Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/oJmef9b8v8rHbiNMF1pxno8CTYo.roa
File: oJmef9b8v8rHbiNMF1pxno8CTYo.roa (raw, json)
Hash identifier: HTfqms9GvF5yOhK5etv2GzZZDqB6+26sSjWf6PzOzEM=
Subject key identifier: A0:99:9E:7F:D6:FC:BF:CA:C7:6E:23:4C:17:5A:71:9E:8F:02:4D:8A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E1806C68A3D8094CF32D73E3E4AF009AA
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/oJmef9b8v8rHbiNMF1pxno8CTYo.roa
Signing time: Mon 11 May 2026 17:12:37 +0000
ROA not before: Mon 11 May 2026 17:12:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 2.26.151.0/24 maxlen: 24
2.26.177.0/24 maxlen: 24
2.26.178.0/24 maxlen: 24
2.26.179.0/24 maxlen: 24
2.26.180.0/24 maxlen: 24
2.26.181.0/24 maxlen: 24
2.26.184.0/24 maxlen: 24
2.26.187.0/24 maxlen: 24
2.26.191.0/24 maxlen: 24
2.27.108.0/24 maxlen: 24
2.27.142.0/23 maxlen: 24
2.27.146.0/23 maxlen: 24
2.27.249.0/24 maxlen: 24
31.77.176.0/23 maxlen: 24
31.77.220.0/24 maxlen: 24
31.77.221.0/24 maxlen: 24
31.77.227.0/24 maxlen: 24
31.77.228.0/24 maxlen: 24
144.31.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:18:06:c6:8a:3d:80:94:cf:32:d7:3e:3e:4a:f0:09:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 11 17:12:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0999e7fd6fcbfcac76e234c175a719e8f024d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fd:e5:06:72:f2:de:d5:7a:6b:e7:d7:51:fb:
11:c5:a4:8c:29:91:29:61:b8:8d:a4:34:59:e6:72:
d7:78:9f:08:9b:6f:72:b4:fc:f0:5b:57:fc:b5:78:
44:e7:49:b3:b1:79:fe:1b:ed:6d:d5:8f:ee:a3:3d:
bb:7e:f4:0f:68:b0:07:cb:c9:4b:93:2f:95:23:ae:
7f:24:65:c8:ba:6d:bc:bf:31:7e:98:92:ca:7c:82:
fa:3c:26:c6:2e:84:f9:f3:10:48:03:89:31:ff:72:
ac:81:16:a0:c2:ca:a4:49:b5:a5:d2:1e:73:28:59:
3e:d6:62:50:c3:a0:d0:03:9b:44:b4:e1:e4:18:2f:
0d:a8:5a:9c:4e:1c:7a:68:0a:f3:a7:5e:b9:fb:23:
80:f8:f7:72:5a:62:28:82:d6:9e:ee:0a:dc:01:ed:
c4:31:48:d9:fd:8c:91:41:22:01:c8:59:22:5b:ee:
f6:fe:03:ef:06:53:27:72:73:8c:ed:4c:ea:b1:2c:
54:c2:9f:48:e1:38:6e:c8:db:07:91:f8:d1:4e:84:
f4:54:aa:ff:d8:b6:23:ce:3b:c2:43:76:f1:af:53:
de:43:b5:cb:b2:bc:fd:b6:f0:bb:47:e5:5f:21:3f:
b8:fe:a1:ec:28:22:21:b7:73:75:42:61:8c:b6:92:
25:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:99:9E:7F:D6:FC:BF:CA:C7:6E:23:4C:17:5A:71:9E:8F:02:4D:8A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/oJmef9b8v8rHbiNMF1pxno8CTYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.151.0/24
2.26.177.0-2.26.181.255
2.26.184.0/24
2.26.187.0/24
2.26.191.0/24
2.27.108.0/24
2.27.142.0/23
2.27.146.0/23
2.27.249.0/24
31.77.176.0/23
31.77.220.0/23
31.77.227.0-31.77.228.255
144.31.43.0/24
Signature Algorithm: sha256WithRSAEncryption
20:0b:0c:d1:fa:42:b2:4e:87:4c:7e:df:59:70:6f:5c:9b:20:
6c:c3:1f:72:7d:2e:78:45:ad:26:66:29:19:fc:19:62:db:71:
58:43:aa:4d:57:a3:b1:00:e5:96:d3:86:87:1f:9b:48:03:f0:
15:6a:31:09:6c:68:f6:7a:9f:c5:60:49:77:a8:02:62:f6:6e:
ed:f8:38:b2:cf:fd:a4:bc:9d:6d:db:35:1a:93:e1:2d:79:71:
24:a5:f0:a5:ba:0e:b9:cc:11:87:c4:28:2c:c7:70:6a:ed:40:
8d:1e:9b:e9:73:fb:2d:3e:a3:00:49:9d:d2:34:75:b3:1e:cd:
31:e6:e3:b8:dd:fc:dd:f1:31:d8:32:0e:ad:bb:ca:87:5d:db:
c1:61:57:0b:88:04:c7:0a:ab:ed:95:14:42:c4:26:8c:06:2d:
98:59:f9:50:01:a3:22:e8:f6:d2:f1:14:f2:f1:f9:1b:9b:fc:
4c:4a:b0:eb:19:90:be:48:f3:4a:9e:14:f3:8e:12:11:3e:0f:
73:0c:5b:ee:8e:63:77:df:3e:51:a7:e2:25:9f:12:e2:11:71:
5b:97:90:e3:29:ac:80:c0:3f:d0:3a:4d:a0:77:37:09:b8:02:
1b:9c:a6:3b:e9:eb:d4:e9:9e:e4:84:ae:9f:b6:b5:88:37:46:
a8:cc:10:6c
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgISAZ4YBsaKPYCUzzLXPj5K8AmqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNTExMTcxMjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDk5OWU3ZmQ2ZmNiZmNhYzc2ZTIzNGMxNzVhNzE5ZThmMDI0ZDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1v3lBnLy3tV6a+fXUfsRxaSMKZEp
YbiNpDRZ5nLXeJ8Im29ytPzwW1f8tXhE50mzsXn+G+1t1Y/uoz27fvQPaLAHy8lL
ky+VI65/JGXIum28vzF+mJLKfIL6PCbGLoT58xBIA4kx/3KsgRagwsqkSbWl0h5z
KFk+1mJQw6DQA5tEtOHkGC8NqFqcThx6aArzp165+yOA+PdyWmIogtae7grcAe3E
MUjZ/YyRQSIByFkiW+72/gPvBlMncnOM7UzqsSxUwp9I4ThuyNsHkfjRToT0VKr/
2LYjzjvCQ3bxr1PeQ7XLsrz9tvC7R+VfIT+4/qHsKCIht3N1QmGMtpIlwwIDAQAB
o4ICYTCCAl0wHQYDVR0OBBYEFKCZnn/W/L/Kx24jTBdacZ6PAk2KMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvb0ptZWY5Yjh2OHJIYmlOTUYxcHhubzhDVFlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjBkBAIAATBeAwQAAhqXMAwD
BAACGrEDBAECGrQDBAACGrgDBAACGrsDBAACGr8DBAACG2wDBAECG44DBAECG5ID
BAACG/kDBAEfTbADBAEfTdwwDAMEAB9N4wMEAB9N5AMEAJAfKzANBgkqhkiG9w0B
AQsFAAOCAQEAIAsM0fpCsk6HTH7fWXBvXJsgbMMfcn0ueEWtJmYpGfwZYttxWEOq
TVejsQDlltOGhx+bSAPwFWoxCWxo9nqfxWBJd6gCYvZu7fg4ss/9pLydbds1GpPh
LXlxJKXwpboOucwRh8QoLMdwau1AjR6b6XP7LT6jAEmd0jR1sx7NMebjuN383fEx
2DIOrbvKh13bwWFXC4gExwqr7ZUUQsQmjAYtmFn5UAGjIuj20vEU8vH5G5v8TEqw
6xmQvkjzSp4U844SET4Pcwxb7o5jd98+UafiJZ8S4hFxW5eQ4ymsgMA/0DpNoHc3
CbgCG5ymO+nr1Ome5ISun7a1iDdGqMwQbA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:24:53 2026 by rpki-client