Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TvCmSFzRXXp9gwBhymd9hVWAiYI.roa
File: TvCmSFzRXXp9gwBhymd9hVWAiYI.roa (raw, json)
Hash identifier: kyyrfOcSU9f1ybp6C+staAN9//nlgFE5OTbOH+N/rQY=
Subject key identifier: 4E:F0:A6:48:5C:D1:5D:7A:7D:83:00:61:CA:67:7D:85:55:80:89:82
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F5D574BC32EC19FEE49287E020CC8B6D6
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TvCmSFzRXXp9gwBhymd9hVWAiYI.roa
Signing time: Mon 13 Jul 2026 21:17:09 +0000
ROA not before: Mon 13 Jul 2026 21:17:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213520
IP address blocks: 2.26.24.0/22 maxlen: 24
2.26.76.0/23 maxlen: 24
2.26.162.0/23 maxlen: 24
2.27.24.0/23 maxlen: 24
2.27.28.0/22 maxlen: 24
31.77.160.0/23 maxlen: 24
31.77.162.0/24 maxlen: 24
31.77.226.0/24 maxlen: 24
64.188.68.0/22 maxlen: 24
64.188.74.0/24 maxlen: 24
64.188.104.0/22 maxlen: 24
77.239.120.0/23 maxlen: 24
144.31.16.0/23 maxlen: 24
144.31.18.0/23 maxlen: 24
144.31.62.0/23 maxlen: 24
144.31.84.0/23 maxlen: 24
144.31.116.0/23 maxlen: 24
144.31.118.0/23 maxlen: 24
144.31.122.0/23 maxlen: 24
144.31.134.0/23 maxlen: 24
144.31.138.0/23 maxlen: 24
144.31.196.0/23 maxlen: 24
144.31.232.0/24 maxlen: 24
144.31.233.0/24 maxlen: 24
150.241.64.0/24 maxlen: 24
150.241.78.0/23 maxlen: 24
193.23.197.0/24 maxlen: 24
193.23.210.0/23 maxlen: 24
193.23.218.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5d:57:4b:c3:2e:c1:9f:ee:49:28:7e:02:0c:c8:b6:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 13 21:17:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ef0a6485cd15d7a7d830061ca677d8555808982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f6:06:ff:4e:ef:75:78:da:82:4b:ec:55:24:
e3:59:ca:c6:90:4b:bf:09:89:24:66:1b:d4:7c:3c:
42:18:91:89:77:43:ce:2e:80:9d:d6:e9:d8:2a:72:
5e:93:38:1c:2a:25:13:2f:46:c1:92:09:ba:ca:ce:
ce:95:42:d7:87:5a:c4:cc:c6:4b:9d:3c:91:50:48:
66:ff:f9:9b:fb:b6:b7:9e:0a:8c:0d:01:f4:27:58:
c8:08:00:38:5c:50:ec:31:87:08:e2:18:d8:63:3d:
7f:66:15:f5:c0:ac:92:5f:80:e6:01:ec:76:27:6e:
6d:b8:2a:2b:65:fe:cf:37:12:27:85:e8:de:91:78:
86:4e:0d:e7:4a:1a:c5:1b:e3:4a:e2:35:2f:86:ef:
6d:9f:55:dc:54:51:10:be:e1:f9:0c:42:a5:76:72:
90:97:82:9c:aa:74:d3:73:50:e8:c5:d2:dc:d2:d5:
ce:be:62:01:7a:18:83:e4:21:86:80:e0:08:13:25:
cb:02:0f:55:87:f2:92:4f:da:6c:44:76:f3:05:84:
08:be:9f:35:6a:a6:a7:ec:c8:80:ee:08:6d:d2:7c:
d5:aa:8c:e9:a4:09:51:f0:55:17:cb:5b:bb:3b:6d:
9a:46:54:46:0b:8e:80:39:78:86:ab:60:c3:0e:ef:
4a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F0:A6:48:5C:D1:5D:7A:7D:83:00:61:CA:67:7D:85:55:80:89:82
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TvCmSFzRXXp9gwBhymd9hVWAiYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.24.0/22
2.26.76.0/23
2.26.162.0/23
2.27.24.0/23
2.27.28.0/22
31.77.160.0-31.77.162.255
31.77.226.0/24
64.188.68.0/22
64.188.74.0/24
64.188.104.0/22
77.239.120.0/23
144.31.16.0/22
144.31.62.0/23
144.31.84.0/23
144.31.116.0/22
144.31.122.0/23
144.31.134.0/23
144.31.138.0/23
144.31.196.0/23
144.31.232.0/23
150.241.64.0/24
150.241.78.0/23
193.23.197.0/24
193.23.210.0/23
193.23.218.0/23
Signature Algorithm: sha256WithRSAEncryption
08:aa:c3:94:2e:46:28:01:d8:eb:ed:70:f9:32:c9:3a:83:98:
0c:db:73:d8:cb:05:1a:de:83:55:2e:e4:87:a2:52:87:1e:07:
4c:05:31:a0:a3:79:e4:02:36:a7:eb:13:88:25:85:fa:a6:75:
aa:13:1b:6c:9c:06:b0:6d:fc:46:c7:b2:c1:ea:72:ac:fe:50:
ee:30:11:04:67:eb:7c:6e:6a:e0:9f:27:23:47:66:15:04:19:
f4:47:e4:81:d0:bc:e8:26:61:d7:11:d7:cd:29:1e:73:f1:0e:
fe:56:fa:2e:f1:a8:71:0d:35:3b:5d:54:ea:25:9b:cb:73:1c:
9f:85:32:d6:df:8f:3a:e5:06:db:cb:1b:8b:a8:26:4a:b9:50:
e7:3a:c3:a2:57:69:94:e2:e0:ab:f3:7d:a4:dc:f7:70:d9:3c:
32:2f:0e:0b:d5:e8:5f:e1:a8:2d:f0:f2:9c:d2:9b:35:6a:6a:
27:c4:74:1e:0e:2f:d8:95:8f:e1:53:1d:3a:39:ac:25:7c:11:
e5:de:f6:6d:19:07:38:f0:92:72:86:4a:97:d6:28:49:f8:25:
49:af:d2:90:eb:4b:68:8c:f7:44:c0:e5:c4:52:5b:04:90:71:
0e:7f:b4:fe:66:a0:29:9d:04:2c:35:24:79:44:f9:4d:fc:77:
28:d0:cd:ba
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:55:23 2026 by rpki-client