Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jjw1DCvBB1gQ1VPn3diC7q3yGvg.roa
File: jjw1DCvBB1gQ1VPn3diC7q3yGvg.roa (raw, json)
Hash identifier: 2ADg6qCX5FJJujvlWj/vatD5oRo5UaNrDII9SSlIfW4=
Subject key identifier: 8E:3C:35:0C:2B:C1:07:58:10:D5:53:E7:DD:D8:82:EE:AD:F2:1A:F8
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F8FFA547D659C76498FC2702A3DAED8B4
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jjw1DCvBB1gQ1VPn3diC7q3yGvg.roa
Signing time: Thu 23 Jul 2026 17:16:15 +0000
ROA not before: Thu 23 Jul 2026 17:16:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207513
IP address blocks: 2.27.57.0/24 maxlen: 24
13.143.139.0/24 maxlen: 24
13.143.143.0/24 maxlen: 24
144.31.13.0/24 maxlen: 24
144.31.29.0/24 maxlen: 24
144.31.91.0/24 maxlen: 24
144.31.92.0/24 maxlen: 24
144.31.100.0/24 maxlen: 24
144.31.101.0/24 maxlen: 24
144.31.102.0/24 maxlen: 24
144.31.111.0/24 maxlen: 24
144.31.112.0/24 maxlen: 24
144.31.113.0/24 maxlen: 24
144.31.144.0/24 maxlen: 24
144.31.248.0/24 maxlen: 24
150.241.80.0/24 maxlen: 24
177.1.202.0/24 maxlen: 24
177.1.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:fa:54:7d:65:9c:76:49:8f:c2:70:2a:3d:ae:d8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 23 17:16:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e3c350c2bc1075810d553e7ddd882eeadf21af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:82:8e:e6:ef:85:e2:89:8c:7b:e7:61:78:6c:
17:d5:e3:1c:bc:10:96:47:6a:50:37:e8:b6:f4:0f:
e5:9e:2d:ff:38:05:56:d3:2c:92:fe:b4:44:f6:de:
88:49:74:9d:6c:e1:bc:dd:9b:c6:30:a8:4b:ef:fe:
72:a3:9c:fc:05:21:f2:78:22:5c:86:91:7e:de:f5:
8f:6b:13:88:c2:f6:b2:1f:b1:68:e9:c6:0b:76:1c:
43:ed:d3:2e:75:8c:0f:e6:50:99:57:7f:f1:78:9f:
b5:b1:a3:48:30:4c:3c:72:1b:b2:8c:bb:82:31:ec:
51:95:fa:48:72:f0:48:a1:d8:7b:31:9f:a6:0e:a8:
0f:74:1c:a5:11:7c:b9:da:c5:12:72:f6:28:22:88:
16:d2:57:16:99:a6:e1:69:07:5e:e4:5f:7d:cd:9a:
65:cd:15:a1:ff:0a:31:4d:34:6e:87:7b:9a:53:62:
85:c7:98:c2:4d:33:84:84:51:7b:a8:a4:8f:df:fe:
8f:09:66:be:f4:7e:7d:5e:a7:2e:f9:98:6d:52:b8:
54:6d:ea:17:92:73:5a:85:f4:fa:0f:cc:35:53:5a:
42:08:79:f0:7b:83:70:13:99:4f:f3:c7:2e:86:75:
5a:96:90:0a:9c:ea:11:fd:d6:0f:6d:27:e2:19:32:
7c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3C:35:0C:2B:C1:07:58:10:D5:53:E7:DD:D8:82:EE:AD:F2:1A:F8
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jjw1DCvBB1gQ1VPn3diC7q3yGvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.57.0/24
13.143.139.0/24
13.143.143.0/24
144.31.13.0/24
144.31.29.0/24
144.31.91.0-144.31.92.255
144.31.100.0-144.31.102.255
144.31.111.0-144.31.113.255
144.31.144.0/24
144.31.248.0/24
150.241.80.0/24
177.1.202.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:f8:d3:42:1c:a5:b9:e4:13:9d:26:0c:57:02:ea:f2:3f:da:
29:2b:bb:85:52:a2:2b:24:9b:e7:8c:66:26:1d:76:8b:1d:a6:
79:1c:d0:a9:f2:12:83:5d:57:31:c7:25:aa:f4:8a:3e:d8:48:
4f:34:56:92:61:e5:1f:40:5a:d1:20:80:f1:c3:ca:14:27:85:
a2:2c:8e:ba:9b:ad:1a:aa:3c:78:56:93:ce:e6:5a:22:e7:ba:
b8:89:c9:53:89:5b:03:c5:52:0d:6a:98:22:d6:e3:51:67:3f:
93:92:74:c8:7e:f2:f7:3e:07:82:71:45:e7:75:a2:96:cb:b3:
1f:13:1b:80:00:ad:97:2c:2b:c1:ee:b5:7f:30:67:e4:1b:2c:
d0:1c:ae:2b:fc:38:55:4f:d8:b0:57:fe:b2:f8:02:90:20:ef:
f3:7b:46:49:ef:cf:c7:49:d2:c8:db:eb:31:4d:c9:38:24:c4:
af:a1:95:36:d9:15:d4:05:52:8d:9d:fa:e1:da:31:98:45:55:
5d:59:f6:ae:f2:3d:6f:20:d7:0a:7a:0b:82:15:5e:50:72:2e:
44:43:8a:74:68:e4:d3:da:56:d7:e0:33:5e:91:08:3b:05:08:
23:05:69:ba:c2:ef:cc:ab:b7:fe:ed:65:d6:e2:75:41:cc:21:
64:38:35:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:09:39 2026 by rpki-client