Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hlmUniD9pYVvKxLadGDit9gKzEw.roa
File: hlmUniD9pYVvKxLadGDit9gKzEw.roa (raw, json)
Hash identifier: 5sKuQgLAUZNm5a/mUdQdcmura3lSUcgt2QrwBwIFN5A=
Subject key identifier: 86:59:94:9E:20:FD:A5:85:6F:2B:12:DA:74:60:E2:B7:D8:0A:CC:4C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0CA0AEAE3D0737404DCE3B9974BCCF174
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hlmUniD9pYVvKxLadGDit9gKzEw.roa
Signing time: Tue 22 Sep 2026 16:55:08 +0000
ROA not before: Tue 22 Sep 2026 16:55:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219337
IP address blocks: 2.27.136.0/24 maxlen: 24
2.27.200.0/24 maxlen: 24
2.27.201.0/24 maxlen: 24
2.27.202.0/24 maxlen: 24
2.27.203.0/24 maxlen: 24
2.27.204.0/24 maxlen: 24
2.27.205.0/24 maxlen: 24
2.27.206.0/24 maxlen: 24
2.27.207.0/24 maxlen: 24
13.143.160.0/24 maxlen: 24
13.143.161.0/24 maxlen: 24
13.143.162.0/24 maxlen: 24
13.143.163.0/24 maxlen: 24
13.143.172.0/24 maxlen: 24
13.143.173.0/24 maxlen: 24
13.143.174.0/24 maxlen: 24
13.143.175.0/24 maxlen: 24
31.77.8.0/24 maxlen: 24
31.77.9.0/24 maxlen: 24
31.77.10.0/24 maxlen: 24
31.77.11.0/24 maxlen: 24
31.77.12.0/24 maxlen: 24
31.77.13.0/24 maxlen: 24
31.77.14.0/24 maxlen: 24
31.77.15.0/24 maxlen: 24
31.77.16.0/24 maxlen: 24
31.77.17.0/24 maxlen: 24
31.77.18.0/24 maxlen: 24
31.77.19.0/24 maxlen: 24
177.3.208.0/24 maxlen: 24
177.3.209.0/24 maxlen: 24
177.3.212.0/24 maxlen: 24
177.3.213.0/24 maxlen: 24
177.3.214.0/24 maxlen: 24
177.3.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0a:ea:e3:d0:73:74:04:dc:e3:b9:97:4b:cc:f1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 22 16:55:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8659949e20fda5856f2b12da7460e2b7d80acc4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:90:54:7d:29:5a:83:af:41:1a:c4:48:f6:
45:d8:6c:60:95:48:93:e0:77:41:f8:98:d8:2b:8e:
c0:0d:09:af:7e:ce:02:35:e5:59:72:e3:93:ad:7b:
a4:38:f2:08:2b:cd:0b:20:c9:c0:6d:1e:97:88:da:
c5:c4:f3:52:3b:73:c9:2d:e8:04:99:df:a0:05:6d:
fb:ea:25:7f:ec:b0:17:53:16:52:24:92:4b:eb:1e:
fb:3a:20:6a:66:2e:62:e1:1e:b2:ae:1d:08:e9:f4:
03:d8:a6:b6:5e:e3:3c:26:4a:db:13:97:1b:80:e0:
52:2b:9e:94:8d:65:fa:98:a4:1e:b4:1a:d0:19:1d:
fa:e1:a3:1a:f9:22:f0:3d:4e:71:b0:ac:ce:b0:6a:
9f:f1:06:1f:4b:d5:78:7e:97:d5:a9:9a:52:fc:18:
99:16:e6:67:b0:b8:1d:6c:13:a4:cb:96:4a:9a:34:
6d:3f:e7:01:b6:ac:ba:d5:17:b6:68:f7:14:e3:bd:
2b:16:c1:2a:e9:d5:8c:69:d4:6e:a0:f6:57:da:c0:
b8:e8:1d:e1:aa:03:6a:46:24:ca:d7:d4:62:b4:30:
5a:2f:4d:30:22:b6:ee:01:a3:3e:36:58:86:61:d1:
cc:17:be:86:a2:66:39:b0:3a:ff:bf:0d:04:3c:73:
27:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:59:94:9E:20:FD:A5:85:6F:2B:12:DA:74:60:E2:B7:D8:0A:CC:4C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hlmUniD9pYVvKxLadGDit9gKzEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.136.0/24
2.27.200.0/21
13.143.160.0/22
13.143.172.0/22
31.77.8.0-31.77.19.255
177.3.208.0/23
177.3.212.0/22
Signature Algorithm: sha256WithRSAEncryption
85:25:6c:2f:8b:61:ec:4a:8c:ad:a9:b8:f5:53:1b:2e:de:38:
e7:72:90:e7:5a:6d:1a:a0:3f:04:d2:9c:91:81:1a:4b:b7:c0:
e5:a7:91:77:2a:96:cc:6a:00:a8:30:d4:9d:a0:53:8f:d6:8d:
2d:c1:2b:5c:e9:03:3c:91:b6:30:dc:77:43:24:2a:8b:e3:7d:
49:de:16:6f:b6:3b:84:8a:cf:88:f7:f8:ba:9f:7f:ef:9b:98:
45:45:dd:9e:49:e1:e3:6a:41:a5:66:c4:9d:b7:38:3c:c2:cd:
41:36:d5:7e:ae:6f:1c:a0:b5:04:91:ea:f1:e6:20:fe:95:67:
c4:a3:85:29:18:fa:e1:e2:a6:74:62:6b:c3:40:e3:d9:7b:4b:
a9:41:fe:3f:fa:a2:53:54:25:78:ed:5e:8d:21:21:18:70:06:
e3:27:38:4b:29:49:14:60:14:01:2d:12:5b:1a:2c:70:d2:b6:
dc:2c:f6:d9:7b:a7:4b:ed:ce:30:66:e1:cb:56:27:1c:0d:21:
99:13:9e:5e:53:cb:37:22:06:4a:e9:d1:24:07:04:bd:92:26:
af:48:5b:68:73:51:07:ef:61:d5:29:e8:a4:5c:14:57:95:78:
cb:f9:d1:45:34:a7:1a:eb:11:cf:c8:5d:3d:ad:14:bc:65:2f:
e5:f4:f8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:01:56 2026 by rpki-client