Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/gsw7MUBlycaiEGQQuBBuq9M83EI.roa
File: gsw7MUBlycaiEGQQuBBuq9M83EI.roa (raw, json)
Hash identifier: 79voeG3Q1XLbHr0NKL2NfYaosYH5GioyWbkbCocxFxI=
Subject key identifier: 82:CC:3B:31:40:65:C9:C6:A2:10:64:10:B8:10:6E:AB:D3:3C:DC:42
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F7B2ADFB69E495E2F6159D0E98A34F8A2
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/gsw7MUBlycaiEGQQuBBuq9M83EI.roa
Signing time: Sun 19 Jul 2026 16:17:15 +0000
ROA not before: Sun 19 Jul 2026 16:17:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 2.26.222.0/24 maxlen: 24
2.27.98.0/24 maxlen: 24
2.27.154.0/24 maxlen: 24
2.27.214.0/23 maxlen: 24
31.77.98.0/24 maxlen: 24
31.77.99.0/24 maxlen: 24
31.77.104.0/24 maxlen: 24
31.77.105.0/24 maxlen: 24
31.77.109.0/24 maxlen: 24
31.77.190.0/23 maxlen: 24
31.77.206.0/23 maxlen: 24
31.77.217.0/24 maxlen: 24
31.77.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7b:2a:df:b6:9e:49:5e:2f:61:59:d0:e9:8a:34:f8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 19 16:17:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82cc3b314065c9c6a2106410b8106eabd33cdc42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b3:98:6a:67:c6:8c:1d:e4:53:19:89:a5:03:
42:39:75:d5:90:f2:d3:7c:4f:89:c8:f7:7d:b7:37:
2c:70:4d:db:68:e4:35:7c:bf:72:f6:a4:20:62:f9:
64:e8:0d:b5:00:62:50:04:80:f8:63:56:57:4a:68:
50:41:30:26:29:94:e2:ac:82:29:8d:8e:f5:ef:34:
46:bd:67:20:a8:c4:cc:6b:86:81:39:e1:16:ac:6d:
fa:37:d3:da:c8:cd:a8:ce:e4:33:9f:1a:5b:16:a7:
36:d7:fd:17:a0:9d:e3:08:20:95:2f:5a:cf:b8:c9:
31:da:c8:18:1a:77:8e:db:62:66:4d:ce:cd:63:1d:
14:51:0f:62:16:9c:b5:eb:5a:4d:b6:e3:fc:87:85:
86:ca:d4:71:d4:a8:42:68:6c:6e:6f:9a:82:5e:48:
5d:52:4d:17:17:65:c0:16:a3:7a:6e:d2:56:a2:1e:
93:86:65:ed:86:be:1b:44:50:99:c6:c4:04:be:33:
6c:b1:df:02:2f:a1:5c:02:e4:f9:29:09:69:cf:4c:
10:d5:86:d0:88:3c:f8:17:68:a3:86:02:00:6a:a4:
75:aa:76:f2:9f:79:0b:90:c5:f3:40:54:81:f9:49:
6b:f5:ee:5d:ff:50:7c:e5:3f:4b:89:e2:76:c1:10:
54:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CC:3B:31:40:65:C9:C6:A2:10:64:10:B8:10:6E:AB:D3:3C:DC:42
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/gsw7MUBlycaiEGQQuBBuq9M83EI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.222.0/24
2.27.98.0/24
2.27.154.0/24
2.27.214.0/23
31.77.98.0/23
31.77.104.0/23
31.77.109.0/24
31.77.190.0/23
31.77.206.0/23
31.77.217.0/24
31.77.240.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:7d:73:59:05:1c:aa:a4:ba:a3:a2:bc:85:fd:f1:50:76:ab:
6e:81:47:cd:dd:f7:ea:af:e2:16:06:f6:b8:e3:74:99:c6:27:
08:33:56:8d:0d:49:6a:e2:14:7c:9a:1e:74:b9:af:b0:f9:6d:
57:7f:94:b4:4a:4b:db:ed:c0:a8:ea:47:48:e8:8e:1d:66:d1:
93:54:76:1e:a5:02:44:08:fa:0b:09:d5:ad:2f:16:97:23:81:
69:82:0d:00:45:25:04:d0:4c:84:f3:35:b6:9f:72:8e:6b:8b:
df:f3:d0:d8:87:a0:98:b5:c6:cd:fa:5a:da:e4:97:66:3d:c4:
12:91:e0:46:4f:5c:51:ff:0f:3e:9d:88:a1:07:05:39:cd:42:
00:b4:30:6a:cd:24:ff:61:9e:a6:56:fa:17:ab:7a:8e:3f:9e:
ef:ae:34:bc:1a:2a:f4:40:f5:77:6f:54:7c:b3:11:c4:7e:fa:
8b:05:83:21:1e:cd:81:7c:ce:a7:61:d9:04:16:1a:11:cc:09:
45:e0:ba:24:06:35:ca:7a:82:ac:0b:77:7a:2e:b3:cd:e7:6e:
59:73:d9:6a:ee:53:7f:7a:7b:93:41:fa:83:45:4a:6a:74:f9:
ef:d7:88:83:da:56:6a:34:e3:f0:65:01:91:f5:69:0b:be:62:
8b:4b:ae:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:28:19 2026 by rpki-client