Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-Ahaspcl4PRfs87qmKW_HaQ0nJY.roa
File: 1-Ahaspcl4PRfs87qmKW_HaQ0nJY.roa (raw, json)
Hash identifier: 0/ebXoTUOw7OQ/8QP3nF3DB/gI3Fv9fsDnmrjQJJbqY=
Subject key identifier: F8:08:5A:B2:97:25:E0:F4:5F:B3:CE:EA:98:A5:BF:1D:A4:34:9C:96
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DB70FED309C031D5810133A9753B18BFD
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-Ahaspcl4PRfs87qmKW_HaQ0nJY.roa
Signing time: Wed 22 Apr 2026 21:19:27 +0000
ROA not before: Wed 22 Apr 2026 21:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210457
IP address blocks: 2.26.252.0/24 maxlen: 24
2.27.4.0/24 maxlen: 24
2.27.59.0/24 maxlen: 24
2.27.60.0/24 maxlen: 24
2.27.62.0/24 maxlen: 24
2.27.63.0/24 maxlen: 24
144.31.12.0/24 maxlen: 24
144.31.25.0/24 maxlen: 24
144.31.106.0/24 maxlen: 24
144.31.136.0/24 maxlen: 24
144.31.151.0/24 maxlen: 24
144.31.169.0/24 maxlen: 24
144.31.221.0/24 maxlen: 24
150.241.66.0/24 maxlen: 24
193.23.199.0/24 maxlen: 24
193.23.209.0/24 maxlen: 24
193.23.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b7:0f:ed:30:9c:03:1d:58:10:13:3a:97:53:b1:8b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 22 21:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8085ab29725e0f45fb3ceea98a5bf1da4349c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b6:c3:4a:c0:01:54:c7:ba:63:39:10:3d:6c:
47:b3:4b:0b:f1:fa:10:7e:c3:a0:d8:e6:3a:ec:55:
a2:c3:3f:75:cb:ec:26:43:32:3b:44:36:63:77:5c:
75:85:dd:29:53:08:e1:84:39:b0:2b:f7:38:9f:83:
66:e1:f5:f3:cc:c0:12:ac:23:9a:57:37:1e:4f:a8:
6e:a6:78:8b:43:3f:42:82:3f:1f:98:28:3c:42:48:
ea:48:75:3b:7f:f0:16:95:b7:78:d1:5e:d9:4c:de:
eb:3c:70:60:4c:20:3f:fe:29:3e:52:83:97:fe:7c:
f2:21:b2:d2:6e:24:4e:61:cb:6c:6a:33:33:ef:80:
fd:9e:3e:99:49:e8:d8:57:1c:f9:83:58:26:33:57:
60:d4:2c:04:d0:25:bd:93:0a:67:a0:ad:44:6b:04:
a9:54:0a:f2:c8:cc:74:72:f9:a5:f6:a5:76:d7:59:
91:c0:d1:45:10:b6:7b:75:a7:c0:32:6f:05:80:5c:
5b:6d:b9:47:d5:ee:bb:2e:1a:44:1e:98:02:ed:b2:
0d:0f:d3:82:8b:cb:90:42:64:d3:5f:b2:6c:db:18:
8d:4a:80:b3:ca:68:4c:b9:1d:ec:54:e8:c6:5c:d0:
c3:58:44:10:b4:33:f0:b5:29:5a:29:4a:72:84:00:
36:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:08:5A:B2:97:25:E0:F4:5F:B3:CE:EA:98:A5:BF:1D:A4:34:9C:96
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-Ahaspcl4PRfs87qmKW_HaQ0nJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.252.0/24
2.27.4.0/24
2.27.59.0-2.27.60.255
2.27.62.0/23
144.31.12.0/24
144.31.25.0/24
144.31.106.0/24
144.31.136.0/24
144.31.151.0/24
144.31.169.0/24
144.31.221.0/24
150.241.66.0/24
193.23.199.0/24
193.23.209.0/24
193.23.221.0/24
Signature Algorithm: sha256WithRSAEncryption
59:38:0a:8d:5c:1f:71:f3:63:6f:9d:46:52:07:20:1f:5f:c7:
86:ec:68:52:aa:5d:2f:e1:f2:12:6c:3f:7e:31:c7:96:fd:e1:
bc:ef:6c:10:6a:03:2f:a9:c6:3a:6b:be:f6:3e:0f:fc:41:a5:
6c:06:6f:78:8b:0e:75:52:93:ad:33:a7:bd:5b:c7:dd:25:82:
4b:95:00:87:f6:8a:e2:c9:ef:90:a8:56:bc:3d:43:29:60:ff:
61:71:41:ec:bc:72:75:3b:6e:ae:3d:fa:15:62:d6:ee:d1:c2:
3a:aa:c9:2a:9e:5f:38:f7:49:34:16:dd:53:d7:dc:62:49:82:
dd:7d:28:d8:3f:ac:fa:ea:ab:2f:01:c2:a8:a8:d2:86:d4:64:
8f:bb:b3:12:7e:93:39:5d:47:51:af:f9:14:8a:c0:dd:50:68:
17:e0:a2:4b:30:fd:1e:4c:81:67:b7:80:3d:aa:41:6f:a2:b3:
f1:45:50:bd:88:18:32:55:69:ef:d5:d4:db:f8:41:7e:e6:5f:
d0:38:3a:cc:4d:08:38:5e:9b:81:2c:70:75:95:86:a2:4a:1d:
f9:46:9d:70:8a:2b:e4:33:87:7b:8b:68:99:d9:cf:36:fe:1a:
7c:98:a4:c1:62:72:b9:a0:b2:ba:c3:f6:27:4b:1a:08:13:dd:
d2:0b:2f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:49:26 2026 by rpki-client