maxlen: 24
64.188.98.0/24 maxlen: 24
64.188.127.0/24 maxlen: 24
77.239.107.0/24 maxlen: 24
144.31.15.0/24 maxlen: 24
144.31.49.0/24 maxlen: 24
144.31.50.0/24 maxlen: 24
144.31.51.0/24 maxlen: 24
144.31.57.0/24 maxlen: 24
144.31.82.0/24 maxlen: 24
144.31.83.0/24 maxlen: 24
144.31.93.0/24 maxlen: 24
144.31.103.0/24 maxlen: 24
144.31.107.0/24 maxlen: 24
144.31.108.0/24 maxlen: 24
144.31.109.0/24 maxlen: 24
144.31.213.0/24 maxlen: 24
144.31.214.0/24 maxlen: 24
144.31.216.0/24 maxlen: 24
144.31.217.0/24 maxlen: 24
144.31.218.0/24 maxlen: 24
144.31.219.0/24 maxlen: 24
144.31.239.0/24 maxlen: 24
144.31.240.0/24 maxlen: 24
144.31.241.0/24 maxlen: 24
144.31.242.0/24 maxlen: 24
144.31.243.0/24 maxlen: 24
144.31.249.0/24 maxlen: 24
150.241.72.0/24 maxlen: 24
150.241.73.0/24 maxlen: 24
150.241.74.0/24 maxlen: 24
150.241.75.0/24 maxlen: 24
150.241.82.0/24 maxlen: 24
150.241.83.0/24 maxlen: 24
150.241.100.0/24 maxlen: 24
150.241.101.0/24 maxlen: 24
150.241.102.0/24 maxlen: 24
150.241.103.0/24 maxlen: 24
179.254.86.0/24 maxlen: 24
185.170.153.0/24 maxlen: 24
185.170.154.0/24 maxlen: 24
193.23.195.0/24 maxlen: 24
193.23.200.0/24 maxlen: 24
193.23.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:82:b3:2c:2d:60:f3:71:fc:6a:8e:dd:01:98:fe:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 23 18:24:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06beba3f555b2d6d2e4b3ea7907afa0dcbd0b85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4b:d6:a9:10:3e:ab:ce:7f:00:e1:40:2d:c1:
7f:17:28:09:c1:f8:e1:0e:0d:3c:2b:bf:1a:16:ea:
c0:7b:c7:03:f0:4d:96:2e:68:4e:2a:ee:71:e9:92:
85:11:9e:b2:29:96:4d:4e:3e:06:c9:3f:dd:08:69:
3f:30:4d:bb:39:4d:16:be:4f:f7:e7:8f:5f:de:be:
b7:dc:3b:66:f9:15:da:fd:52:5a:32:95:2d:e9:c1:
6b:48:0f:83:73:13:15:fa:61:10:3b:34:5b:b7:91:
26:1a:d7:3d:ce:18:1b:90:df:c1:16:07:ec:a8:9c:
3f:e7:34:46:19:67:c4:b5:25:51:fa:2a:45:af:95:
42:ef:3f:1a:a8:20:7b:15:bf:28:65:ea:06:80:19:
28:c5:e7:41:83:70:19:4f:0a:9e:8f:7a:bd:de:e3:
7b:27:67:3c:73:fa:1c:ff:9f:d4:2c:ed:ca:ed:37:
24:69:72:8f:75:35:fd:ec:c7:85:4a:96:13:86:88:
01:cd:e8:93:77:4b:cc:ea:c7:dd:29:6e:d7:b3:a9:
46:b4:c6:34:47:ce:fc:e3:b6:7e:f0:f5:65:cc:25:
a4:3b:83:e7:54:f2:51:f1:ad:2f:d1:de:8a:ad:8c:
eb:63:51:d6:4a:e2:8a:d7:6a:7c:89:90:62:b2:b8:
bc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BE:BA:3F:55:5B:2D:6D:2E:4B:3E:A7:90:7A:FA:0D:CB:D0:B8:5F
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Br66P1VbLW0uSz6nkHr6DcvQuF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.8.0/22
2.26.88.0-2.26.93.255
2.26.95.0/24
2.27.208.0/22
13.143.137.0/24
13.143.142.0/24
13.143.180.0-13.143.199.255
31.76.0.0/21
31.76.52.0/22
31.76.60.0-31.76.66.255
31.76.68.0/22
31.76.82.0-31.76.85.255
31.76.114.0/23
31.77.38.0/23
31.77.46.0/23
31.77.140.0/22
64.188.89.0-64.188.90.255
64.188.98.0/24
64.188.127.0/24
77.239.107.0/24
144.31.15.0/24
144.31.49.0-144.31.51.255
144.31.57.0/24
144.31.82.0/23
144.31.93.0/24
144.31.103.0/24
144.31.107.0-144.31.109.255
144.31.213.0-144.31.214.255
144.31.216.0/22
144.31.239.0-144.31.243.255
144.31.249.0/24
150.241.72.0/22
150.241.82.0/23
150.241.100.0/22
179.254.86.0/24
185.170.153.0-185.170.154.255
193.23.195.0/24
193.23.200.0/24
193.23.202.0/24
Signature Algorithm: sha256WithRSAEncryption
40:16:b7:7f:a8:7d:bb:a3:10:f8:2a:83:e1:c0:d5:9e:57:da:
cb:20:b9:60:0d:42:a5:14:09:d3:f8:53:b7:7c:a2:b0:e8:6f:
4c:ff:fd:71:75:36:0e:0c:62:bf:18:29:b7:2f:c2:b1:d0:26:
7d:bd:a3:aa:b9:f0:40:01:d0:25:73:d4:65:24:36:f5:96:60:
de:f5:6c:74:df:24:c0:28:16:12:e0:eb:b1:d2:16:76:26:2e:
7e:94:62:fa:0d:b5:c2:b3:cb:c9:66:60:01:af:03:f5:b5:a7:
ff:b2:74:1a:94:97:32:79:ae:1b:ed:ad:8d:7a:71:1d:e4:d4:
6a:9e:76:8b:dd:c3:ba:53:1d:df:10:ae:16:b0:9f:ac:ee:f7:
f3:1d:e2:a7:80:8b:0f:fb:b6:db:56:aa:1d:78:f0:b7:1d:e4:
70:c2:24:51:74:ca:92:34:4b:77:b7:96:a1:35:e0:e8:e8:33:
0f:04:21:1e:42:7b:f7:53:c8:4e:32:da:62:39:6e:43:22:85:
f3:0b:a5:0a:11:63:85:9d:5f:3f:69:cd:a3:93:b3:53:96:a0:
42:16:29:fa:b7:99:25:91:c8:a3:29:bd:b5:45:0e:12:96:b3:
8f:f1:f8:ae:9a:6f:d2:a6:4d:a5:90:b1:84:05:3a:2c:80:34:
c7:f3:c6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:26:41 2026 by rpki-client