Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/IjHYP-MvH1Le2e2T4tgkJY-dhec.roa
File: IjHYP-MvH1Le2e2T4tgkJY-dhec.roa (raw, json)
Hash identifier: pjR3LcFngZzSDmAZKwrHcSjlsCMcAQcdkNBj0maqoGQ=
Subject key identifier: 22:31:D8:3F:E3:2F:1F:52:DE:D9:ED:93:E2:D8:24:25:8F:9D:85:E7
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019EF07772DBC8298B6094B7B0EB1557C2A9
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/IjHYP-MvH1Le2e2T4tgkJY-dhec.roa
Signing time: Mon 22 Jun 2026 17:53:40 +0000
ROA not before: Mon 22 Jun 2026 17:53:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209693
IP address blocks: 2.26.148.0/24 maxlen: 24
31.76.22.0/24 maxlen: 24
31.76.23.0/24 maxlen: 24
64.188.76.0/24 maxlen: 24
64.188.77.0/24 maxlen: 24
64.188.78.0/24 maxlen: 24
64.188.79.0/24 maxlen: 24
64.188.80.0/24 maxlen: 24
64.188.81.0/24 maxlen: 24
64.188.82.0/24 maxlen: 24
64.188.83.0/24 maxlen: 24
77.239.126.0/24 maxlen: 24
87.251.16.0/24 maxlen: 24
87.251.17.0/24 maxlen: 24
87.251.18.0/24 maxlen: 24
87.251.19.0/24 maxlen: 24
144.31.168.0/22 maxlen: 24
193.23.216.0/24 maxlen: 24
193.23.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f0:77:72:db:c8:29:8b:60:94:b7:b0:eb:15:57:c2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 22 17:53:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2231d83fe32f1f52ded9ed93e2d824258f9d85e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:ef:46:d4:9d:09:18:36:c9:5d:b2:5c:60:
22:f3:39:08:04:85:4d:18:ef:8a:cf:18:4f:70:01:
e1:0a:0b:e4:60:10:b4:3e:04:a3:ad:e8:7a:12:8c:
82:cf:7f:f6:1b:a2:69:87:94:e8:3d:e2:00:35:79:
70:1a:c4:fc:ef:fd:11:5e:4f:e4:f1:95:ae:a0:98:
ee:86:80:51:b9:4f:c9:b0:85:bb:c7:0a:76:9f:d1:
2e:06:a8:10:d8:8c:b3:c0:e1:cf:ee:57:01:89:fd:
b2:98:fb:4c:a6:c0:59:ba:f1:74:f5:65:16:92:54:
5f:b3:51:c3:18:43:af:e4:d7:2f:65:ff:ff:e2:00:
2d:bf:28:a8:39:b3:89:9f:20:80:33:4f:cd:8d:7f:
14:97:64:73:d3:cf:33:ee:51:17:d7:48:54:5c:15:
fc:41:47:fb:86:51:56:07:2d:e0:9b:d6:86:45:4f:
d4:c8:80:99:f7:c0:56:5d:22:30:f2:b9:66:55:d9:
0e:df:0f:ca:ab:17:4d:01:45:25:14:44:3a:82:76:
62:53:58:6f:4e:b7:2b:53:8d:03:45:f3:4e:28:0f:
ac:01:f7:25:79:1f:40:00:a7:80:e7:f3:ca:3c:2f:
fb:7a:de:c4:c3:ef:04:ec:40:6d:75:66:f5:0a:92:
72:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:31:D8:3F:E3:2F:1F:52:DE:D9:ED:93:E2:D8:24:25:8F:9D:85:E7
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/IjHYP-MvH1Le2e2T4tgkJY-dhec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.148.0/24
31.76.22.0/23
64.188.76.0-64.188.83.255
77.239.126.0/24
87.251.16.0/22
144.31.168.0/22
193.23.216.0/24
193.23.221.0/24
Signature Algorithm: sha256WithRSAEncryption
50:a6:df:77:b4:71:25:6d:77:84:b0:1d:12:e8:86:8d:74:c9:
e4:08:60:8d:57:87:7f:03:40:44:29:9e:d6:5a:b6:ad:b3:86:
14:5b:a4:b5:ff:8b:21:c7:e3:b9:7b:ff:67:1f:c5:50:51:61:
19:6e:4b:26:51:25:20:d6:6d:6d:38:58:58:88:38:38:0c:70:
a3:e9:8b:68:d5:9c:be:1c:27:a9:50:a2:87:18:77:36:72:3a:
b2:c7:95:0f:c6:6e:fe:3e:9b:7f:f8:86:0a:5a:cd:c8:b6:ac:
a2:5e:48:36:75:f1:cf:21:f7:37:08:65:e9:e3:5c:d9:72:de:
4d:29:38:30:09:da:6b:b6:d3:82:d1:c4:4f:de:b8:7a:25:de:
bb:ab:f1:98:bd:2e:ce:6c:61:27:0a:a2:eb:f1:86:15:41:6b:
e0:ec:12:59:df:dc:cc:0d:a1:84:1a:a5:45:db:cb:0c:8c:c4:
ee:9c:2a:88:f6:f9:77:49:97:52:5e:59:da:28:5f:c1:96:44:
34:19:9c:1a:9c:f4:5a:a7:26:9d:8b:2b:cf:ca:85:e8:b4:7f:
4d:e8:a1:71:3f:77:0f:8d:94:86:55:6e:ae:2f:0e:01:56:97:
a4:c9:ac:81:15:5a:76:24:ea:4f:e0:f3:92:de:a9:46:a1:0f:
03:40:c3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:16 2026 by rpki-client