Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xwTz9j4mEIOeKTbP2bda-gb-InA.roa
File: xwTz9j4mEIOeKTbP2bda-gb-InA.roa (raw, json)
Hash identifier: cQicOCaaYGLsXZQRj1bUDKbgYWxL6dw+ylGV63Jlf+0=
Subject key identifier: C7:04:F3:F6:3E:26:10:83:9E:29:36:CF:D9:B7:5A:FA:06:FE:22:70
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0CF8E9BC8E7C4218818AE35FA91B65783
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xwTz9j4mEIOeKTbP2bda-gb-InA.roa
Signing time: Wed 23 Sep 2026 18:37:04 +0000
ROA not before: Wed 23 Sep 2026 18:37:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215730
IP address blocks: 2.26.191.0/24 maxlen: 24
2.26.222.0/24 maxlen: 24
2.27.26.0/23 maxlen: 24
13.143.168.0/24 maxlen: 24
31.76.117.0/24 maxlen: 24
31.76.125.0/24 maxlen: 24
31.76.127.0/24 maxlen: 24
31.77.97.0/24 maxlen: 24
31.77.106.0/24 maxlen: 24
31.77.113.0/24 maxlen: 24
31.77.237.0/24 maxlen: 24
64.188.91.0/24 maxlen: 24
144.31.0.0/21 maxlen: 24
144.31.11.0/24 maxlen: 24
144.31.90.0/24 maxlen: 24
144.31.94.0/24 maxlen: 24
144.31.125.0/24 maxlen: 24
144.31.128.0/23 maxlen: 24
144.31.130.0/23 maxlen: 24
150.241.95.0/24 maxlen: 24
177.1.195.0/24 maxlen: 24
193.23.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:8e:9b:c8:e7:c4:21:88:18:ae:35:fa:91:b6:57:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 23 18:37:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c704f3f63e2610839e2936cfd9b75afa06fe2270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:43:5d:9c:ef:8a:ed:b4:fb:cb:de:92:41:5e:
a5:84:c9:5b:8f:da:90:c9:0c:bf:dd:87:c3:94:09:
d4:49:f4:9f:b4:a5:c3:f6:6c:f5:84:ff:4c:e4:d0:
dd:ac:45:35:ab:18:63:89:2b:a6:7a:de:8e:db:1a:
0c:21:d2:46:90:54:b7:d2:ef:c5:fe:a1:ef:f9:10:
12:db:f9:c5:55:f5:2e:6c:2f:be:41:92:8d:51:c2:
c0:b0:66:d2:97:44:f0:2d:9b:c2:aa:02:a1:b3:3e:
df:39:a5:c8:cb:8d:6c:af:0d:74:b8:7d:03:91:9a:
12:ee:32:47:13:bf:df:3b:39:11:3b:c9:fc:f7:62:
dd:7b:26:5a:b7:81:df:05:35:8c:fe:aa:d8:9a:ec:
82:2d:78:74:97:51:70:7c:1e:f3:ea:63:e8:87:b4:
18:2a:95:85:0a:3d:fc:79:62:c4:66:52:d8:c4:97:
c5:3f:20:b1:d7:df:bb:49:f5:25:6a:5d:da:5b:c2:
82:13:95:a4:fb:2b:5f:eb:62:23:e7:ec:8e:b6:42:
50:f3:89:d4:81:e8:95:e0:87:c4:b8:a2:77:9e:6c:
ee:6c:7f:65:5e:f1:61:d1:dd:56:d5:b6:f0:ac:bc:
c2:5c:ac:1c:e6:d0:95:e8:53:c3:be:96:5a:c0:0c:
a0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:04:F3:F6:3E:26:10:83:9E:29:36:CF:D9:B7:5A:FA:06:FE:22:70
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xwTz9j4mEIOeKTbP2bda-gb-InA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.191.0/24
2.26.222.0/24
2.27.26.0/23
13.143.168.0/24
31.76.117.0/24
31.76.125.0/24
31.76.127.0/24
31.77.97.0/24
31.77.106.0/24
31.77.113.0/24
31.77.237.0/24
64.188.91.0/24
144.31.0.0/21
144.31.11.0/24
144.31.90.0/24
144.31.94.0/24
144.31.125.0/24
144.31.128.0/22
150.241.95.0/24
177.1.195.0/24
193.23.193.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:96:ee:56:31:6c:bc:c7:69:29:22:1f:fa:62:29:bc:6e:ae:
d5:5e:c9:fe:79:d5:ce:39:d0:e1:8f:f1:e3:bf:e9:d7:95:89:
8a:68:18:9c:3b:44:f7:1d:40:59:1a:5e:eb:d7:8d:f2:7a:33:
9a:00:46:e1:69:8e:3e:a4:e9:bc:7e:3f:92:0a:68:b8:e6:a1:
7f:40:d6:6c:3f:1c:12:9a:9d:e3:1d:8b:4b:08:91:a4:7d:72:
f7:f7:38:cf:13:68:49:9c:4b:d8:b4:6b:10:85:20:d1:f6:b3:
3f:b7:46:63:5d:7b:9e:41:fe:cf:7e:ae:1f:b8:78:87:09:70:
e0:44:38:1d:39:e5:f0:ec:95:0a:b6:f5:fd:73:7f:f2:da:b6:
1f:45:6d:78:b3:5c:fc:7f:44:44:34:18:37:43:1f:38:00:fe:
3d:82:1f:fa:93:26:da:26:14:7c:ae:e0:8f:b9:67:06:f6:74:
dc:85:9b:81:12:5b:4e:68:ef:2f:15:a9:a4:29:18:e6:6d:d8:
9b:50:92:36:d8:4a:61:00:fd:3b:e6:00:ba:6f:6d:d6:69:d2:
94:3a:af:a7:90:c8:b5:f1:b7:2b:19:92:d6:df:87:7b:0f:8b:
ef:f5:59:4f:58:72:57:74:ed:04:3f:be:63:f1:d5:b6:f2:0a:
54:5d:b4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:23:56 2026 by rpki-client