Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7pJpi8LIG7yyvsW5QEOmDo5TBg8.roa
File: 7pJpi8LIG7yyvsW5QEOmDo5TBg8.roa (raw, json)
Hash identifier: BVn4M0CAW5bFCS87wU2FIJWksJppf3xy2Wk9ogjszl8=
Subject key identifier: EE:92:69:8B:C2:C8:1B:BC:B2:BE:C5:B9:40:43:A6:0E:8E:53:06:0F
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019ECC5E0775E47BFEDFC00BCACF39B000A5
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7pJpi8LIG7yyvsW5QEOmDo5TBg8.roa
Signing time: Mon 15 Jun 2026 17:39:34 +0000
ROA not before: Mon 15 Jun 2026 17:39:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213520
IP address blocks: 2.26.24.0/22 maxlen: 24
2.26.76.0/23 maxlen: 24
2.27.24.0/23 maxlen: 24
2.27.28.0/22 maxlen: 24
31.77.160.0/22 maxlen: 24
31.77.226.0/24 maxlen: 24
64.188.68.0/22 maxlen: 24
64.188.74.0/24 maxlen: 24
64.188.104.0/22 maxlen: 24
77.239.120.0/23 maxlen: 24
144.31.16.0/23 maxlen: 24
144.31.18.0/23 maxlen: 24
144.31.62.0/23 maxlen: 24
144.31.84.0/23 maxlen: 24
144.31.116.0/23 maxlen: 24
144.31.118.0/23 maxlen: 24
144.31.122.0/23 maxlen: 24
144.31.134.0/23 maxlen: 24
144.31.138.0/23 maxlen: 24
144.31.196.0/23 maxlen: 24
144.31.232.0/24 maxlen: 24
144.31.233.0/24 maxlen: 24
150.241.64.0/24 maxlen: 24
150.241.78.0/23 maxlen: 24
193.23.197.0/24 maxlen: 24
193.23.210.0/23 maxlen: 24
193.23.218.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cc:5e:07:75:e4:7b:fe:df:c0:0b:ca:cf:39:b0:00:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 15 17:39:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee92698bc2c81bbcb2bec5b94043a60e8e53060f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:83:e3:b6:fc:e9:6b:a9:8f:07:39:65:7c:fa:
c4:a6:20:22:3a:96:46:12:05:5e:b0:0b:f8:cb:20:
96:63:45:e2:3e:ff:54:b3:a7:83:cf:77:5f:69:d1:
72:87:5c:1b:d9:60:3e:68:cc:77:32:2d:a4:bf:dd:
8f:df:4f:ab:8e:ad:87:58:d3:47:a1:64:79:93:21:
62:be:8e:1f:d9:3c:14:8d:9c:22:b3:b1:16:a0:e2:
8b:82:2d:7e:aa:eb:d4:ab:cd:ca:c4:9a:11:4a:cf:
65:3c:21:ce:c4:93:fe:a7:18:9a:97:0f:1b:4a:b5:
e0:e9:e0:8d:07:dd:4b:ff:e2:38:4c:d7:1b:6a:e2:
d5:16:a8:2f:f2:99:fc:1e:79:83:87:39:69:eb:a8:
8b:d6:9f:f9:36:35:27:8d:88:5d:d1:0a:60:ff:5c:
99:f9:d2:2c:17:33:4a:71:d7:63:7b:3e:f4:48:6b:
02:6b:e5:78:0f:d2:cb:a8:a2:ef:23:08:c8:42:f1:
6f:09:1f:bd:6e:f9:69:3c:65:65:9d:f7:00:d6:b0:
23:d8:0e:ab:a6:50:2a:cf:ae:15:ee:f5:70:e8:8a:
bc:d5:bc:e6:63:07:d0:a1:22:a7:e0:cd:18:7b:0d:
89:36:64:d0:92:e1:73:00:e8:b5:8d:12:c0:50:f8:
86:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:92:69:8B:C2:C8:1B:BC:B2:BE:C5:B9:40:43:A6:0E:8E:53:06:0F
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7pJpi8LIG7yyvsW5QEOmDo5TBg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.24.0/22
2.26.76.0/23
2.27.24.0/23
2.27.28.0/22
31.77.160.0/22
31.77.226.0/24
64.188.68.0/22
64.188.74.0/24
64.188.104.0/22
77.239.120.0/23
144.31.16.0/22
144.31.62.0/23
144.31.84.0/23
144.31.116.0/22
144.31.122.0/23
144.31.134.0/23
144.31.138.0/23
144.31.196.0/23
144.31.232.0/23
150.241.64.0/24
150.241.78.0/23
193.23.197.0/24
193.23.210.0/23
193.23.218.0/23
Signature Algorithm: sha256WithRSAEncryption
38:ee:c0:35:d7:81:ed:15:42:c1:9f:dd:d8:81:e3:2f:04:d8:
51:e2:79:8b:59:3a:95:1a:a4:83:b6:a2:1b:cd:5b:3c:07:a9:
6a:27:40:c8:95:5d:59:19:62:69:a3:83:9d:6e:0a:03:38:f5:
7c:25:b2:7f:e1:c7:b6:b7:40:00:c6:a8:61:61:d9:c6:b9:df:
b1:bd:fa:81:36:f7:9e:23:7d:ae:9d:9c:6b:79:cc:76:0f:2e:
9e:24:fa:46:55:61:f4:a2:5f:06:28:21:28:46:73:a9:ce:bf:
4f:7d:1c:aa:17:ec:69:20:0a:41:94:6f:78:b6:cf:b0:70:e6:
6b:82:6d:ed:69:d6:74:fe:11:73:77:df:b7:f8:77:39:fd:6f:
d8:7b:ca:09:a4:e5:66:93:4e:05:38:30:ec:2b:e9:e3:9d:88:
00:de:01:2b:f7:84:a5:30:90:62:5e:e7:1a:95:c7:9a:0a:99:
f2:b9:34:38:fc:0c:f1:98:d8:a3:78:8e:42:0b:37:c7:01:98:
2e:42:58:39:61:38:eb:bd:10:58:f4:2e:7b:95:21:ce:31:0d:
4a:2c:12:68:15:08:85:f9:d9:2e:02:8d:79:bf:38:fb:36:d3:
bc:43:c2:4e:46:57:d6:ed:db:91:4e:c3:15:bc:95:bf:67:f4:
08:20:73:70
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgISAZ7MXgd15Hv+38ALys85sAClMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNjE1MTczOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTkyNjk4YmMyYzgxYmJjYjJiZWM1Yjk0MDQzYTYwZThlNTMwNjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YPjtvzpa6mPBzllfPrEpiAiOpZG
EgVesAv4yyCWY0XiPv9Us6eDz3dfadFyh1wb2WA+aMx3Mi2kv92P30+rjq2HWNNH
oWR5kyFivo4f2TwUjZwis7EWoOKLgi1+quvUq83KxJoRSs9lPCHOxJP+pxialw8b
SrXg6eCNB91L/+I4TNcbauLVFqgv8pn8HnmDhzlp66iL1p/5NjUnjYhd0Qpg/1yZ
+dIsFzNKcddjez70SGsCa+V4D9LLqKLvIwjIQvFvCR+9bvlpPGVlnfcA1rAj2A6r
plAqz64V7vVw6Iq81bzmYwfQoSKn4M0Yew2JNmTQkuFzAOi1jRLAUPiGUQIDAQAB
o4ICmDCCApQwHQYDVR0OBBYEFO6SaYvCyBu8sr7FuUBDpg6OUwYPMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvN3BKcGk4TElHN3l5dnNXNVFFT21EbzVUQmc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZADBAIC
GhgDBAECGkwDBAECGxgDBAICGxwDBAIfTaADBAAfTeIDBAJAvEQDBABAvEoDBAJA
vGgDBAFN73gDBAKQHxADBAGQHz4DBAGQH1QDBAKQH3QDBAGQH3oDBAGQH4YDBAGQ
H4oDBAGQH8QDBAGQH+gDBACW8UADBAGW8U4DBADBF8UDBAHBF9IDBAHBF9owDQYJ
KoZIhvcNAQELBQADggEBADjuwDXXge0VQsGf3diB4y8E2FHieYtZOpUapIO2ohvN
WzwHqWonQMiVXVkZYmmjg51uCgM49Xwlsn/hx7a3QADGqGFh2ca537G9+oE2954j
fa6dnGt5zHYPLp4k+kZVYfSiXwYoIShGc6nOv099HKoX7GkgCkGUb3i2z7Bw5muC
be1p1nT+EXN337f4dzn9b9h7ygmk5WaTTgU4MOwr6eOdiADeASv3hKUwkGJe5xqV
x5oKmfK5NDj8DPGY2KN4jkILN8cBmC5CWDlhOOu9EFj0LnuVIc4xDUosEmgVCIX5
2S4CjXm/OPs207xDwk5GV9bt25FOwxW8lb9n9Aggc3A=
-----END CERTIFICATE-----
Generated at Sat Jun 20 04:04:29 2026 by rpki-client