Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ZNhKWpTLMyOVPdV-TZJ3SW4-Rq4.roa
File: ZNhKWpTLMyOVPdV-TZJ3SW4-Rq4.roa (raw, json)
Hash identifier: W2Crx8PtNgAhboWktXpQIyFSv3O3NDGAj8yEGqxNm54=
Subject key identifier: 64:D8:4A:5A:94:CB:33:23:95:3D:D5:7E:4D:92:77:49:6E:3E:46:AE
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F9111907D65026E0200A3D23E8A63B3D6
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ZNhKWpTLMyOVPdV-TZJ3SW4-Rq4.roa
Signing time: Thu 23 Jul 2026 22:21:15 +0000
ROA not before: Thu 23 Jul 2026 22:21:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215730
IP address blocks: 2.27.26.0/23 maxlen: 24
31.76.117.0/24 maxlen: 24
31.76.125.0/24 maxlen: 24
31.76.127.0/24 maxlen: 24
64.188.91.0/24 maxlen: 24
144.31.0.0/21 maxlen: 24
144.31.11.0/24 maxlen: 24
144.31.90.0/24 maxlen: 24
144.31.94.0/24 maxlen: 24
144.31.125.0/24 maxlen: 24
144.31.128.0/23 maxlen: 24
144.31.130.0/23 maxlen: 24
150.241.95.0/24 maxlen: 24
177.1.195.0/24 maxlen: 24
193.23.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:11:90:7d:65:02:6e:02:00:a3:d2:3e:8a:63:b3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 23 22:21:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64d84a5a94cb3323953dd57e4d9277496e3e46ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:54:a9:18:9c:b1:d6:8f:e6:88:6f:7c:22:eb:
b6:4a:df:39:c1:74:b0:99:5f:e9:7a:13:66:4c:32:
d2:44:5c:9c:86:52:55:f5:af:d8:12:22:93:12:01:
2e:50:63:b9:9c:9c:a2:f8:b3:0d:96:50:c7:3c:d6:
90:28:83:72:9f:33:49:a2:95:5d:e4:76:08:6d:dc:
1b:84:a9:5a:6a:13:da:8a:9e:b0:50:c5:5c:5d:ef:
c5:d5:88:11:22:3e:57:b8:8b:2e:54:9a:58:61:81:
9a:cf:c3:b1:84:a1:6f:a9:c5:0b:b6:26:25:80:b1:
2b:c3:65:71:94:32:cc:6c:57:58:94:ae:a0:8a:cf:
0c:b4:f5:43:5a:25:8e:2e:88:bd:c8:23:d0:90:8b:
44:c4:3d:ec:72:c2:a0:74:c5:66:6a:a0:9c:e4:17:
24:66:27:b6:fe:bf:17:9c:14:b0:37:3c:73:b0:09:
d6:6f:36:39:3e:d9:45:fd:1b:da:6b:fc:d8:1c:23:
17:19:9b:99:80:fc:2e:1f:ec:6d:4c:9a:c1:ef:21:
af:d6:a8:43:34:da:b3:41:7a:9d:30:7e:5c:f7:d7:
bf:f1:a8:49:ca:3f:9f:27:d5:df:e0:e7:b4:58:2f:
81:b7:1d:1a:0b:5e:67:d5:b7:07:7d:ed:fb:68:41:
75:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D8:4A:5A:94:CB:33:23:95:3D:D5:7E:4D:92:77:49:6E:3E:46:AE
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ZNhKWpTLMyOVPdV-TZJ3SW4-Rq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.26.0/23
31.76.117.0/24
31.76.125.0/24
31.76.127.0/24
64.188.91.0/24
144.31.0.0/21
144.31.11.0/24
144.31.90.0/24
144.31.94.0/24
144.31.125.0/24
144.31.128.0/22
150.241.95.0/24
177.1.195.0/24
193.23.193.0/24
Signature Algorithm: sha256WithRSAEncryption
67:31:25:fc:68:5d:3f:24:13:28:63:e8:0a:1d:66:a1:63:46:
36:14:9a:02:05:29:c3:2c:88:ce:4a:b3:18:b9:03:f5:0b:6d:
8d:2b:54:9a:a8:15:d7:89:da:74:72:f4:92:ef:01:7c:51:ad:
b5:e4:9f:8b:85:00:73:02:1c:89:62:90:71:d2:d3:12:f5:3b:
a3:fc:08:03:c4:cb:92:39:b9:b8:3e:c2:5f:85:18:0e:13:c5:
97:ff:b9:01:ed:92:d5:10:f3:18:db:83:55:de:ba:84:06:26:
96:47:65:35:3e:c2:b9:8b:8e:e2:82:e4:3b:09:b4:05:a3:2c:
7d:93:20:97:73:84:81:8c:c8:3e:42:dc:a2:a0:09:95:6f:88:
6b:77:53:aa:99:c4:fd:b4:27:47:a6:29:e5:60:b2:52:ce:b0:
23:31:e0:99:81:25:5b:6c:8c:96:bf:07:15:81:ac:61:60:04:
b9:66:d3:ae:b7:b8:a9:fb:b1:51:80:5c:dd:8d:54:9e:9e:19:
6a:6a:86:b8:98:d6:2d:f0:31:4b:b4:0d:af:36:36:a4:4d:62:
52:3e:5a:06:7f:da:c1:31:8a:db:3d:e6:8f:cd:f4:ef:45:7e:
05:a0:67:3b:4b:90:21:2d:3a:e4:c4:90:a2:8f:3a:4c:b6:11:
b6:fb:08:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:30:21 2026 by rpki-client