Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xFq2ARq9YcZ1j8NeMkCam8NaWHw.roa
File: xFq2ARq9YcZ1j8NeMkCam8NaWHw.roa (raw, json)
Hash identifier: PqZIeEUksU4Rg2K3IydNXaUhw0k8pV0/eYMAB7Y+LoI=
Subject key identifier: C4:5A:B6:01:1A:BD:61:C6:75:8F:C3:5E:32:40:9A:9B:C3:5A:58:7C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F75CE7FB47434F8B9BC311D0103B6777E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xFq2ARq9YcZ1j8NeMkCam8NaWHw.roa
Signing time: Sat 18 Jul 2026 15:18:15 +0000
ROA not before: Sat 18 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207461
IP address blocks: 2.27.64.0/22 maxlen: 24
2.27.72.0/23 maxlen: 24
2.27.74.0/23 maxlen: 24
2.27.76.0/24 maxlen: 24
2.27.77.0/24 maxlen: 24
2.27.80.0/24 maxlen: 24
2.27.81.0/24 maxlen: 24
2.27.87.0/24 maxlen: 24
2.27.89.0/24 maxlen: 24
2.27.91.0/24 maxlen: 24
13.143.160.0/22 maxlen: 24
13.143.164.0/22 maxlen: 24
13.143.168.0/22 maxlen: 24
13.143.172.0/22 maxlen: 24
13.143.180.0/22 maxlen: 24
13.143.184.0/22 maxlen: 24
13.143.188.0/22 maxlen: 24
13.143.192.0/22 maxlen: 24
31.77.0.0/22 maxlen: 24
31.77.4.0/22 maxlen: 24
31.77.16.0/22 maxlen: 24
31.77.20.0/22 maxlen: 24
31.77.24.0/22 maxlen: 24
31.77.28.0/22 maxlen: 24
31.77.32.0/23 maxlen: 24
31.77.34.0/23 maxlen: 24
31.77.36.0/23 maxlen: 24
31.77.38.0/23 maxlen: 24
31.77.40.0/23 maxlen: 24
31.77.42.0/23 maxlen: 24
31.77.44.0/23 maxlen: 24
31.77.58.0/23 maxlen: 24
31.77.60.0/23 maxlen: 24
31.77.64.0/23 maxlen: 24
31.77.68.0/23 maxlen: 24
31.77.70.0/23 maxlen: 24
31.77.74.0/23 maxlen: 24
31.77.164.0/23 maxlen: 24
31.77.166.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:ce:7f:b4:74:34:f8:b9:bc:31:1d:01:03:b6:77:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 18 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c45ab6011abd61c6758fc35e32409a9bc35a587c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b1:af:5c:b5:8f:3a:25:a0:d0:05:aa:1d:ad:
14:be:29:c0:61:da:36:a7:23:55:c0:d5:3d:12:47:
0f:e5:cc:af:e0:86:f2:db:8d:71:d4:81:3b:ae:df:
e0:0b:df:50:5e:2e:bd:d5:d4:5c:bb:76:a7:4b:4d:
a6:92:2f:f5:68:ef:4a:bc:1d:99:84:cb:d8:52:6b:
e0:24:ff:6e:29:fe:fa:57:15:34:c9:4e:ba:14:7e:
e0:df:e9:49:8e:e8:5b:4b:e4:97:db:61:c5:fd:00:
ae:02:ec:28:c0:51:76:5b:6e:aa:e7:22:75:cb:a6:
e1:15:79:46:04:67:75:d7:cb:15:65:39:de:70:ae:
83:c1:ac:6f:34:c5:c1:c4:9a:2d:8b:e5:34:cd:bc:
fb:54:90:51:03:fd:64:8a:9c:53:fa:ee:52:a1:e4:
aa:d9:a0:22:59:5f:f2:24:73:01:6f:32:06:1c:ad:
08:96:5c:09:bf:f1:ee:19:43:e7:61:b2:6f:e8:e8:
0f:c1:c9:aa:42:62:1c:04:a2:e4:90:33:56:af:04:
c5:1d:49:da:bb:d8:20:d1:92:95:ae:98:37:ba:b6:
56:fe:74:2d:f8:2a:ff:7a:b5:bb:9f:7c:f8:ba:44:
7a:0d:4d:b5:af:78:63:25:a4:59:8b:48:9b:6b:0a:
9b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5A:B6:01:1A:BD:61:C6:75:8F:C3:5E:32:40:9A:9B:C3:5A:58:7C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xFq2ARq9YcZ1j8NeMkCam8NaWHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.64.0/22
2.27.72.0-2.27.77.255
2.27.80.0/23
2.27.87.0/24
2.27.89.0/24
2.27.91.0/24
13.143.160.0/20
13.143.180.0-13.143.195.255
31.77.0.0/21
31.77.16.0-31.77.45.255
31.77.58.0-31.77.61.255
31.77.64.0/23
31.77.68.0/22
31.77.74.0/23
31.77.164.0/22
Signature Algorithm: sha256WithRSAEncryption
76:bc:96:d1:4e:9d:3c:db:d8:96:46:b3:12:38:21:20:5c:a8:
04:93:2c:c7:31:15:01:23:de:f3:fc:04:57:c3:45:20:d3:72:
71:4b:86:ca:f6:ba:b2:21:0c:83:0c:5c:7a:52:08:c5:99:d1:
52:cb:40:a8:19:99:d3:24:57:2a:6d:cf:3c:3f:24:d1:6a:49:
8c:79:cc:1c:ff:98:ac:13:99:5b:fc:73:a4:b0:cb:4c:1a:f1:
55:43:40:cc:51:db:33:a7:d8:e3:eb:07:d1:db:8a:fc:d1:2a:
b9:40:de:0c:dd:1c:00:53:fe:9e:cd:10:23:0a:88:ba:a8:73:
5b:32:18:1b:f6:ca:c6:16:76:e5:88:7a:32:32:17:b8:72:d6:
42:16:40:69:3f:30:69:ff:08:89:1d:d9:cd:27:96:bf:02:42:
9c:c2:c6:67:ec:1a:85:d9:92:c7:44:84:4e:a9:19:83:c8:5e:
0d:30:13:19:45:58:48:ad:e6:51:d4:66:28:69:e2:f4:98:85:
e7:78:88:db:b3:19:0d:84:e5:5a:ac:6c:e8:22:71:5b:da:0e:
9f:a2:f3:20:d9:37:b2:07:e9:e4:48:de:f3:bc:ef:7f:93:d7:
cb:3e:52:9a:de:a0:ed:e5:1b:5d:a9:10:e5:0b:fa:c0:8b:ac:
e8:fa:32:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:47 2026 by rpki-client