Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3MzokuzVIIO92wzhkUOdIJaAcFE.roa
File: 3MzokuzVIIO92wzhkUOdIJaAcFE.roa (raw, json)
Hash identifier: ElK611CNSdqTw3TCqpHqR6wibWEysn2KF4y5Isr1ins=
Subject key identifier: DC:CC:E8:92:EC:D5:20:83:BD:DB:0C:E1:91:43:9D:20:96:80:70:51
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F9ACCB779C32EADDBD7FA7E31D86D2DD3
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3MzokuzVIIO92wzhkUOdIJaAcFE.roa
Signing time: Sat 25 Jul 2026 19:42:15 +0000
ROA not before: Sat 25 Jul 2026 19:42:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207957
IP address blocks: 2.26.8.0/24 maxlen: 24
2.26.9.0/24 maxlen: 24
2.26.10.0/24 maxlen: 24
2.26.11.0/24 maxlen: 24
2.26.88.0/24 maxlen: 24
2.26.89.0/24 maxlen: 24
2.26.90.0/24 maxlen: 24
2.26.91.0/24 maxlen: 24
2.26.92.0/24 maxlen: 24
2.26.93.0/24 maxlen: 24
31.76.0.0/24 maxlen: 24
31.76.1.0/24 maxlen: 24
31.76.2.0/24 maxlen: 24
31.76.3.0/24 maxlen: 24
31.76.4.0/24 maxlen: 24
31.76.5.0/24 maxlen: 24
31.76.6.0/24 maxlen: 24
31.76.7.0/24 maxlen: 24
31.76.52.0/24 maxlen: 24
31.76.53.0/24 maxlen: 24
31.76.54.0/24 maxlen: 24
31.76.55.0/24 maxlen: 24
31.76.60.0/24 maxlen: 24
31.76.61.0/24 maxlen: 24
31.76.62.0/24 maxlen: 24
31.76.63.0/24 maxlen: 24
31.76.64.0/24 maxlen: 24
31.76.65.0/24 maxlen: 24
31.76.66.0/24 maxlen: 24
31.76.68.0/24 maxlen: 24
31.76.69.0/24 maxlen: 24
31.76.82.0/24 maxlen: 24
31.76.83.0/24 maxlen: 24
31.76.84.0/24 maxlen: 24
31.76.85.0/24 maxlen: 24
31.76.114.0/24 maxlen: 24
31.76.115.0/24 maxlen: 24
31.77.140.0/24 maxlen: 24
31.77.141.0/24 maxlen: 24
31.77.142.0/24 maxlen: 24
31.77.143.0/24 maxlen: 24
64.188.89.0/24 maxlen: 24
64.188.90.0/24 maxlen: 24
64.188.98.0/24 maxlen: 24
64.188.127.0/24 maxlen: 24
77.239.107.0/24 maxlen: 24
144.31.15.0/24 maxlen: 24
144.31.49.0/24 maxlen: 24
144.31.50.0/24 maxlen: 24
144.31.51.0/24 maxlen: 24
144.31.57.0/24 maxlen: 24
144.31.82.0/24 maxlen: 24
144.31.83.0/24 maxlen: 24
144.31.93.0/24 maxlen: 24
144.31.103.0/24 maxlen: 24
144.31.107.0/24 maxlen: 24
144.31.108.0/24 maxlen: 24
144.31.109.0/24 maxlen: 24
144.31.213.0/24 maxlen: 24
144.31.214.0/24 maxlen: 24
144.31.216.0/24 maxlen: 24
144.31.217.0/24 maxlen: 24
144.31.218.0/24 maxlen: 24
144.31.219.0/24 maxlen: 24
144.31.239.0/24 maxlen: 24
144.31.240.0/24 maxlen: 24
144.31.241.0/24 maxlen: 24
144.31.242.0/24 maxlen: 24
144.31.243.0/24 maxlen: 24
144.31.249.0/24 maxlen: 24
150.241.72.0/24 maxlen: 24
150.241.73.0/24 maxlen: 24
150.241.74.0/24 maxlen: 24
150.241.75.0/24 maxlen: 24
150.241.82.0/24 maxlen: 24
150.241.83.0/24 maxlen: 24
150.241.100.0/24 maxlen: 24
150.241.101.0/24 maxlen: 24
150.241.102.0/24 maxlen: 24
150.241.103.0/24 maxlen: 24
185.170.153.0/24 maxlen: 24
185.170.154.0/24 maxlen: 24
193.23.195.0/24 maxlen: 24
193.23.200.0/24 maxlen: 24
193.23.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9a:cc:b7:79:c3:2e:ad:db:d7:fa:7e:31:d8:6d:2d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 25 19:42:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dccce892ecd52083bddb0ce191439d2096807051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:16:74:e1:0e:30:0e:ad:a9:1e:ea:e2:fc:df:
20:d0:2b:a0:7c:fd:22:ca:70:af:a0:1a:7a:4b:52:
29:76:65:aa:9c:8f:8a:ba:66:ef:d2:59:ed:2b:a6:
20:24:14:a8:59:6a:20:52:15:62:72:7a:b7:c3:97:
d3:24:d2:db:e4:6d:59:9d:1c:3f:04:dd:d5:78:d6:
c5:21:18:62:23:e1:80:b6:28:02:7e:40:df:4c:1c:
4a:18:8c:a6:69:65:f2:33:4f:6f:5a:5e:1f:e5:f8:
2c:2e:da:34:5f:c0:d8:ac:18:13:a4:30:ba:70:84:
55:df:9a:46:f3:f9:f1:b9:30:a0:6b:ad:a7:8a:04:
44:a4:3f:5b:ec:da:e1:25:4d:e7:b5:3c:fa:98:6e:
ba:40:d8:5b:7b:fe:37:4f:cb:f7:6a:de:bf:04:99:
98:a7:16:81:85:a1:35:61:32:78:96:5f:47:a8:5a:
71:a8:3b:1a:35:b0:dc:6c:92:41:14:ab:e5:f1:5c:
ce:28:1a:f9:e3:fc:06:17:16:44:76:0a:f6:33:ed:
9b:8f:19:94:7c:d1:d0:17:7d:ba:a0:0f:7b:58:bc:
30:f9:84:de:eb:87:97:1c:08:e6:b2:7b:b0:71:bd:
59:af:b3:55:d8:41:a0:97:fd:6b:f3:87:de:76:c4:
5f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CC:E8:92:EC:D5:20:83:BD:DB:0C:E1:91:43:9D:20:96:80:70:51
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3MzokuzVIIO92wzhkUOdIJaAcFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.8.0/22
2.26.88.0-2.26.93.255
31.76.0.0/21
31.76.52.0/22
31.76.60.0-31.76.66.255
31.76.68.0/23
31.76.82.0-31.76.85.255
31.76.114.0/23
31.77.140.0/22
64.188.89.0-64.188.90.255
64.188.98.0/24
64.188.127.0/24
77.239.107.0/24
144.31.15.0/24
144.31.49.0-144.31.51.255
144.31.57.0/24
144.31.82.0/23
144.31.93.0/24
144.31.103.0/24
144.31.107.0-144.31.109.255
144.31.213.0-144.31.214.255
144.31.216.0/22
144.31.239.0-144.31.243.255
144.31.249.0/24
150.241.72.0/22
150.241.82.0/23
150.241.100.0/22
185.170.153.0-185.170.154.255
193.23.195.0/24
193.23.200.0/24
193.23.202.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:f3:d3:9e:d1:2b:98:2b:8d:9e:c8:1b:0a:f0:b3:d7:bd:3b:
8e:eb:78:8c:09:3a:59:53:dc:ff:ce:ce:5a:c3:0e:9d:9d:ae:
58:45:57:55:7d:ef:0e:d7:cf:43:f6:6b:de:08:ad:fa:6f:75:
df:da:2d:d2:07:cd:85:77:82:62:08:2c:75:d4:cc:ea:a6:45:
5d:a7:a6:41:5c:db:4f:c2:65:27:f9:8a:96:03:fd:95:7b:af:
4e:5a:ee:23:b8:d7:66:d0:c0:ef:73:4d:af:b1:c6:ff:14:51:
f0:ec:e4:f6:9e:9d:f9:fb:fc:7e:c7:11:dd:db:90:20:8f:85:
3f:89:47:5d:fd:07:ce:d1:f2:b3:fb:e1:8c:32:a8:62:38:4b:
d8:07:b0:66:50:16:5b:15:05:af:4f:b4:c4:07:4e:70:4e:60:
0c:00:2e:35:76:20:32:80:b1:b3:50:b7:98:3c:fe:26:65:ba:
40:06:09:4a:9c:6c:f9:73:b0:0e:27:c0:4b:42:16:fc:09:2e:
8e:34:8a:5e:97:1e:e1:f1:b7:fa:8d:a5:9c:12:1e:61:a6:70:
b3:c7:b8:84:e4:0f:44:f3:81:40:4d:0e:0e:2d:50:c3:bc:2a:
95:23:76:b8:23:4a:0e:87:36:fb:f9:fe:e3:5e:fc:db:78:da:
13:4e:e5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:38:41 2026 by rpki-client