Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3nJpAft0qMUNcDpV-HzbP3aL0IA.roa
File: 3nJpAft0qMUNcDpV-HzbP3aL0IA.roa (raw, json)
Hash identifier: nv28qr04O5iseKsmdzL0uwLOugiqQWzmfPlJJDkddf4=
Subject key identifier: DE:72:69:01:FB:74:A8:C5:0D:70:3A:55:F8:7C:DB:3F:76:8B:D0:80
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019ECC8E8C28AEB3D0ADCE140618A74AD7C7
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3nJpAft0qMUNcDpV-HzbP3aL0IA.roa
Signing time: Mon 15 Jun 2026 18:32:34 +0000
ROA not before: Mon 15 Jun 2026 18:32:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207957
IP address blocks: 2.26.8.0/24 maxlen: 24
2.26.9.0/24 maxlen: 24
2.26.10.0/24 maxlen: 24
2.26.11.0/24 maxlen: 24
2.26.88.0/24 maxlen: 24
2.26.89.0/24 maxlen: 24
2.26.90.0/24 maxlen: 24
2.26.91.0/24 maxlen: 24
2.26.92.0/24 maxlen: 24
2.26.93.0/24 maxlen: 24
31.76.0.0/24 maxlen: 24
31.76.1.0/24 maxlen: 24
31.76.2.0/24 maxlen: 24
31.76.3.0/24 maxlen: 24
31.76.4.0/24 maxlen: 24
31.76.5.0/24 maxlen: 24
31.76.6.0/24 maxlen: 24
31.76.7.0/24 maxlen: 24
31.76.52.0/24 maxlen: 24
31.76.53.0/24 maxlen: 24
31.76.54.0/24 maxlen: 24
31.76.55.0/24 maxlen: 24
31.76.60.0/24 maxlen: 24
31.76.61.0/24 maxlen: 24
31.76.62.0/24 maxlen: 24
31.76.63.0/24 maxlen: 24
31.76.82.0/24 maxlen: 24
31.76.83.0/24 maxlen: 24
31.76.84.0/24 maxlen: 24
31.76.85.0/24 maxlen: 24
31.76.114.0/24 maxlen: 24
31.76.115.0/24 maxlen: 24
31.77.140.0/24 maxlen: 24
31.77.141.0/24 maxlen: 24
31.77.142.0/24 maxlen: 24
31.77.143.0/24 maxlen: 24
64.188.89.0/24 maxlen: 24
64.188.90.0/24 maxlen: 24
64.188.98.0/24 maxlen: 24
64.188.127.0/24 maxlen: 24
77.239.107.0/24 maxlen: 24
144.31.15.0/24 maxlen: 24
144.31.49.0/24 maxlen: 24
144.31.50.0/24 maxlen: 24
144.31.51.0/24 maxlen: 24
144.31.57.0/24 maxlen: 24
144.31.82.0/24 maxlen: 24
144.31.83.0/24 maxlen: 24
144.31.93.0/24 maxlen: 24
144.31.103.0/24 maxlen: 24
144.31.107.0/24 maxlen: 24
144.31.108.0/24 maxlen: 24
144.31.109.0/24 maxlen: 24
144.31.213.0/24 maxlen: 24
144.31.214.0/24 maxlen: 24
144.31.216.0/24 maxlen: 24
144.31.217.0/24 maxlen: 24
144.31.218.0/24 maxlen: 24
144.31.219.0/24 maxlen: 24
144.31.239.0/24 maxlen: 24
144.31.240.0/24 maxlen: 24
144.31.241.0/24 maxlen: 24
144.31.242.0/24 maxlen: 24
144.31.243.0/24 maxlen: 24
144.31.249.0/24 maxlen: 24
150.241.72.0/24 maxlen: 24
150.241.73.0/24 maxlen: 24
150.241.74.0/24 maxlen: 24
150.241.75.0/24 maxlen: 24
150.241.82.0/24 maxlen: 24
150.241.83.0/24 maxlen: 24
150.241.100.0/24 maxlen: 24
150.241.101.0/24 maxlen: 24
150.241.102.0/24 maxlen: 24
150.241.103.0/24 maxlen: 24
185.170.153.0/24 maxlen: 24
185.170.154.0/24 maxlen: 24
193.23.195.0/24 maxlen: 24
193.23.200.0/24 maxlen: 24
193.23.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cc:8e:8c:28:ae:b3:d0:ad:ce:14:06:18:a7:4a:d7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 15 18:32:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de726901fb74a8c50d703a55f87cdb3f768bd080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a5:41:8b:c6:f4:2d:b3:8a:91:f9:c5:d4:cb:
5d:19:67:b2:24:4e:65:14:68:3b:63:80:ab:61:d0:
71:da:28:63:0a:c3:d0:63:f7:98:d5:ae:26:01:a5:
e7:db:db:ff:cd:89:e3:0c:23:a6:15:19:0d:0c:6d:
28:b7:e3:cf:6e:96:f7:85:31:86:1d:57:23:dc:7e:
d1:91:3c:eb:95:31:e6:e9:d6:be:28:c3:17:00:6d:
7b:f6:e7:1a:b3:6e:15:10:b5:65:3d:c9:da:83:42:
c4:48:e3:9e:b9:5f:8b:61:cc:d6:e0:44:ab:89:fb:
a5:3a:06:9b:a6:02:f5:f5:81:fe:5f:17:36:6a:f0:
8f:9f:a1:b6:b6:d3:f2:2b:3f:2e:37:38:bc:69:c2:
2b:1c:81:82:31:f7:1d:2d:93:66:85:4b:10:d3:5b:
6d:ef:06:b4:d6:00:e4:0a:8a:47:b4:f3:15:6c:62:
bd:dd:cd:25:c2:c9:06:2c:e2:5f:16:df:65:a6:10:
9f:9a:05:bb:e0:39:db:f4:ef:13:68:50:de:99:84:
7d:84:16:f0:92:62:93:7f:6e:e1:73:b9:f2:21:1c:
56:0b:ca:75:13:cc:89:00:63:9c:11:11:1d:c5:e3:
ac:0c:e6:d0:8c:07:91:9b:8b:5e:ad:ac:93:a9:44:
3c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:72:69:01:FB:74:A8:C5:0D:70:3A:55:F8:7C:DB:3F:76:8B:D0:80
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3nJpAft0qMUNcDpV-HzbP3aL0IA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.8.0/22
2.26.88.0-2.26.93.255
31.76.0.0/21
31.76.52.0/22
31.76.60.0/22
31.76.82.0-31.76.85.255
31.76.114.0/23
31.77.140.0/22
64.188.89.0-64.188.90.255
64.188.98.0/24
64.188.127.0/24
77.239.107.0/24
144.31.15.0/24
144.31.49.0-144.31.51.255
144.31.57.0/24
144.31.82.0/23
144.31.93.0/24
144.31.103.0/24
144.31.107.0-144.31.109.255
144.31.213.0-144.31.214.255
144.31.216.0/22
144.31.239.0-144.31.243.255
144.31.249.0/24
150.241.72.0/22
150.241.82.0/23
150.241.100.0/22
185.170.153.0-185.170.154.255
193.23.195.0/24
193.23.200.0/24
193.23.202.0/24
Signature Algorithm: sha256WithRSAEncryption
26:9e:e8:a0:a1:dc:68:7e:3c:1c:72:a7:fa:28:cd:26:88:3a:
c5:ea:02:37:67:49:03:9c:96:72:64:a3:8f:c4:7e:54:12:dc:
a4:84:7e:92:96:ac:c2:48:42:ce:f1:9e:91:79:a8:7c:99:6e:
48:a3:91:2a:0a:e6:7c:a7:e7:48:8a:dc:1c:68:02:1e:0c:57:
f1:6c:ac:26:2e:4b:95:93:23:e8:29:46:09:6c:f9:83:94:bc:
de:70:41:81:23:a3:46:5b:9f:02:d7:24:cb:91:79:75:7c:83:
5a:d6:3b:9a:97:15:b9:00:e8:86:1a:f6:3d:5d:ca:f7:60:ab:
f9:35:1b:9c:66:a4:e3:98:05:84:1a:97:88:de:b7:27:eb:cd:
12:fd:36:49:36:88:6d:da:ba:5b:2b:96:68:5b:04:c3:0a:f3:
20:88:75:25:b9:79:e5:97:7e:9c:71:66:93:4e:89:e5:0d:af:
09:f8:a4:f4:99:1b:d3:ec:50:62:93:2c:68:c4:8b:32:c6:47:
ed:b2:f4:2f:8c:47:25:c1:70:f3:52:3a:b3:b6:e5:24:5d:4d:
0d:30:fb:ef:98:34:40:ee:b6:8c:cb:c9:90:80:08:da:da:12:
58:98:f6:46:a2:d9:f3:4f:e3:ec:ab:93:fa:35:0b:fd:bf:ef:
8d:fa:c1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:04:41 2026 by rpki-client