Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/2ArrcaOVdFwK3Om6Cg_UGSb2TwI.roa
File: 2ArrcaOVdFwK3Om6Cg_UGSb2TwI.roa (raw, json)
Hash identifier: ebHuf/s/amKlZq24ew0ul26bqU579JNMgj8hWZeF7MI=
Subject key identifier: D8:0A:EB:71:A3:95:74:5C:0A:DC:E9:BA:0A:0F:D4:19:26:F6:4F:02
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0D42F2BA99E5512CB6A746198C27F96EB
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/2ArrcaOVdFwK3Om6Cg_UGSb2TwI.roa
Signing time: Thu 24 Sep 2026 16:10:56 +0000
ROA not before: Thu 24 Sep 2026 16:10:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 2.26.131.0/24 maxlen: 24
2.27.90.0/24 maxlen: 24
13.143.146.0/24 maxlen: 24
13.143.150.0/24 maxlen: 24
13.143.151.0/24 maxlen: 24
13.143.201.0/24 maxlen: 24
13.143.202.0/24 maxlen: 24
13.143.210.0/24 maxlen: 24
13.143.245.0/24 maxlen: 24
13.143.249.0/24 maxlen: 24
13.143.251.0/24 maxlen: 24
31.77.49.0/24 maxlen: 24
31.77.50.0/24 maxlen: 24
31.77.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:2f:2b:a9:9e:55:12:cb:6a:74:61:98:c2:7f:96:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 24 16:10:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d80aeb71a395745c0adce9ba0a0fd41926f64f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:7a:47:8a:34:a1:4f:1f:73:2c:02:f7:06:
f7:ca:c7:a7:dd:9e:aa:9c:21:b4:5d:46:70:7d:3d:
89:39:01:8d:91:2f:cc:33:b6:79:b4:2b:b5:2e:e1:
6d:94:05:b7:3a:d9:72:db:ab:f7:d9:85:d1:9c:bd:
06:a2:ab:46:c6:72:e1:64:05:b6:18:01:60:74:20:
ec:f2:f2:08:af:9e:97:6a:04:71:86:30:14:50:a7:
48:b9:35:fd:88:ea:d0:c8:6e:f8:66:be:d0:1a:21:
e2:05:04:c8:2a:d7:d7:f4:55:a2:4a:5f:85:b6:36:
d1:b2:0d:be:77:ce:9a:22:bb:19:19:9c:e0:88:45:
3b:1c:3c:a9:78:d6:8e:b3:3b:0d:d8:89:a8:12:8d:
2a:6e:b0:bc:51:f5:69:c7:ff:ce:0c:56:a9:64:0e:
73:a9:87:c2:5e:aa:49:28:db:e2:31:1a:7a:40:1e:
8f:6c:8a:b8:09:c4:fc:fa:16:db:da:39:a5:56:b3:
a6:d4:77:e4:6f:3c:a5:24:b7:c0:d6:d8:99:15:fb:
1d:5b:74:69:36:f9:43:8b:36:49:9f:40:f4:55:0f:
bf:17:1c:33:dd:eb:87:31:f8:29:d8:c3:06:ad:7b:
7f:21:e2:52:1c:da:31:eb:41:3f:56:02:a0:68:9b:
e6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0A:EB:71:A3:95:74:5C:0A:DC:E9:BA:0A:0F:D4:19:26:F6:4F:02
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/2ArrcaOVdFwK3Om6Cg_UGSb2TwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.131.0/24
2.27.90.0/24
13.143.146.0/24
13.143.150.0/23
13.143.201.0-13.143.202.255
13.143.210.0/24
13.143.245.0/24
13.143.249.0/24
13.143.251.0/24
31.77.49.0-31.77.51.255
Signature Algorithm: sha256WithRSAEncryption
6d:43:dc:5f:6b:86:64:56:ba:4d:1f:86:3b:32:04:56:ab:92:
a7:76:47:bb:d0:2a:d9:a3:84:95:1a:68:a3:81:ff:99:74:6c:
a8:96:68:2d:86:70:27:ba:74:03:97:85:b9:56:fb:4f:6a:b7:
0b:5d:c5:b8:67:f9:4f:8d:b8:ce:91:ef:ea:bd:f0:57:5c:e2:
25:d0:d3:69:9b:d2:01:16:d2:2e:b7:81:73:7f:aa:d7:45:10:
ee:7d:df:a5:1d:4a:63:9d:7d:99:54:1d:59:93:4b:e7:79:cd:
8e:3d:71:40:a7:d4:1b:37:0b:ab:2f:20:2c:b6:b2:ec:97:40:
2f:1b:1a:f9:0f:fa:39:4b:e9:07:8c:f8:6d:f5:56:63:95:41:
a3:8e:57:3d:8d:58:5b:04:a1:7a:db:60:b7:79:57:a2:3c:16:
99:a6:08:6f:3a:3e:61:c3:b3:0e:eb:96:30:7c:84:25:44:62:
a7:8f:ff:09:fc:2e:f6:20:e7:06:b5:dc:39:d9:03:55:39:8f:
58:e5:21:93:d7:51:79:ac:0a:d7:6a:7c:61:b2:ad:42:e6:79:
db:54:2d:10:06:45:98:a8:77:c4:db:e4:ed:7e:10:b9:0a:fe:
b9:15:c9:33:e8:79:c7:70:a8:b8:c9:2e:b7:8b:9d:32:0e:3d:
1f:eb:a9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 11:18:40 2026 by rpki-client