Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4GrCezh9G2qPSiDuYelxZ9cCYEs.roa
File: 4GrCezh9G2qPSiDuYelxZ9cCYEs.roa (raw, json)
Hash identifier: nAQsARh9bpshoW32/opmcZGgGEKRjWVOI7yxjNiBxJc=
Subject key identifier: E0:6A:C2:7B:38:7D:1B:6A:8F:4A:20:EE:61:E9:71:67:D7:02:60:4B
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A11D1AB8351543A19E98DCC6464A314B31
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4GrCezh9G2qPSiDuYelxZ9cCYEs.roa
Signing time: Thu 08 Oct 2026 20:00:52 +0000
ROA not before: Thu 08 Oct 2026 20:00:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216127
IP address blocks: 2.26.16.0/22 maxlen: 24
2.26.28.0/22 maxlen: 24
2.26.116.0/22 maxlen: 24
2.26.158.0/24 maxlen: 24
2.26.192.0/21 maxlen: 24
2.26.248.0/22 maxlen: 24
2.27.18.0/24 maxlen: 24
2.27.19.0/24 maxlen: 24
31.76.16.0/22 maxlen: 24
31.76.44.0/22 maxlen: 24
31.76.72.0/22 maxlen: 24
31.76.96.0/22 maxlen: 24
31.76.224.0/22 maxlen: 24
31.77.132.0/22 maxlen: 24
31.77.174.0/23 maxlen: 24
31.77.218.0/24 maxlen: 24
31.77.223.0/24 maxlen: 24
77.239.96.0/22 maxlen: 24
144.31.96.0/22 maxlen: 24
144.31.154.0/23 maxlen: 24
144.31.180.0/22 maxlen: 24
144.31.188.0/23 maxlen: 24
144.31.200.0/23 maxlen: 24
144.31.204.0/23 maxlen: 24
144.31.250.0/23 maxlen: 24
150.241.90.0/23 maxlen: 24
179.254.164.0/23 maxlen: 24
185.184.120.0/24 maxlen: 24
185.184.121.0/24 maxlen: 24
191.217.218.0/23 maxlen: 24
191.217.226.0/23 maxlen: 24
191.217.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:1a:b8:35:15:43:a1:9e:98:dc:c6:46:4a:31:4b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 8 20:00:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e06ac27b387d1b6a8f4a20ee61e97167d702604b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:20:27:8c:d2:1d:c6:93:89:8e:97:5d:d8:
7b:89:28:77:18:05:aa:a0:b4:e1:c9:6a:d6:a5:f6:
00:51:e5:e1:65:7e:b5:00:3c:a8:92:5c:4d:73:d3:
f8:50:9f:d5:4e:c8:fd:a3:a4:d3:0e:d2:3c:8d:d3:
52:33:03:ed:2e:32:29:73:e3:33:53:50:bc:76:c9:
77:a8:d2:8a:77:a1:9e:45:2c:0f:eb:75:57:16:ea:
73:3d:ce:c9:2e:d6:f3:2c:0c:96:73:f0:95:9e:1a:
a3:ba:bb:34:c3:6a:b4:84:2b:a6:28:b8:60:eb:88:
63:0a:b5:92:19:16:9f:00:08:95:1d:32:54:ad:50:
a3:75:59:e8:42:ff:76:d4:20:6a:2f:af:42:bd:74:
4a:d2:b7:d5:69:fc:a4:93:a0:23:51:a5:32:a6:ba:
64:e3:7d:f5:84:ec:e0:79:4d:41:2f:cb:83:e5:ab:
90:80:45:b1:a6:d8:25:cf:c0:29:fe:a6:b4:8f:f4:
06:79:09:25:c0:c8:ca:74:28:38:24:d2:a0:e3:41:
59:01:a8:3b:7a:a8:bb:a8:01:64:7c:cb:c2:df:54:
7c:1e:33:37:62:30:78:de:36:40:5a:e8:5f:8c:64:
68:ef:4c:ed:44:60:50:ce:f4:4e:9f:84:0b:cb:8e:
cb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6A:C2:7B:38:7D:1B:6A:8F:4A:20:EE:61:E9:71:67:D7:02:60:4B
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4GrCezh9G2qPSiDuYelxZ9cCYEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.16.0/22
2.26.28.0/22
2.26.116.0/22
2.26.158.0/24
2.26.192.0/21
2.26.248.0/22
2.27.18.0/23
31.76.16.0/22
31.76.44.0/22
31.76.72.0/22
31.76.96.0/22
31.76.224.0/22
31.77.132.0/22
31.77.174.0/23
31.77.218.0/24
31.77.223.0/24
77.239.96.0/22
144.31.96.0/22
144.31.154.0/23
144.31.180.0/22
144.31.188.0/23
144.31.200.0/23
144.31.204.0/23
144.31.250.0/23
150.241.90.0/23
179.254.164.0/23
185.184.120.0/23
191.217.218.0/23
191.217.226.0/23
191.217.230.0/23
Signature Algorithm: sha256WithRSAEncryption
86:5b:f7:32:e0:a0:f5:70:2e:fe:2e:c7:1a:63:d2:6b:2c:b4:
bd:de:82:77:74:e5:56:1b:db:75:62:87:07:c7:2c:bc:be:0b:
4c:b5:03:18:a2:89:d3:a9:a2:c8:17:35:bd:21:d7:f6:7b:81:
fe:56:24:c2:6a:b9:a4:8e:12:f8:30:05:2c:31:94:4d:3d:cb:
87:f7:d5:9b:61:d6:6e:a5:08:29:10:ee:ee:00:e6:a6:6f:68:
13:31:b2:a3:69:44:38:6e:20:81:26:13:5a:d9:0d:9d:3a:7b:
5c:44:2e:95:9d:98:12:b7:72:3d:34:48:e2:23:4f:c7:f5:11:
20:00:a5:22:33:61:3a:52:b3:c6:4f:62:27:36:85:45:04:92:
9d:2d:e4:01:26:bb:b9:de:05:c7:61:bc:9d:bb:70:4d:7f:84:
52:f0:6c:63:bd:d2:d5:00:82:ce:53:71:a3:3b:33:57:95:d6:
53:35:84:d7:ce:49:8c:38:62:e6:7d:33:c4:dd:9a:6a:0c:4c:
ce:eb:6c:1e:95:d7:01:24:10:7a:ab:f3:b2:ad:26:6f:e2:df:
47:d1:52:d8:df:c7:d5:ef:5c:55:5a:32:a6:02:e3:ef:6a:fc:
35:53:0e:f6:05:97:99:1b:50:5b:92:bb:3f:e4:80:08:b9:43:
a6:4e:2e:14
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgISAaEdGrg1FUOhnpjcxkZKMUsxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYxMDA4MjAwMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDZhYzI3YjM4N2QxYjZhOGY0YTIwZWU2MWU5NzE2N2Q3MDI2MDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWogJ4zSHcaTiY6XXdh7iSh3GAWq
oLThyWrWpfYAUeXhZX61ADyoklxNc9P4UJ/VTsj9o6TTDtI8jdNSMwPtLjIpc+Mz
U1C8dsl3qNKKd6GeRSwP63VXFupzPc7JLtbzLAyWc/CVnhqjurs0w2q0hCumKLhg
64hjCrWSGRafAAiVHTJUrVCjdVnoQv921CBqL69CvXRK0rfVafykk6AjUaUyprpk
4331hOzgeU1BL8uD5auQgEWxptglz8Ap/qa0j/QGeQklwMjKdCg4JNKg40FZAag7
eqi7qAFkfMvC31R8HjM3YjB43jZAWuhfjGRo70ztRGBQzvROn4QLy47LmwIDAQAB
o4ICvDCCArgwHQYDVR0OBBYEFOBqwns4fRtqj0og7mHpcWfXAmBLMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvNEdyQ2V6aDlHMnFQU2lEdVllbHhaOWNDWUVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHRBggrBgEFBQcBBwEB/wSBwTCBvjCBuwQCAAEwgbQDBAIC
GhADBAICGhwDBAICGnQDBAACGp4DBAMCGsADBAICGvgDBAECGxIDBAIfTBADBAIf
TCwDBAIfTEgDBAIfTGADBAIfTOADBAIfTYQDBAEfTa4DBAAfTdoDBAAfTd8DBAJN
72ADBAKQH2ADBAGQH5oDBAKQH7QDBAGQH7wDBAGQH8gDBAGQH8wDBAGQH/oDBAGW
8VoDBAGz/qQDBAG5uHgDBAG/2doDBAG/2eIDBAG/2eYwDQYJKoZIhvcNAQELBQAD
ggEBAIZb9zLgoPVwLv4uxxpj0msstL3egnd05VYb23VihwfHLLy+C0y1AxiiidOp
osgXNb0h1/Z7gf5WJMJquaSOEvgwBSwxlE09y4f31Zth1m6lCCkQ7u4A5qZvaBMx
sqNpRDhuIIEmE1rZDZ06e1xELpWdmBK3cj00SOIjT8f1ESAApSIzYTpSs8ZPYic2
hUUEkp0t5AEmu7neBcdhvJ27cE1/hFLwbGO90tUAgs5TcaM7M1eV1lM1hNfOSYw4
YuZ9M8TdmmoMTM7rbB6V1wEkEHqr87KtJm/i30fRUtjfx9XvXFVaMqYC4+9q/DVT
DvYFl5kbUFuSuz/kgAi5Q6ZOLhQ=
-----END CERTIFICATE-----
Generated at Mon Oct 26 02:20:28 2026 by rpki-client