Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9z2e1LKm4lqd3jIjniuca834u9M.roa
File: 9z2e1LKm4lqd3jIjniuca834u9M.roa (raw, json)
Hash identifier: nVsFgiwa/oW/78Kb0zi+b2JIrvsq1C6HAFF5wGd9SeA=
Subject key identifier: F7:3D:9E:D4:B2:A6:E2:5A:9D:DE:32:23:9E:2B:9C:6B:CD:F8:BB:D3
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FC8673E014950D1BAAFEE72A8592266EB
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9z2e1LKm4lqd3jIjniuca834u9M.roa
Signing time: Mon 03 Aug 2026 16:13:57 +0000
ROA not before: Mon 03 Aug 2026 16:13:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 2.26.167.0/24 maxlen: 24
2.26.170.0/24 maxlen: 24
2.26.189.0/24 maxlen: 24
2.27.82.0/24 maxlen: 24
2.27.103.0/24 maxlen: 24
2.27.140.0/23 maxlen: 24
2.27.142.0/23 maxlen: 24
2.27.154.0/24 maxlen: 24
2.27.162.0/24 maxlen: 24
2.27.172.0/24 maxlen: 24
2.27.196.0/22 maxlen: 24
2.27.232.0/24 maxlen: 24
2.27.247.0/24 maxlen: 24
2.27.249.0/24 maxlen: 24
31.77.101.0/24 maxlen: 24
31.77.178.0/23 maxlen: 24
31.77.190.0/23 maxlen: 24
31.77.209.0/24 maxlen: 24
31.77.211.0/24 maxlen: 24
31.77.225.0/24 maxlen: 24
31.77.250.0/24 maxlen: 24
31.77.252.0/24 maxlen: 24
144.31.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:67:3e:01:49:50:d1:ba:af:ee:72:a8:59:22:66:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 3 16:13:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f73d9ed4b2a6e25a9dde32239e2b9c6bcdf8bbd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:06:bb:1d:5c:73:60:37:08:f8:ce:5d:99:12:
33:7e:e5:7c:ef:10:da:bf:f6:a4:f9:ed:c4:ff:71:
0c:cc:94:85:05:29:fe:f3:01:bf:a5:35:bc:e1:da:
3c:db:ad:81:bb:29:80:d3:f7:93:7c:c7:46:a6:74:
63:27:80:e2:20:5c:ff:fd:5a:9a:b6:9e:72:66:78:
0d:a8:8a:a0:dc:aa:90:00:97:92:57:d4:32:3f:ab:
57:33:49:47:d8:ad:26:2b:13:5d:63:49:56:2c:dc:
8f:7d:6c:15:c2:20:1d:8f:d8:eb:9b:66:dd:17:fe:
f0:e8:a2:34:ee:e4:fe:c4:af:a0:6e:bc:be:cf:f3:
d7:22:9d:54:7a:d3:60:35:58:6e:c2:94:10:75:cd:
96:97:5e:f2:6e:c3:5b:92:02:de:fc:c7:d9:14:9b:
13:41:60:4d:e3:16:24:46:53:55:5b:d7:1b:c1:cd:
ed:da:12:fe:62:c9:cc:be:75:4d:31:23:47:a5:3c:
0c:3e:14:3c:ab:0e:65:00:4a:7d:a2:49:6d:fa:ef:
0d:76:ce:a0:9b:81:78:0c:26:21:6e:5b:2a:2e:41:
19:8a:9a:3a:ee:d5:23:f2:ba:78:1a:36:55:12:6f:
2a:8b:5f:9e:ab:9b:db:93:11:8b:68:4d:1e:73:c9:
a1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3D:9E:D4:B2:A6:E2:5A:9D:DE:32:23:9E:2B:9C:6B:CD:F8:BB:D3
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9z2e1LKm4lqd3jIjniuca834u9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.167.0/24
2.26.170.0/24
2.26.189.0/24
2.27.82.0/24
2.27.103.0/24
2.27.140.0/22
2.27.154.0/24
2.27.162.0/24
2.27.172.0/24
2.27.196.0/22
2.27.232.0/24
2.27.247.0/24
2.27.249.0/24
31.77.101.0/24
31.77.178.0/23
31.77.190.0/23
31.77.209.0/24
31.77.211.0/24
31.77.225.0/24
31.77.250.0/24
31.77.252.0/24
144.31.145.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:ac:97:05:38:4d:9d:cd:79:6b:70:87:3f:63:81:76:fe:e7:
1a:0f:8b:0d:dd:40:08:3b:28:7b:42:6f:c1:48:03:3e:70:ec:
ee:71:79:76:ef:16:75:09:1a:41:1b:11:98:58:d7:8e:3a:9c:
53:fb:04:23:2c:85:39:38:cc:d0:93:e9:0b:35:1c:cf:52:cd:
7d:96:99:bb:28:ef:b7:7c:08:17:b2:81:9b:9e:8f:f8:f1:ea:
da:45:01:8b:68:f5:9b:19:d6:6f:29:75:5b:d3:c9:8e:2f:e6:
21:76:7d:fd:43:f9:79:d5:4b:a6:ea:eb:57:b3:2a:90:e6:e3:
29:5c:8a:32:89:ee:bc:79:66:52:ca:74:73:c4:7d:b6:4a:10:
28:20:52:9d:14:b2:e7:01:24:da:93:10:4d:77:00:a8:65:48:
ff:c9:ba:6d:43:ab:25:40:eb:21:4f:a6:3b:c7:07:85:4c:34:
72:a1:33:cb:2a:db:fb:e6:8f:18:c7:15:85:82:1a:1b:93:25:
d4:39:19:88:d0:d8:e4:50:53:69:96:85:f5:ae:ec:bd:94:db:
0e:08:23:40:a4:f6:57:58:fc:ad:a9:70:4a:99:c5:72:8b:1a:
d7:b6:65:18:6b:89:a0:8e:f0:49:b4:70:2d:64:c3:ba:da:20:
99:ec:87:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:52:09 2026 by rpki-client