Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/m9w1mZfA9bg5MFfCXPtbqrK9Wow.roa
File: m9w1mZfA9bg5MFfCXPtbqrK9Wow.roa (raw, json)
Hash identifier: EaT3z7wQaHHQAP5ZmkrkFG5yiVwpndz83c7I6DC2fvo=
Subject key identifier: 9B:DC:35:99:97:C0:F5:B8:39:30:57:C2:5C:FB:5B:AA:B2:BD:5A:8C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F90063C97D22091AE783A09C3F2316483
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/m9w1mZfA9bg5MFfCXPtbqrK9Wow.roa
Signing time: Thu 23 Jul 2026 17:29:15 +0000
ROA not before: Thu 23 Jul 2026 17:29:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 2.26.165.0/24 maxlen: 24
2.26.167.0/24 maxlen: 24
2.26.170.0/24 maxlen: 24
2.26.175.0/24 maxlen: 24
2.26.191.0/24 maxlen: 24
2.26.208.0/21 maxlen: 24
2.27.82.0/24 maxlen: 24
2.27.117.0/24 maxlen: 24
2.27.119.0/24 maxlen: 24
2.27.140.0/23 maxlen: 24
2.27.142.0/23 maxlen: 24
2.27.151.0/24 maxlen: 24
2.27.162.0/24 maxlen: 24
2.27.163.0/24 maxlen: 24
2.27.172.0/24 maxlen: 24
2.27.196.0/22 maxlen: 24
2.27.241.0/24 maxlen: 24
2.27.243.0/24 maxlen: 24
2.27.251.0/24 maxlen: 24
2.27.255.0/24 maxlen: 24
31.77.97.0/24 maxlen: 24
31.77.113.0/24 maxlen: 24
31.77.178.0/23 maxlen: 24
31.77.209.0/24 maxlen: 24
31.77.211.0/24 maxlen: 24
31.77.219.0/24 maxlen: 24
31.77.220.0/24 maxlen: 24
31.77.225.0/24 maxlen: 24
31.77.239.0/24 maxlen: 24
31.77.242.0/24 maxlen: 24
31.77.249.0/24 maxlen: 24
31.77.251.0/24 maxlen: 24
144.31.39.0/24 maxlen: 24
144.31.41.0/24 maxlen: 24
144.31.145.0/24 maxlen: 24
144.31.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:06:3c:97:d2:20:91:ae:78:3a:09:c3:f2:31:64:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 23 17:29:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9bdc359997c0f5b8393057c25cfb5baab2bd5a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a6:a9:7a:4d:03:d0:01:26:94:cb:73:79:55:
72:ec:d1:05:34:5e:00:fe:a3:c1:62:2b:fc:8c:eb:
55:2e:64:99:ae:5b:b7:f9:9e:25:94:e7:23:b5:6b:
67:17:66:c0:41:be:95:de:df:b1:de:d3:d9:37:39:
f2:87:68:17:b0:30:58:ab:1b:d4:00:fa:a6:64:7f:
5e:f8:2d:c9:42:c6:92:c7:d5:1e:95:e2:1b:b0:95:
7d:8c:94:32:01:be:b7:16:b2:16:7b:a3:73:73:35:
e8:a1:ee:68:ac:64:b0:f2:9d:40:55:50:9f:6e:d1:
da:83:43:e0:dd:58:48:87:51:d1:f1:3d:9d:f3:07:
c5:67:92:e8:0d:3e:72:7c:eb:6b:15:65:62:d8:c4:
ef:00:ba:26:7f:a5:2a:4b:f7:85:55:cb:12:94:17:
ea:b9:53:25:02:2c:0c:96:ac:a2:a8:54:7f:1c:37:
37:0c:c8:7d:2d:a0:3c:8c:82:7d:13:3f:42:fd:74:
53:a9:ff:1e:c7:25:9f:a3:31:d2:0f:96:fb:56:94:
41:49:ae:d3:38:41:eb:d4:eb:19:42:69:69:22:38:
62:8c:54:21:bd:c9:b4:89:0a:6d:e6:13:e9:08:ed:
73:40:96:0f:38:52:40:9d:b3:33:29:92:98:c3:b4:
6a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DC:35:99:97:C0:F5:B8:39:30:57:C2:5C:FB:5B:AA:B2:BD:5A:8C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/m9w1mZfA9bg5MFfCXPtbqrK9Wow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.165.0/24
2.26.167.0/24
2.26.170.0/24
2.26.175.0/24
2.26.191.0/24
2.26.208.0/21
2.27.82.0/24
2.27.117.0/24
2.27.119.0/24
2.27.140.0/22
2.27.151.0/24
2.27.162.0/23
2.27.172.0/24
2.27.196.0/22
2.27.241.0/24
2.27.243.0/24
2.27.251.0/24
2.27.255.0/24
31.77.97.0/24
31.77.113.0/24
31.77.178.0/23
31.77.209.0/24
31.77.211.0/24
31.77.219.0-31.77.220.255
31.77.225.0/24
31.77.239.0/24
31.77.242.0/24
31.77.249.0/24
31.77.251.0/24
144.31.39.0/24
144.31.41.0/24
144.31.145.0/24
144.31.150.0/24
Signature Algorithm: sha256WithRSAEncryption
92:2b:f0:1e:94:26:3c:ac:06:24:0f:3f:02:c1:45:4b:b2:65:
72:2c:24:6c:65:47:42:e2:33:dd:ad:a2:81:35:22:b2:8b:2a:
96:ea:6f:59:21:70:3d:81:17:6d:88:31:68:2d:ea:5e:42:0f:
98:62:3d:ef:60:9e:de:2a:9e:4c:3b:ba:4f:eb:59:9e:0a:4e:
76:41:05:8c:f5:ed:bb:d1:65:25:41:26:96:35:fc:4c:60:2e:
68:58:f6:50:77:fb:b0:3d:91:49:45:96:59:8e:c4:f9:a1:ce:
56:ca:14:e6:eb:df:51:75:94:6c:f1:82:5b:83:6c:43:75:a8:
47:07:3e:b0:99:a0:40:60:cb:94:ea:e0:f4:40:ad:ae:f9:63:
21:00:e0:8d:da:47:e5:a4:b0:0e:0c:f9:df:7c:91:b4:fb:68:
a9:89:9a:a5:05:95:7f:a9:a8:29:e1:40:86:5f:58:03:5d:6a:
b6:c2:fa:40:f9:b9:00:2b:35:55:f9:ed:df:72:bd:24:b5:18:
14:18:3e:51:3d:78:cb:e7:84:f9:91:a7:ee:8b:78:a8:2e:ac:
62:71:33:9f:15:34:ec:2f:c1:7c:76:ba:ea:8d:b2:aa:3c:77:
37:a9:af:01:0e:5e:f0:9a:7e:60:46:cc:15:5d:55:54:67:72:
0b:b2:0e:53
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:34 2026 by rpki-client