Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0JWS9TXTR_WpZo7uLHo4pITtHKI.roa
File: 0JWS9TXTR_WpZo7uLHo4pITtHKI.roa (raw, json)
Hash identifier: HxgZYW3t/mdl5xmQNEOpUdTb7Eq8bRX21hzDEdshLco=
Subject key identifier: D0:95:92:F5:35:D3:47:F5:A9:66:8E:EE:2C:7A:38:A4:84:ED:1C:A2
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0F335FFCF60318039FDE11AC4EF2CB38D
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0JWS9TXTR_WpZo7uLHo4pITtHKI.roa
Signing time: Wed 30 Sep 2026 16:46:37 +0000
ROA not before: Wed 30 Sep 2026 16:46:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218731
IP address blocks: 2.26.182.0/24 maxlen: 24
2.26.186.0/24 maxlen: 24
31.77.56.0/24 maxlen: 24
31.77.57.0/24 maxlen: 24
31.77.109.0/24 maxlen: 24
31.77.138.0/24 maxlen: 24
31.77.168.0/24 maxlen: 24
31.77.170.0/24 maxlen: 24
31.77.219.0/24 maxlen: 24
31.77.220.0/24 maxlen: 24
31.77.247.0/24 maxlen: 24
31.77.248.0/24 maxlen: 24
150.241.93.0/24 maxlen: 24
150.241.124.0/24 maxlen: 24
179.253.162.0/24 maxlen: 24
179.253.166.0/24 maxlen: 24
179.253.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:35:ff:cf:60:31:80:39:fd:e1:1a:c4:ef:2c:b3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 30 16:46:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d09592f535d347f5a9668eee2c7a38a484ed1ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:66:78:b8:86:2d:0b:e2:17:c5:05:f4:db:ec:
3e:5e:69:10:83:a5:e1:d8:d4:13:ed:8b:ca:3d:4f:
b8:42:53:f1:6f:84:e5:3c:74:e4:07:24:e0:ac:23:
0d:05:be:21:ea:59:e0:a9:34:68:1f:b8:9d:5f:18:
e5:cf:5b:1e:d0:cd:4e:33:12:7a:57:74:c5:73:9f:
55:09:c1:71:41:45:36:bd:eb:0b:f7:df:f5:7a:bf:
44:18:cc:1d:07:15:3f:d4:c3:90:c7:cc:71:e2:26:
28:79:71:96:55:4d:ef:1a:a2:cb:78:6e:20:8c:ab:
24:b7:1b:fa:9c:61:c7:3f:a6:19:69:ad:ed:b6:2e:
5a:e1:ec:68:1d:57:db:05:e5:d1:d6:5b:08:a7:84:
2e:2b:a0:fb:eb:9e:c5:0f:a9:c6:f5:e0:8c:ac:71:
bc:7e:fa:61:fe:76:e9:eb:f5:9e:88:f6:4b:bb:23:
d6:70:07:c0:76:f4:89:45:a2:f7:9c:f0:d2:1b:53:
bf:5f:13:98:72:92:76:96:89:a4:c5:6a:90:12:be:
d7:ba:9d:00:c1:8f:9d:a2:94:59:87:9c:e7:cb:15:
f8:31:b7:d6:6b:a8:db:6c:27:4d:c2:f4:92:07:07:
53:57:f0:01:f6:2a:12:fb:b2:f8:88:f4:2d:3b:e4:
96:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:95:92:F5:35:D3:47:F5:A9:66:8E:EE:2C:7A:38:A4:84:ED:1C:A2
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0JWS9TXTR_WpZo7uLHo4pITtHKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.182.0/24
2.26.186.0/24
31.77.56.0/23
31.77.109.0/24
31.77.138.0/24
31.77.168.0/24
31.77.170.0/24
31.77.219.0-31.77.220.255
31.77.247.0-31.77.248.255
150.241.93.0/24
150.241.124.0/24
179.253.162.0/24
179.253.166.0/23
Signature Algorithm: sha256WithRSAEncryption
96:db:f7:56:36:24:7e:1e:85:30:30:2f:76:77:84:9a:c0:13:
13:9c:0f:65:05:5a:3e:09:1d:cb:2c:03:86:ca:bd:17:ae:80:
e4:b7:40:29:08:50:07:4f:db:58:1e:14:bd:d8:e0:4d:94:1f:
f2:e2:45:b8:0f:f1:b5:98:04:58:64:b1:99:d5:45:21:fa:60:
83:49:e3:78:14:25:82:4d:86:97:3f:7b:45:7f:01:f2:e3:78:
32:d1:9a:8e:01:de:d5:f0:a1:f3:11:fc:ce:cd:bc:40:a2:5d:
8c:f7:79:12:ca:5b:53:eb:9e:fb:b7:9b:af:5b:83:98:91:c2:
96:cb:4c:0a:0a:bf:c3:25:90:1e:58:f8:05:2e:1b:13:55:22:
12:9d:b6:14:66:d8:37:a1:e1:65:51:da:54:4b:b2:0e:42:d1:
cb:2d:7e:ec:61:54:77:a4:68:f7:a1:40:a1:af:d8:73:27:80:
0b:72:a6:0d:56:0b:79:ff:0a:1e:41:51:17:fd:e6:b4:04:62:
a3:3b:1a:9a:53:7d:c4:18:9b:fa:93:f2:47:93:b3:72:8d:0e:
71:17:d6:50:05:1c:61:f9:0b:f7:84:52:b4:57:a8:7a:29:a0:
c2:d9:bb:0d:2f:41:44:62:f5:b4:fb:dc:43:88:bd:92:4b:ee:
e5:d3:d5:14
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgISAaDzNf/PYDGAOf3hGsTvLLONMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwOTMwMTY0NjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDk1OTJmNTM1ZDM0N2Y1YTk2NjhlZWUyYzdhMzhhNDg0ZWQxY2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2Z4uIYtC+IXxQX02+w+XmkQg6Xh
2NQT7YvKPU+4QlPxb4TlPHTkByTgrCMNBb4h6lngqTRoH7idXxjlz1se0M1OMxJ6
V3TFc59VCcFxQUU2vesL99/1er9EGMwdBxU/1MOQx8xx4iYoeXGWVU3vGqLLeG4g
jKsktxv6nGHHP6YZaa3tti5a4exoHVfbBeXR1lsIp4QuK6D7657FD6nG9eCMrHG8
fvph/nbp6/WeiPZLuyPWcAfAdvSJRaL3nPDSG1O/XxOYcpJ2lomkxWqQEr7Xup0A
wY+dopRZh5znyxX4MbfWa6jbbCdNwvSSBwdTV/AB9ioS+7L4iPQtO+SWkwIDAQAB
o4ICYTCCAl0wHQYDVR0OBBYEFNCVkvU100f1qWaO7ix6OKSE7RyiMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvMEpXUzlUWFRSX1dwWm83dUxIbzRwSVR0SEtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjBkBAIAATBeAwQAAhq2AwQA
Ahq6AwQBH004AwQAH01tAwQAH02KAwQAH02oAwQAH02qMAwDBAAfTdsDBAAfTdww
DAMEAB9N9wMEAB9N+AMEAJbxXQMEAJbxfAMEALP9ogMEAbP9pjANBgkqhkiG9w0B
AQsFAAOCAQEAltv3VjYkfh6FMDAvdneEmsATE5wPZQVaPgkdyywDhsq9F66A5LdA
KQhQB0/bWB4UvdjgTZQf8uJFuA/xtZgEWGSxmdVFIfpgg0njeBQlgk2Glz97RX8B
8uN4MtGajgHe1fCh8xH8zs28QKJdjPd5EspbU+ue+7ebr1uDmJHClstMCgq/wyWQ
Hlj4BS4bE1UiEp22FGbYN6HhZVHaVEuyDkLRyy1+7GFUd6Ro96FAoa/YcyeAC3Km
DVYLef8KHkFRF/3mtARiozsamlN9xBib+pPyR5Ozco0OcRfWUAUcYfkL94RStFeo
eimgwtm7DS9BRGL1tPvcQ4i9kkvu5dPVFA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 07:18:22 2026 by rpki-client