Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/T3Oi9P8xagW0Dhk1exBsuBcdcWo.roa
File: T3Oi9P8xagW0Dhk1exBsuBcdcWo.roa (raw, json)
Hash identifier: pW3wQbhTKTH1ET1xfkx/lv3KIHAxwMuhbcTnpLhyLV0=
Subject key identifier: 4F:73:A2:F4:FF:31:6A:05:B4:0E:19:35:7B:10:6C:B8:17:1D:71:6A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F8B0394D244C8C6AD6E274B99DC88C8A9
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/T3Oi9P8xagW0Dhk1exBsuBcdcWo.roa
Signing time: Wed 22 Jul 2026 18:08:15 +0000
ROA not before: Wed 22 Jul 2026 18:08:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207957
IP address blocks: 2.26.8.0/24 maxlen: 24
2.26.9.0/24 maxlen: 24
2.26.10.0/24 maxlen: 24
2.26.11.0/24 maxlen: 24
2.26.88.0/24 maxlen: 24
2.26.89.0/24 maxlen: 24
2.26.90.0/24 maxlen: 24
2.26.91.0/24 maxlen: 24
2.26.92.0/24 maxlen: 24
2.26.93.0/24 maxlen: 24
31.76.0.0/24 maxlen: 24
31.76.1.0/24 maxlen: 24
31.76.2.0/24 maxlen: 24
31.76.3.0/24 maxlen: 24
31.76.4.0/24 maxlen: 24
31.76.5.0/24 maxlen: 24
31.76.6.0/24 maxlen: 24
31.76.7.0/24 maxlen: 24
31.76.52.0/24 maxlen: 24
31.76.53.0/24 maxlen: 24
31.76.54.0/24 maxlen: 24
31.76.55.0/24 maxlen: 24
31.76.60.0/24 maxlen: 24
31.76.61.0/24 maxlen: 24
31.76.62.0/24 maxlen: 24
31.76.63.0/24 maxlen: 24
31.76.64.0/24 maxlen: 24
31.76.65.0/24 maxlen: 24
31.76.66.0/24 maxlen: 24
31.76.68.0/24 maxlen: 24
31.76.82.0/24 maxlen: 24
31.76.83.0/24 maxlen: 24
31.76.84.0/24 maxlen: 24
31.76.85.0/24 maxlen: 24
31.76.114.0/24 maxlen: 24
31.76.115.0/24 maxlen: 24
31.77.140.0/24 maxlen: 24
31.77.141.0/24 maxlen: 24
31.77.142.0/24 maxlen: 24
31.77.143.0/24 maxlen: 24
64.188.89.0/24 maxlen: 24
64.188.90.0/24 maxlen: 24
64.188.98.0/24 maxlen: 24
64.188.127.0/24 maxlen: 24
77.239.107.0/24 maxlen: 24
144.31.15.0/24 maxlen: 24
144.31.49.0/24 maxlen: 24
144.31.50.0/24 maxlen: 24
144.31.51.0/24 maxlen: 24
144.31.57.0/24 maxlen: 24
144.31.82.0/24 maxlen: 24
144.31.83.0/24 maxlen: 24
144.31.93.0/24 maxlen: 24
144.31.103.0/24 maxlen: 24
144.31.107.0/24 maxlen: 24
144.31.108.0/24 maxlen: 24
144.31.109.0/24 maxlen: 24
144.31.213.0/24 maxlen: 24
144.31.214.0/24 maxlen: 24
144.31.216.0/24 maxlen: 24
144.31.217.0/24 maxlen: 24
144.31.218.0/24 maxlen: 24
144.31.219.0/24 maxlen: 24
144.31.239.0/24 maxlen: 24
144.31.240.0/24 maxlen: 24
144.31.241.0/24 maxlen: 24
144.31.242.0/24 maxlen: 24
144.31.243.0/24 maxlen: 24
144.31.249.0/24 maxlen: 24
150.241.72.0/24 maxlen: 24
150.241.73.0/24 maxlen: 24
150.241.74.0/24 maxlen: 24
150.241.75.0/24 maxlen: 24
150.241.82.0/24 maxlen: 24
150.241.83.0/24 maxlen: 24
150.241.100.0/24 maxlen: 24
150.241.101.0/24 maxlen: 24
150.241.102.0/24 maxlen: 24
150.241.103.0/24 maxlen: 24
185.170.153.0/24 maxlen: 24
185.170.154.0/24 maxlen: 24
193.23.195.0/24 maxlen: 24
193.23.200.0/24 maxlen: 24
193.23.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8b:03:94:d2:44:c8:c6:ad:6e:27:4b:99:dc:88:c8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 22 18:08:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f73a2f4ff316a05b40e19357b106cb8171d716a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f0:29:3c:df:cf:c1:27:47:42:7b:7e:54:ea:
36:a8:e2:b2:8b:09:b1:8d:82:43:5f:12:00:46:81:
97:90:db:00:0f:5a:08:1b:09:43:a3:64:dc:21:a7:
ad:21:a4:87:b0:b4:1c:98:e7:10:e6:eb:d5:46:08:
ad:a1:af:94:8d:78:26:3e:be:8d:09:53:d2:8c:59:
49:b8:d0:ea:f0:eb:08:40:4a:23:d2:5c:64:a7:8b:
a4:15:5c:80:64:1f:23:d4:69:d9:97:ce:d6:25:dc:
59:b6:96:a4:58:77:56:32:99:39:ee:56:77:d6:a3:
9c:83:13:ec:ef:24:67:77:c3:93:57:c8:2b:25:5d:
74:ed:27:3a:4b:96:0f:91:e6:d3:59:10:32:14:36:
46:9f:97:2e:c2:69:a4:b6:fa:cc:f3:72:07:e3:f6:
2b:57:f0:f9:37:73:7f:46:ca:55:37:08:26:f8:64:
be:5a:ba:4f:88:01:ce:fb:0e:22:82:22:cf:bc:05:
cf:53:87:b2:1f:28:47:df:92:0f:e6:b4:2e:ed:bd:
01:60:d0:32:4d:a7:42:5c:c1:3e:b9:f4:ec:0d:37:
b4:2a:77:f2:48:c0:a1:f2:38:fa:20:5b:fe:be:e9:
e6:28:b0:4b:a9:38:9b:e8:6f:e8:82:10:37:c3:92:
7c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:73:A2:F4:FF:31:6A:05:B4:0E:19:35:7B:10:6C:B8:17:1D:71:6A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/T3Oi9P8xagW0Dhk1exBsuBcdcWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.8.0/22
2.26.88.0-2.26.93.255
31.76.0.0/21
31.76.52.0/22
31.76.60.0-31.76.66.255
31.76.68.0/24
31.76.82.0-31.76.85.255
31.76.114.0/23
31.77.140.0/22
64.188.89.0-64.188.90.255
64.188.98.0/24
64.188.127.0/24
77.239.107.0/24
144.31.15.0/24
144.31.49.0-144.31.51.255
144.31.57.0/24
144.31.82.0/23
144.31.93.0/24
144.31.103.0/24
144.31.107.0-144.31.109.255
144.31.213.0-144.31.214.255
144.31.216.0/22
144.31.239.0-144.31.243.255
144.31.249.0/24
150.241.72.0/22
150.241.82.0/23
150.241.100.0/22
185.170.153.0-185.170.154.255
193.23.195.0/24
193.23.200.0/24
193.23.202.0/24
Signature Algorithm: sha256WithRSAEncryption
98:ff:3d:dd:90:05:f6:62:2f:12:0e:b2:cf:23:dd:71:d1:fa:
6a:bb:11:d6:1e:29:8c:e4:84:75:69:b0:56:76:df:1f:e2:8a:
33:39:d6:5a:e2:a6:1b:f8:f3:5a:6c:7a:f4:e3:2e:51:35:1e:
7a:42:8d:c5:8c:fd:df:68:78:cc:6d:8d:29:6a:a3:07:1e:34:
d0:22:a2:8c:48:14:a5:ea:02:4f:10:18:48:a4:8a:b0:49:c2:
54:75:5c:68:fb:39:fd:c1:7c:d3:a6:62:47:e8:c3:95:7b:c0:
c8:a1:54:48:59:31:12:02:38:c9:f2:c5:9e:b0:a0:c3:e2:06:
46:de:ab:42:fb:3a:ab:97:b4:bf:af:7b:2c:fa:68:70:57:c0:
13:34:e9:c7:a0:c6:ea:ce:84:c7:73:2d:47:17:e9:30:d9:60:
c3:6a:57:7d:b2:e9:14:37:58:83:f2:07:27:41:30:28:2c:3e:
b2:a6:b7:27:66:ef:40:93:e6:50:a4:50:72:22:2d:55:d5:c6:
5f:b1:59:f3:27:57:d0:b0:f1:e9:73:85:3a:ae:ef:74:38:ce:
be:f4:b6:ae:a1:85:dd:0f:a9:36:5d:d2:20:63:30:01:e3:0a:
d4:83:18:93:ff:78:5f:3c:44:82:a8:43:88:6e:ff:b2:ef:4d:
0f:35:30:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:33 2026 by rpki-client