Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5X3gjyFbOLzsogz59HWACnEYOJg.roa
File: 5X3gjyFbOLzsogz59HWACnEYOJg.roa (raw, json)
Hash identifier: k/ZbB6s5+dpDz0tz+vOOS5TTUlnWjJpiJ/t4xelUGrk=
Subject key identifier: E5:7D:E0:8F:21:5B:38:BC:EC:A2:0C:F9:F4:75:80:0A:71:18:38:98
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FB9878EDE84313CC1C8CD9B4BFD50E916
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5X3gjyFbOLzsogz59HWACnEYOJg.roa
Signing time: Fri 31 Jul 2026 18:54:56 +0000
ROA not before: Fri 31 Jul 2026 18:54:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 2.26.157.0/24 maxlen: 24
2.26.164.0/24 maxlen: 24
2.26.253.0/24 maxlen: 24
2.27.151.0/24 maxlen: 24
2.27.251.0/24 maxlen: 24
13.143.100.0/22 maxlen: 24
13.143.121.0/24 maxlen: 24
13.143.126.0/24 maxlen: 24
31.76.178.0/23 maxlen: 24
31.76.238.0/23 maxlen: 24
31.76.248.0/24 maxlen: 24
31.77.117.0/24 maxlen: 24
31.77.118.0/24 maxlen: 24
144.31.10.0/24 maxlen: 24
177.202.124.0/23 maxlen: 24
179.198.36.0/22 maxlen: 24
179.198.40.0/22 maxlen: 24
191.223.132.0/22 maxlen: 24
201.14.230.0/24 maxlen: 24
201.14.241.0/24 maxlen: 24
201.14.247.0/24 maxlen: 24
201.14.248.0/24 maxlen: 24
201.24.162.0/23 maxlen: 24
201.24.168.0/23 maxlen: 24
201.24.174.0/23 maxlen: 24
201.24.178.0/23 maxlen: 24
201.24.182.0/23 maxlen: 24
201.24.186.0/23 maxlen: 24
201.25.160.0/23 maxlen: 24
201.25.164.0/23 maxlen: 24
201.25.166.0/23 maxlen: 24
201.25.168.0/23 maxlen: 24
201.25.170.0/23 maxlen: 24
201.25.172.0/23 maxlen: 24
201.25.176.0/23 maxlen: 24
201.25.178.0/23 maxlen: 24
201.25.184.0/23 maxlen: 24
201.25.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 22:57:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b9:87:8e:de:84:31:3c:c1:c8:cd:9b:4b:fd:50:e9:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 31 18:54:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e57de08f215b38bceca20cf9f475800a71183898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:32:2f:b1:a3:2b:10:80:ca:23:ce:84:75:31:
89:bb:64:bc:9e:7e:64:71:e2:fb:57:cd:08:a6:b6:
4f:1a:90:da:79:82:32:0e:b0:dd:9a:6c:70:a9:1c:
b6:ad:64:75:93:7e:29:9d:5f:e0:ef:c5:f0:fb:34:
f9:16:60:31:37:0a:2e:a7:1e:f6:98:e7:d6:ac:fc:
a9:7c:40:46:83:8a:dc:ac:dd:93:1b:28:74:58:3f:
f6:8c:a3:39:d1:ec:0f:27:2d:df:37:6b:b4:7f:84:
55:1f:26:de:d6:49:fd:bb:cf:1d:0f:7d:fa:2b:2e:
97:44:29:80:ff:23:40:12:25:4d:2a:2f:3b:67:7a:
bc:4b:e3:e2:54:8c:7a:ac:1c:44:d4:b8:27:2d:63:
15:88:de:82:7b:6a:c3:d9:41:f4:4d:a1:f0:3e:24:
5f:87:6b:93:83:80:28:7d:62:1b:b2:ef:da:fc:a9:
f2:92:4a:f1:6c:b2:02:66:b1:7f:d2:68:ce:4e:73:
d0:58:f2:b7:9c:a3:fa:ad:00:2a:67:f3:eb:64:2b:
33:ba:b4:32:85:65:03:5f:cc:e3:bd:76:27:7d:c9:
7e:ee:bf:b7:d2:68:27:23:bc:3b:73:c2:97:ea:a0:
e5:4c:fb:fe:56:8d:a6:cd:5b:cd:2a:5d:29:0c:5b:
c8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7D:E0:8F:21:5B:38:BC:EC:A2:0C:F9:F4:75:80:0A:71:18:38:98
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5X3gjyFbOLzsogz59HWACnEYOJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.157.0/24
2.26.164.0/24
2.26.253.0/24
2.27.151.0/24
2.27.251.0/24
13.143.100.0/22
13.143.121.0/24
13.143.126.0/24
31.76.178.0/23
31.76.238.0/23
31.76.248.0/24
31.77.117.0-31.77.118.255
144.31.10.0/24
177.202.124.0/23
179.198.36.0-179.198.43.255
191.223.132.0/22
201.14.230.0/24
201.14.241.0/24
201.14.247.0-201.14.248.255
201.24.162.0/23
201.24.168.0/23
201.24.174.0/23
201.24.178.0/23
201.24.182.0/23
201.24.186.0/23
201.25.160.0/23
201.25.164.0-201.25.173.255
201.25.176.0/22
201.25.184.0/23
201.25.188.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:38:81:fb:f0:d3:31:a8:ff:45:db:5a:5c:24:92:53:bb:c3:
ef:94:e4:ce:fd:0d:c8:b9:35:3e:5c:ec:97:fb:c4:67:ba:61:
e3:93:04:4f:42:e5:95:bd:ec:2e:a9:12:d9:f5:5f:7c:59:e0:
67:c5:df:6f:e5:5d:17:b4:54:50:50:9d:c5:a8:c7:87:a5:45:
ca:f3:9f:ba:c4:45:3a:93:f5:49:7b:6e:d5:e4:44:15:2b:ab:
10:d1:47:6b:fc:2e:10:ca:bd:d1:e6:fb:07:51:fa:b3:c2:7f:
65:50:c8:57:93:e3:b5:8a:f2:03:e9:e6:1f:92:37:ea:3e:36:
c5:2a:f1:c9:26:77:04:39:a8:49:08:4f:56:ee:e9:e7:dc:d0:
da:04:b4:ed:c1:89:a9:86:ac:b0:77:5e:83:dd:d4:62:2d:d6:
6a:e0:2f:8c:14:f8:e7:17:8c:99:27:f8:a9:6b:dc:ef:69:ae:
a8:84:00:dd:44:e3:71:c7:fd:86:ac:9d:d4:9c:7c:67:dd:cc:
00:fe:15:88:d1:7f:d6:43:9a:f7:32:1f:38:8d:21:92:d1:39:
56:8c:e5:8b:4f:93:f7:41:1e:13:f3:3f:c5:c4:f1:27:ac:93:
06:20:d7:e8:b5:20:fb:c6:92:55:e8:ea:68:f4:15:5c:2e:17:
1f:cf:50:43
-----BEGIN CERTIFICATE-----
MIIF0DCCBLigAwIBAgISAZ+5h47ehDE8wcjNm0v9UOkWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNzMxMTg1NDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTdkZTA4ZjIxNWIzOGJjZWNhMjBjZjlmNDc1ODAwYTcxMTgzODk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zIvsaMrEIDKI86EdTGJu2S8nn5k
ceL7V80IprZPGpDaeYIyDrDdmmxwqRy2rWR1k34pnV/g78Xw+zT5FmAxNwoupx72
mOfWrPypfEBGg4rcrN2TGyh0WD/2jKM50ewPJy3fN2u0f4RVHybe1kn9u88dD336
Ky6XRCmA/yNAEiVNKi87Z3q8S+PiVIx6rBxE1LgnLWMViN6Ce2rD2UH0TaHwPiRf
h2uTg4AofWIbsu/a/KnykkrxbLICZrF/0mjOTnPQWPK3nKP6rQAqZ/PrZCszurQy
hWUDX8zjvXYnfcl+7r+30mgnI7w7c8KX6qDlTPv+Vo2mzVvNKl0pDFvIEQIDAQAB
o4IC3DCCAtgwHQYDVR0OBBYEFOV94I8hWzi87KIM+fR1gApxGDiYMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvNVgzZ2p5RmJPTHpzb2d6NTlIV0FDbkVZT0pnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHxBggrBgEFBQcBBwEB/wSB4TCB3jCB2wQCAAEwgdQDBAAC
Gp0DBAACGqQDBAACGv0DBAACG5cDBAACG/sDBAINj2QDBAANj3kDBAANj34DBAEf
TLIDBAEfTO4DBAAfTPgwDAMEAB9NdQMEAB9NdgMEAJAfCgMEAbHKfDAMAwQCs8Yk
AwQCs8YoAwQCv9+EAwQAyQ7mAwQAyQ7xMAwDBADJDvcDBADJDvgDBAHJGKIDBAHJ
GKgDBAHJGK4DBAHJGLIDBAHJGLYDBAHJGLoDBAHJGaAwDAMEAskZpAMEAckZrAME
AskZsAMEAckZuAMEAckZvDANBgkqhkiG9w0BAQsFAAOCAQEAujiB+/DTMaj/Rdta
XCSSU7vD75Tkzv0NyLk1Plzsl/vEZ7ph45MET0Lllb3sLqkS2fVffFngZ8Xfb+Vd
F7RUUFCdxajHh6VFyvOfusRFOpP1SXtu1eREFSurENFHa/wuEMq90eb7B1H6s8J/
ZVDIV5PjtYryA+nmH5I36j42xSrxySZ3BDmoSQhPVu7p59zQ2gS07cGJqYassHde
g93UYi3WauAvjBT45xeMmSf4qWvc72muqIQA3UTjccf9hqyd1Jx8Z93MAP4ViNF/
1kOa9zIfOI0hktE5Vozli0+T90EeE/M/xcTxJ6yTBiDX6LUg+8aSVejqaPQVXC4X
H89QQw==
-----END CERTIFICATE-----
Generated at Tue Aug 4 07:39:22 2026 by rpki-client