Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/oNLDd2t9DW1SNXlGXRKbLdDezx4.roa
File: oNLDd2t9DW1SNXlGXRKbLdDezx4.roa (raw, json)
Hash identifier: eZsxAMlTZLpNZ58C9FVGmAiogO32Cobsg9Z8Uia6pUo=
Subject key identifier: A0:D2:C3:77:6B:7D:0D:6D:52:35:79:46:5D:12:9B:2D:D0:DE:CF:1E
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F1FF92D3E2D14E62766E527482DDA8057
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/oNLDd2t9DW1SNXlGXRKbLdDezx4.roa
Signing time: Wed 01 Jul 2026 23:17:31 +0000
ROA not before: Wed 01 Jul 2026 23:17:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201988
IP address blocks: 2.26.122.0/24 maxlen: 24
2.26.123.0/24 maxlen: 24
2.26.224.0/24 maxlen: 24
2.26.225.0/24 maxlen: 24
2.26.226.0/24 maxlen: 24
2.26.227.0/24 maxlen: 24
13.143.132.0/24 maxlen: 24
13.143.133.0/24 maxlen: 24
31.76.30.0/24 maxlen: 24
31.76.94.0/24 maxlen: 24
31.76.100.0/23 maxlen: 24
31.76.102.0/23 maxlen: 24
31.76.244.0/24 maxlen: 24
31.76.245.0/24 maxlen: 24
31.76.251.0/24 maxlen: 24
31.76.252.0/24 maxlen: 24
144.31.53.0/24 maxlen: 24
144.31.148.0/24 maxlen: 24
144.31.169.0/24 maxlen: 24
144.31.223.0/24 maxlen: 24
144.31.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1f:f9:2d:3e:2d:14:e6:27:66:e5:27:48:2d:da:80:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 1 23:17:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0d2c3776b7d0d6d523579465d129b2dd0decf1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:da:16:fc:58:3a:2b:03:eb:06:3c:80:6d:cf:
08:0c:ea:91:f0:b6:5d:de:5e:56:b2:d5:c8:5e:4e:
67:68:5c:9e:03:ea:59:94:10:a9:7c:00:d7:8a:07:
5d:8f:f2:12:56:ae:d8:4e:63:6c:74:cf:88:5d:e5:
ee:89:0c:1c:8d:e7:61:ed:21:1d:7c:62:58:d2:fa:
72:e7:24:fe:ae:6f:b9:64:3e:4d:33:35:fa:b4:2a:
7c:ba:fb:07:e4:23:f8:48:2a:24:06:57:9e:4e:a7:
f7:8d:d4:e0:64:7f:2e:bf:cd:be:ea:6c:2b:f7:0c:
4d:37:82:4a:c2:51:d9:86:7d:5d:06:1b:59:9c:30:
e3:bd:a7:8a:1a:2f:6c:f4:1f:6f:49:f8:57:b2:bf:
22:9d:ec:eb:26:ce:10:72:39:16:9d:24:55:1f:9c:
87:5a:c3:ae:2d:84:30:b0:79:2d:ed:94:f1:1d:c9:
04:c9:c9:bd:c1:07:dc:c6:b3:09:08:57:ad:e5:53:
87:79:f5:80:27:cd:ce:5c:c0:44:d8:ce:4b:1d:bf:
04:a9:62:1c:ea:ed:6b:11:39:bf:32:8f:4f:1a:3c:
2e:17:3a:19:03:26:aa:61:dd:db:e2:06:0d:77:b3:
66:be:34:96:6d:af:82:09:6e:96:7e:70:34:4b:0b:
ef:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D2:C3:77:6B:7D:0D:6D:52:35:79:46:5D:12:9B:2D:D0:DE:CF:1E
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/oNLDd2t9DW1SNXlGXRKbLdDezx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.122.0/23
2.26.224.0/22
13.143.132.0/23
31.76.30.0/24
31.76.94.0/24
31.76.100.0/22
31.76.244.0/23
31.76.251.0-31.76.252.255
144.31.53.0/24
144.31.148.0/24
144.31.169.0/24
144.31.223.0/24
144.31.238.0/24
Signature Algorithm: sha256WithRSAEncryption
12:19:30:21:39:aa:a4:df:05:ea:10:a1:9b:d5:48:89:f8:80:
91:96:08:f0:0c:f4:72:be:b8:d3:2e:46:8b:ff:6a:a6:4b:9e:
ea:a3:e7:3a:2b:27:c7:b3:c4:92:34:c8:9d:d3:45:cf:1e:66:
d6:fb:6d:45:28:63:1b:c5:7e:a4:2d:a9:81:a8:3e:68:a8:42:
92:ed:ed:05:e1:c9:23:1e:4f:8e:b0:4d:90:37:d0:b6:50:bd:
c2:00:eb:af:4b:67:5a:64:e8:a3:d4:00:93:c5:93:5c:f0:5c:
44:04:06:2d:fd:c2:da:31:c0:08:94:64:da:80:df:ce:dc:9b:
e2:28:fb:e4:1c:98:bf:2d:0e:11:37:40:77:8a:76:39:78:6a:
c9:57:16:b8:ca:8d:ca:76:0b:e2:5b:38:b5:94:72:64:0d:bc:
2d:9d:c6:fa:e4:44:ef:82:ed:9e:d4:6b:d4:6d:91:80:b1:ba:
6d:80:78:e0:04:19:6c:c8:22:5f:ad:c8:31:86:21:c7:cb:1f:
29:2d:a1:62:a0:c1:72:59:bb:92:22:4d:42:d2:92:b8:d8:9a:
31:b4:f4:28:3c:13:f8:cb:0d:5e:c7:9f:66:2c:2d:91:3e:03:
87:0a:cc:76:e7:4f:a6:37:7a:7b:bf:26:41:e8:2f:48:8b:46:
53:28:5a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:48:21 2026 by rpki-client