Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/z50T0TE5W04EAJFYuzoH_4Y7wuA.roa
File: z50T0TE5W04EAJFYuzoH_4Y7wuA.roa (raw, json)
Hash identifier: aHjmMep6w8VRKaKNwwHPIXoMfdeUA+oTxUvHvQo6lsk=
Subject key identifier: CF:9D:13:D1:31:39:5B:4E:04:00:91:58:BB:3A:07:FF:86:3B:C2:E0
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F8097BBA2C3B4374890C3F034D20375D0
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/z50T0TE5W04EAJFYuzoH_4Y7wuA.roa
Signing time: Mon 20 Jul 2026 17:34:15 +0000
ROA not before: Mon 20 Jul 2026 17:34:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 2.26.157.0/24 maxlen: 24
2.26.164.0/24 maxlen: 24
2.26.253.0/24 maxlen: 24
13.143.100.0/22 maxlen: 24
13.143.121.0/24 maxlen: 24
13.143.126.0/24 maxlen: 24
31.76.178.0/23 maxlen: 24
31.76.238.0/23 maxlen: 24
31.76.248.0/24 maxlen: 24
31.77.117.0/24 maxlen: 24
31.77.118.0/24 maxlen: 24
144.31.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:80:97:bb:a2:c3:b4:37:48:90:c3:f0:34:d2:03:75:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 20 17:34:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf9d13d131395b4e04009158bb3a07ff863bc2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fa:2a:e8:b5:d5:d6:b0:1f:89:3a:78:9f:90:
a0:20:03:37:f2:20:f2:9c:93:32:63:3c:60:71:86:
57:94:23:e2:85:80:80:36:f6:4f:3f:dd:ca:b8:54:
fb:ca:7f:59:d3:19:b0:d4:2b:c4:e2:2c:59:28:7c:
21:b2:5e:a0:8f:c4:e9:75:9c:32:0c:51:e0:52:b7:
90:42:d4:17:f5:d1:5f:d4:4f:21:10:6a:0c:18:3e:
7b:86:c2:c8:a0:42:e5:79:a1:c1:b1:a9:ef:4d:9d:
bf:99:ec:d4:3d:1c:f9:89:40:86:30:34:0e:57:f7:
8b:64:2e:6f:97:4d:f1:b7:47:22:be:7b:76:d7:21:
7e:e3:7e:d0:b3:d9:b6:5b:8c:a4:14:f0:6e:82:85:
2c:ff:43:13:14:ba:f4:c3:3c:a3:02:51:2e:df:8a:
eb:2f:20:fe:46:9e:2a:30:ac:8c:38:c5:c2:7d:39:
5d:9a:41:5e:32:d1:34:d2:87:01:0b:73:ef:2e:86:
d9:c8:8d:6a:42:b7:46:77:49:76:ed:b2:fc:3b:0e:
13:26:b6:07:23:4c:1d:b1:9a:b0:00:fe:76:b1:6c:
7c:3e:18:48:35:e8:a9:8a:f7:97:61:81:11:3d:9a:
05:3a:f6:e6:7c:04:0b:bd:f5:f5:e4:ee:cb:71:f6:
c6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9D:13:D1:31:39:5B:4E:04:00:91:58:BB:3A:07:FF:86:3B:C2:E0
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/z50T0TE5W04EAJFYuzoH_4Y7wuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.157.0/24
2.26.164.0/24
2.26.253.0/24
13.143.100.0/22
13.143.121.0/24
13.143.126.0/24
31.76.178.0/23
31.76.238.0/23
31.76.248.0/24
31.77.117.0-31.77.118.255
144.31.10.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:3a:93:52:13:fa:1e:6f:c0:56:eb:73:cc:05:f9:34:32:b7:
e8:bd:bf:e5:e7:a9:02:f5:d8:3e:37:5c:57:28:05:3b:53:a4:
a3:65:b7:ce:ba:a3:ab:df:fd:08:3c:39:0e:89:4b:9d:5e:d1:
80:ed:be:8a:91:2b:d7:6b:2c:57:f7:75:cf:52:2c:24:e8:b2:
11:67:19:d0:00:2e:73:ec:fd:11:7c:f1:3a:3d:3c:4a:d7:72:
3f:57:6f:bd:bf:23:09:23:9f:ec:7f:be:79:5c:b9:5e:d5:ec:
f5:92:b0:d5:cc:66:3b:d8:ac:e5:ef:ec:57:aa:ca:27:c6:ae:
2b:32:21:bb:a2:68:9c:54:62:ac:01:1d:1d:7a:31:fe:3c:74:
82:00:24:05:b2:ec:2e:d0:e4:99:71:6c:5e:4a:73:5b:84:3b:
e9:87:eb:c6:ca:30:6e:92:69:86:6a:2a:20:bf:8b:72:4f:be:
91:5b:ad:30:21:3c:58:91:a6:1a:7f:71:25:c6:8e:79:b9:ca:
7c:46:5c:66:54:d4:ae:25:ef:35:7a:7b:89:b7:24:d1:b7:12:
78:41:74:bd:25:b9:a2:a4:d6:ea:d6:34:9f:04:04:13:27:0e:
cc:6e:2f:d1:19:53:4f:6e:ac:9e:c6:5a:86:dc:1c:51:0f:00:
bb:4b:02:e0
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgISAZ+Al7uiw7Q3SJDD8DTSA3XQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNzIwMTczNDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjlkMTNkMTMxMzk1YjRlMDQwMDkxNThiYjNhMDdmZjg2M2JjMmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2voq6LXV1rAfiTp4n5CgIAM38iDy
nJMyYzxgcYZXlCPihYCANvZPP93KuFT7yn9Z0xmw1CvE4ixZKHwhsl6gj8TpdZwy
DFHgUreQQtQX9dFf1E8hEGoMGD57hsLIoELleaHBsanvTZ2/mezUPRz5iUCGMDQO
V/eLZC5vl03xt0civnt21yF+437Qs9m2W4ykFPBugoUs/0MTFLr0wzyjAlEu34rr
LyD+Rp4qMKyMOMXCfTldmkFeMtE00ocBC3PvLobZyI1qQrdGd0l27bL8Ow4TJrYH
I0wdsZqwAP52sWx8PhhINeipiveXYYERPZoFOvbmfAQLvfX15O7LcfbGXwIDAQAB
o4ICTTCCAkkwHQYDVR0OBBYEFM+dE9ExOVtOBACRWLs6B/+GO8LgMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvejUwVDBURTVXMDRFQUpGWXV6b0hfNFk3d3VBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQAAhqdAwQA
AhqkAwQAAhr9AwQCDY9kAwQADY95AwQADY9+AwQBH0yyAwQBH0zuAwQAH0z4MAwD
BAAfTXUDBAAfTXYDBACQHwowDQYJKoZIhvcNAQELBQADggEBAJ06k1IT+h5vwFbr
c8wF+TQyt+i9v+XnqQL12D43XFcoBTtTpKNlt866o6vf/Qg8OQ6JS51e0YDtvoqR
K9drLFf3dc9SLCToshFnGdAALnPs/RF88To9PErXcj9Xb72/Iwkjn+x/vnlcuV7V
7PWSsNXMZjvYrOXv7FeqyifGrisyIbuiaJxUYqwBHR16Mf48dIIAJAWy7C7Q5Jlx
bF5Kc1uEO+mH68bKMG6SaYZqKiC/i3JPvpFbrTAhPFiRphp/cSXGjnm5ynxGXGZU
1K4l7zV6e4m3JNG3EnhBdL0luaKk1urWNJ8EBBMnDsxuL9EZU09urJ7GWobcHFEP
ALtLAuA=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:23:15 2026 by rpki-client