Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3H3hPERiatQ1sXtroky8qnhF8xY.roa
File: 3H3hPERiatQ1sXtroky8qnhF8xY.roa (raw, json)
Hash identifier: Df2dUJFOAPPED1ouT/pqwmqvZ9tza1UP304mQpWF384=
Subject key identifier: DC:7D:E1:3C:44:62:6A:D4:35:B1:7B:6B:A2:4C:BC:AA:78:45:F3:16
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0B127C21FDA7DC5876B141A586182A6FA
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3H3hPERiatQ1sXtroky8qnhF8xY.roa
Signing time: Thu 17 Sep 2026 20:56:07 +0000
ROA not before: Thu 17 Sep 2026 20:56:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209693
IP address blocks: 2.26.148.0/24 maxlen: 24
2.26.175.0/24 maxlen: 24
2.26.189.0/24 maxlen: 24
2.27.244.0/24 maxlen: 24
2.27.254.0/24 maxlen: 24
31.76.22.0/24 maxlen: 24
31.76.23.0/24 maxlen: 24
64.188.76.0/24 maxlen: 24
64.188.77.0/24 maxlen: 24
64.188.78.0/24 maxlen: 24
64.188.79.0/24 maxlen: 24
64.188.80.0/24 maxlen: 24
64.188.81.0/24 maxlen: 24
64.188.82.0/24 maxlen: 24
64.188.83.0/24 maxlen: 24
77.239.126.0/24 maxlen: 24
87.251.16.0/24 maxlen: 24
87.251.17.0/24 maxlen: 24
87.251.18.0/24 maxlen: 24
87.251.19.0/24 maxlen: 24
144.31.168.0/22 maxlen: 24
179.254.108.0/24 maxlen: 24
179.254.109.0/24 maxlen: 24
179.254.110.0/24 maxlen: 24
179.254.111.0/24 maxlen: 24
193.23.216.0/24 maxlen: 24
193.23.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b1:27:c2:1f:da:7d:c5:87:6b:14:1a:58:61:82:a6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 17 20:56:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc7de13c44626ad435b17b6ba24cbcaa7845f316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5d:ef:bb:98:2b:d0:2d:45:2d:b7:40:30:b4:
32:31:de:f4:7b:6d:e2:52:58:bd:ff:5e:4c:73:fc:
f7:75:b5:54:9e:34:1b:89:96:8c:83:8e:05:42:e1:
ba:41:2a:be:4b:88:03:fc:4f:b5:a9:df:1b:e5:fb:
57:b5:d8:46:c1:11:9b:93:ca:75:0d:08:13:93:73:
83:a7:ba:f2:43:f1:ed:78:8c:4b:5c:fc:12:d3:65:
e6:7a:f0:88:f0:b0:0b:85:46:1a:60:60:2e:4d:25:
af:cf:62:43:44:38:bf:3c:c0:5a:48:d7:86:c4:12:
83:33:3b:bc:60:76:98:89:06:3c:19:d2:0b:b9:80:
74:e4:0d:10:5e:a1:f7:a2:d2:17:ec:33:c7:c0:59:
45:5d:a2:cd:1e:f3:ca:94:e7:9c:49:82:8b:5a:51:
ec:58:a3:26:f3:00:da:04:10:9a:d9:4d:88:7f:11:
3b:7d:35:ec:4f:d1:54:2b:dc:e1:be:3c:73:ae:e7:
69:cd:91:76:58:b7:69:63:e5:8c:3c:de:d6:91:2e:
0e:1e:53:f4:a2:73:31:1f:6a:41:5c:ac:11:c8:8b:
f3:82:73:96:f0:2b:44:23:6e:90:89:26:89:dd:7c:
7e:c1:fc:f5:dc:00:2f:37:3a:0d:b4:c8:5d:d1:d3:
2e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7D:E1:3C:44:62:6A:D4:35:B1:7B:6B:A2:4C:BC:AA:78:45:F3:16
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3H3hPERiatQ1sXtroky8qnhF8xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.148.0/24
2.26.175.0/24
2.26.189.0/24
2.27.244.0/24
2.27.254.0/24
31.76.22.0/23
64.188.76.0-64.188.83.255
77.239.126.0/24
87.251.16.0/22
144.31.168.0/22
179.254.108.0/22
193.23.216.0/24
193.23.221.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:04:46:75:e9:04:06:5d:80:d7:17:ab:f6:dc:8c:e2:56:c2:
a5:12:75:91:02:27:64:56:3d:21:95:f9:b8:f1:d2:df:ee:a6:
25:9f:fe:30:da:d1:19:fb:99:66:b5:c8:f2:ae:81:b9:84:f2:
e6:9b:c7:27:61:ca:1a:78:a6:e1:34:27:27:57:61:9e:cc:4a:
da:4f:8d:a7:d2:a8:14:b8:9a:ec:a7:81:08:fd:7a:0c:32:ab:
d4:a3:21:1c:6d:44:22:1d:50:98:93:f1:29:66:f8:04:ad:db:
6a:1f:f8:4f:96:d7:54:de:1e:a1:82:bb:d5:bd:f8:2d:cc:e7:
45:cc:ad:96:d6:eb:04:a1:27:09:ec:e4:ce:58:2c:b3:de:13:
2f:ff:a7:52:9b:9c:d2:81:5b:93:f6:c8:ae:a7:f1:a1:66:3c:
a8:9a:7a:0d:e0:c8:26:14:64:c3:ff:8e:93:b7:9b:25:59:d4:
2e:1b:d9:42:15:7b:39:ef:75:5a:94:43:75:ff:5b:14:fd:0b:
15:d6:e2:d2:78:24:6b:7f:59:05:63:3d:5b:e0:0d:e6:74:10:
78:12:b9:0c:70:e0:d6:ea:48:c1:c3:de:d5:87:a0:85:e9:5c:
ba:42:ea:88:3f:99:ae:4d:85:e2:be:ac:39:bb:b4:d8:46:4c:
94:39:2c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:45 2026 by rpki-client