Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/oIp51bO-gFv7N1BDpB9Xc52NQRY.roa
File: oIp51bO-gFv7N1BDpB9Xc52NQRY.roa (raw, json)
Hash identifier: XKSe9leyuCVGRG1u4xtMofkC/nlU4RSGga2jmCgJ6AA=
Subject key identifier: A0:8A:79:D5:B3:BE:80:5B:FB:37:50:43:A4:1F:57:73:9D:8D:41:16
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D1B391D4BEC866654E54F204D17290B8F
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/oIp51bO-gFv7N1BDpB9Xc52NQRY.roa
Signing time: Mon 23 Mar 2026 15:03:40 +0000
ROA not before: Mon 23 Mar 2026 15:03:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213520
IP address blocks: 2.27.28.0/22 maxlen: 24
64.188.68.0/22 maxlen: 24
64.188.74.0/24 maxlen: 24
64.188.104.0/22 maxlen: 24
77.239.120.0/23 maxlen: 24
144.31.16.0/23 maxlen: 24
144.31.18.0/23 maxlen: 24
144.31.62.0/23 maxlen: 24
144.31.84.0/23 maxlen: 24
144.31.116.0/23 maxlen: 24
144.31.118.0/23 maxlen: 24
144.31.122.0/23 maxlen: 24
144.31.134.0/23 maxlen: 24
144.31.138.0/23 maxlen: 24
144.31.196.0/23 maxlen: 24
144.31.232.0/24 maxlen: 24
144.31.233.0/24 maxlen: 24
150.241.64.0/24 maxlen: 24
150.241.78.0/23 maxlen: 24
193.23.197.0/24 maxlen: 24
193.23.210.0/23 maxlen: 24
193.23.218.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1b:39:1d:4b:ec:86:66:54:e5:4f:20:4d:17:29:0b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 23 15:03:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a08a79d5b3be805bfb375043a41f57739d8d4116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a3:eb:13:65:e6:e3:e7:29:ad:87:25:08:5e:
61:a0:6a:3a:27:bc:c2:8e:f1:98:59:8a:05:a7:e6:
d3:0e:4a:27:35:8c:1e:78:a3:96:47:ce:65:a7:04:
3e:a4:ff:1d:ce:ec:da:aa:b2:c1:04:00:1e:d3:13:
94:ea:d6:a7:85:06:7a:79:5e:78:48:d7:38:82:06:
e7:06:71:a9:cd:75:28:cb:d7:5d:a2:e7:b4:94:7b:
5e:cd:ed:1d:8c:96:7a:f0:ec:87:43:e3:99:52:ca:
21:cc:c9:25:89:85:b5:e6:1c:2d:5e:ce:ae:91:a9:
b8:e8:5c:48:3f:75:53:25:61:ad:33:0b:7b:b2:2f:
b0:7d:f9:80:50:72:b2:b4:ef:73:89:65:80:3b:26:
b5:0c:b3:b2:a9:0f:51:d2:a3:95:d2:90:79:df:3b:
0a:0a:0f:00:8c:26:35:d1:0b:3d:ef:8b:0b:23:cd:
00:61:70:e3:0e:be:3f:91:e7:2e:2d:41:13:75:b5:
6a:d4:c1:a4:a6:78:a1:85:0d:04:eb:ca:cd:bf:6a:
86:c8:b4:de:42:29:6c:8e:b5:27:e6:8f:00:5c:6b:
57:5d:77:8d:5d:d2:6f:be:ae:c2:c3:eb:2f:fd:d8:
37:80:57:0c:2b:bd:48:36:84:ae:d5:2d:f3:43:08:
53:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8A:79:D5:B3:BE:80:5B:FB:37:50:43:A4:1F:57:73:9D:8D:41:16
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/oIp51bO-gFv7N1BDpB9Xc52NQRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.28.0/22
64.188.68.0/22
64.188.74.0/24
64.188.104.0/22
77.239.120.0/23
144.31.16.0/22
144.31.62.0/23
144.31.84.0/23
144.31.116.0/22
144.31.122.0/23
144.31.134.0/23
144.31.138.0/23
144.31.196.0/23
144.31.232.0/23
150.241.64.0/24
150.241.78.0/23
193.23.197.0/24
193.23.210.0/23
193.23.218.0/23
Signature Algorithm: sha256WithRSAEncryption
54:fe:7f:23:00:b9:6c:c8:37:aa:83:88:63:28:37:80:e6:f8:
7f:be:10:74:92:de:71:ec:ab:4d:62:43:7f:0b:ca:91:da:e4:
c7:d9:4d:7f:6d:af:53:cc:53:92:8d:ea:93:05:bc:2b:f2:92:
5f:2d:db:fd:78:3a:bb:45:29:e2:1f:1d:71:c9:b8:3c:74:55:
b3:db:05:91:86:7d:fa:fa:df:b4:76:41:dd:b3:f8:ba:47:9b:
ed:5f:dc:ae:f9:02:88:4a:ef:51:45:02:1d:9e:d1:a7:af:03:
3f:93:1d:4e:df:e3:82:f7:da:04:2f:98:56:33:24:41:e9:09:
15:cf:ba:6c:c8:df:66:59:3b:0d:d8:b9:9c:3a:41:ee:8b:82:
5d:c7:ac:a7:c7:f8:55:e1:5a:50:d5:ee:c5:a7:10:03:a6:7b:
ce:5d:3d:d1:37:14:7e:75:7f:40:70:6d:ee:db:eb:cc:97:81:
05:d5:27:0f:44:c0:96:3a:de:22:26:5e:7e:a8:48:7d:39:c0:
77:47:f5:85:7d:7f:bc:d2:80:51:0e:17:4c:27:f6:14:d8:20:
f6:c7:1e:53:fc:8b:96:85:d7:fd:81:61:ca:68:bb:43:68:0e:
d2:4f:9a:2e:83:4d:93:7f:2e:49:55:01:ca:63:23:6a:f8:d2:
29:a3:ec:7d
-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgISAZ0bOR1L7IZmVOVPIE0XKQuPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwMzIzMTUwMzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDhhNzlkNWIzYmU4MDViZmIzNzUwNDNhNDFmNTc3MzlkOGQ0MTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKPrE2Xm4+cprYclCF5hoGo6J7zC
jvGYWYoFp+bTDkonNYweeKOWR85lpwQ+pP8dzuzaqrLBBAAe0xOU6tanhQZ6eV54
SNc4ggbnBnGpzXUoy9ddoue0lHteze0djJZ68OyHQ+OZUsohzMkliYW15hwtXs6u
kam46FxIP3VTJWGtMwt7si+wffmAUHKytO9ziWWAOya1DLOyqQ9R0qOV0pB53zsK
Cg8AjCY10Qs974sLI80AYXDjDr4/kecuLUETdbVq1MGkpnihhQ0E68rNv2qGyLTe
QilsjrUn5o8AXGtXXXeNXdJvvq7Cw+sv/dg3gFcMK71INoSu1S3zQwhT1wIDAQAB
o4ICdjCCAnIwHQYDVR0OBBYEFKCKedWzvoBb+zdQQ6QfV3OdjUEWMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvb0lwNTFiTy1nRnY3TjFCRHBCOVhjNTJOUVJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMEAgIbHAME
AkC8RAMEAEC8SgMEAkC8aAMEAU3veAMEApAfEAMEAZAfPgMEAZAfVAMEApAfdAME
AZAfegMEAZAfhgMEAZAfigMEAZAfxAMEAZAf6AMEAJbxQAMEAZbxTgMEAMEXxQME
AcEX0gMEAcEX2jANBgkqhkiG9w0BAQsFAAOCAQEAVP5/IwC5bMg3qoOIYyg3gOb4
f74QdJLeceyrTWJDfwvKkdrkx9lNf22vU8xTko3qkwW8K/KSXy3b/Xg6u0Up4h8d
ccm4PHRVs9sFkYZ9+vrftHZB3bP4ukeb7V/crvkCiErvUUUCHZ7Rp68DP5MdTt/j
gvfaBC+YVjMkQekJFc+6bMjfZlk7Ddi5nDpB7ouCXcesp8f4VeFaUNXuxacQA6Z7
zl090TcUfnV/QHBt7tvrzJeBBdUnD0TAljreIiZefqhIfTnAd0f1hX1/vNKAUQ4X
TCf2FNgg9sceU/yLloXX/YFhymi7Q2gO0k+aLoNNk38uSVUBymMjavjSKaPsfQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:40:41 2026 by rpki-client