Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/NRTyz1CfC4_5I_8LCaIlNpbAT7Q.roa
File: NRTyz1CfC4_5I_8LCaIlNpbAT7Q.roa (raw, json)
Hash identifier: Vjznxc+Mr6gbx6TQmt5HXxvx6TcpCJe66Sqtd+TVSTs=
Subject key identifier: 35:14:F2:CF:50:9F:0B:8F:F9:23:FF:0B:09:A2:25:36:96:C0:4F:B4
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1D11CC7082CC8C2EEFB2866D9700CCAFB
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/NRTyz1CfC4_5I_8LCaIlNpbAT7Q.roa
Signing time: Thu 12 Nov 2026 18:54:46 +0000
ROA not before: Thu 12 Nov 2026 18:54:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215590
IP address blocks: 2.26.20.0/22 maxlen: 24
2.26.60.0/22 maxlen: 24
2.26.68.0/22 maxlen: 24
2.26.78.0/23 maxlen: 24
2.26.104.0/21 maxlen: 24
2.27.32.0/21 maxlen: 24
2.27.52.0/23 maxlen: 24
2.27.54.0/23 maxlen: 24
2.27.68.0/22 maxlen: 24
13.143.64.0/22 maxlen: 24
13.143.128.0/23 maxlen: 24
13.143.130.0/23 maxlen: 24
31.76.12.0/22 maxlen: 24
31.76.48.0/22 maxlen: 24
31.76.230.0/23 maxlen: 24
31.77.196.0/22 maxlen: 24
31.77.202.0/23 maxlen: 24
31.77.204.0/23 maxlen: 24
31.77.206.0/23 maxlen: 24
48.102.128.0/21 maxlen: 24
48.102.176.0/21 maxlen: 24
48.102.228.0/22 maxlen: 24
64.188.118.0/23 maxlen: 24
77.239.108.0/22 maxlen: 24
144.31.52.0/24 maxlen: 24
144.31.126.0/24 maxlen: 24
144.31.127.0/24 maxlen: 24
144.31.140.0/22 maxlen: 24
144.31.152.0/23 maxlen: 24
144.31.186.0/23 maxlen: 24
150.241.88.0/23 maxlen: 24
150.241.96.0/22 maxlen: 24
150.241.106.0/23 maxlen: 24
150.241.115.0/24 maxlen: 24
150.241.116.0/24 maxlen: 24
150.241.123.0/24 maxlen: 24
152.234.232.0/21 maxlen: 24
177.1.180.0/22 maxlen: 24
179.236.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d1:1c:c7:08:2c:c8:c2:ee:fb:28:66:d9:70:0c:ca:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 12 18:54:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3514f2cf509f0b8ff923ff0b09a2253696c04fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:63:40:84:c7:14:2b:4b:13:35:e6:52:cf:5b:
6f:1b:21:0e:a7:87:48:d3:0d:59:2b:eb:e0:65:cb:
e4:e2:3f:3c:8a:1f:d7:4c:30:03:1a:08:de:1f:f1:
61:6f:3f:37:c5:d3:e7:36:18:c0:57:28:f0:04:f5:
a3:bb:6e:91:f3:50:d2:72:c1:83:d5:c9:4d:bc:1d:
9d:cc:c0:24:78:10:4f:68:63:60:58:bf:7c:0b:2d:
07:0c:e5:8c:d4:5f:66:59:b7:11:20:81:d7:f9:12:
27:18:2f:cc:34:15:d1:5b:34:18:a0:ce:be:48:7c:
92:6f:02:22:c9:17:aa:b2:4e:45:83:1b:25:d8:a3:
87:d2:77:6d:a0:66:39:c0:0b:c7:b5:72:7f:06:1d:
a5:39:2c:d4:ec:74:d5:6d:4b:eb:a3:c3:a7:bd:75:
f4:17:8d:ea:bd:64:2a:ea:68:d5:60:f4:5c:59:6a:
4c:85:67:5c:f1:86:12:90:f4:b1:2c:6b:34:ce:3b:
6a:b9:4f:a1:72:89:c3:9f:c9:83:bf:2a:b1:9f:4e:
00:51:1e:3a:30:66:c9:3f:0b:e5:cb:16:17:57:64:
da:33:80:08:3e:39:55:b4:1b:13:74:86:d2:75:64:
2f:db:ec:d8:31:75:37:ad:f0:e4:e5:15:e9:3e:08:
2c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:14:F2:CF:50:9F:0B:8F:F9:23:FF:0B:09:A2:25:36:96:C0:4F:B4
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/NRTyz1CfC4_5I_8LCaIlNpbAT7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.20.0/22
2.26.60.0/22
2.26.68.0/22
2.26.78.0/23
2.26.104.0/21
2.27.32.0/21
2.27.52.0/22
2.27.68.0/22
13.143.64.0/22
13.143.128.0/22
31.76.12.0/22
31.76.48.0/22
31.76.230.0/23
31.77.196.0/22
31.77.202.0-31.77.207.255
48.102.128.0/21
48.102.176.0/21
48.102.228.0/22
64.188.118.0/23
77.239.108.0/22
144.31.52.0/24
144.31.126.0/23
144.31.140.0/22
144.31.152.0/23
144.31.186.0/23
150.241.88.0/23
150.241.96.0/22
150.241.106.0/23
150.241.115.0-150.241.116.255
150.241.123.0/24
152.234.232.0/21
177.1.180.0/22
179.236.144.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:a0:79:9e:32:c8:1b:e8:7a:b3:31:6b:f4:9d:9c:9e:d8:a0:
f0:7a:86:bd:f3:17:04:4e:9a:b5:6a:d5:2d:1e:a7:3a:ef:62:
94:b4:1b:bd:17:d1:74:06:f2:1a:fb:95:52:43:67:3d:88:5a:
01:dc:30:3e:fe:fb:e5:5f:af:3b:d1:54:22:e7:91:9a:84:6b:
2f:08:86:34:68:bb:35:2c:6e:e1:62:c4:ca:5a:d3:b1:f5:12:
07:a0:ad:9f:b4:3a:8f:4b:77:72:02:dd:7b:f1:d3:69:11:83:
49:58:53:d4:69:06:d8:da:ce:c4:ac:96:d4:18:e2:48:61:26:
b6:f9:e8:cd:54:58:4b:fa:ee:cd:14:bb:ab:1f:7a:a8:fc:14:
a4:de:22:d2:b9:9d:76:de:5b:7f:2e:a6:89:32:e7:cd:15:f1:
62:e8:a0:14:45:5d:a9:d5:0c:4e:39:3b:1c:f9:a5:53:5f:7f:
2c:1b:ec:23:c7:ba:f5:9f:6f:06:ce:9b:2e:29:18:d5:87:2a:
b8:9e:36:16:16:82:58:3d:4f:e4:ff:50:38:9e:78:39:5a:7f:
2d:3a:11:b8:a4:93:4f:63:dd:70:d9:6a:2c:a6:35:39:34:4b:
17:0b:10:de:4a:54:01:df:e5:aa:6f:99:99:f7:b4:d1:25:18:
5d:e8:90:a0
-----BEGIN CERTIFICATE-----
MIIF0jCCBLqgAwIBAgISAaHRHMcILMjC7vsoZtlwDMr7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYxMTEyMTg1NDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTE0ZjJjZjUwOWYwYjhmZjkyM2ZmMGIwOWEyMjUzNjk2YzA0ZmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2NAhMcUK0sTNeZSz1tvGyEOp4dI
0w1ZK+vgZcvk4j88ih/XTDADGgjeH/Fhbz83xdPnNhjAVyjwBPWju26R81DScsGD
1clNvB2dzMAkeBBPaGNgWL98Cy0HDOWM1F9mWbcRIIHX+RInGC/MNBXRWzQYoM6+
SHySbwIiyReqsk5Fgxsl2KOH0ndtoGY5wAvHtXJ/Bh2lOSzU7HTVbUvro8OnvXX0
F43qvWQq6mjVYPRcWWpMhWdc8YYSkPSxLGs0zjtquU+hconDn8mDvyqxn04AUR46
MGbJPwvlyxYXV2TaM4AIPjlVtBsTdIbSdWQv2+zYMXU3rfDk5RXpPggsBQIDAQAB
o4IC3jCCAtowHQYDVR0OBBYEFDUU8s9QnwuP+SP/CwmiJTaWwE+0MB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvTlJUeXoxQ2ZDNF81SV84TENhSWxOcGJBVDdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHzBggrBgEFBQcBBwEB/wSB4zCB4DCB3QQCAAEwgdYDBAIC
GhQDBAICGjwDBAICGkQDBAECGk4DBAMCGmgDBAMCGyADBAICGzQDBAICG0QDBAIN
j0ADBAINj4ADBAIfTAwDBAIfTDADBAEfTOYDBAIfTcQwDAMEAR9NygMEBB9NwAME
AzBmgAMEAzBmsAMEAjBm5AMEAUC8dgMEAk3vbAMEAJAfNAMEAZAffgMEApAfjAME
AZAfmAMEAZAfugMEAZbxWAMEApbxYAMEAZbxajAMAwQAlvFzAwQAlvF0AwQAlvF7
AwQDmOroAwQCsQG0AwQCs+yQMA0GCSqGSIb3DQEBCwUAA4IBAQCooHmeMsgb6Hqz
MWv0nZye2KDweoa98xcETpq1atUtHqc672KUtBu9F9F0BvIa+5VSQ2c9iFoB3DA+
/vvlX6870VQi55GahGsvCIY0aLs1LG7hYsTKWtOx9RIHoK2ftDqPS3dyAt178dNp
EYNJWFPUaQbY2s7ErJbUGOJIYSa2+ejNVFhL+u7NFLurH3qo/BSk3iLSuZ123lt/
LqaJMufNFfFi6KAURV2p1QxOOTsc+aVTX38sG+wjx7r1n28GzpsuKRjVhyq4njYW
FoJYPU/k/1A4nng5Wn8tOhG4pJNPY91w2WospjU5NEsXCxDeSlQB3+Wqb5mZ97TR
JRhd6JCg
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:01:30 2026 by rpki-client