Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/EEjH2k-hFvmlRDxzC1xXMh9iubE.roa
File: EEjH2k-hFvmlRDxzC1xXMh9iubE.roa (raw, json)
Hash identifier: 4QBjCtISU5EYu+aulrmvPPIffdS22TgH5BTxtu3viuo=
Subject key identifier: 10:48:C7:DA:4F:A1:16:F9:A5:44:3C:73:0B:5C:57:32:1F:62:B9:B1
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A08CFB84975956F500DA4AF47FE4F77BC4
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/EEjH2k-hFvmlRDxzC1xXMh9iubE.roa
Signing time: Thu 10 Sep 2026 20:21:28 +0000
ROA not before: Thu 10 Sep 2026 20:21:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201988
IP address blocks: 2.26.122.0/24 maxlen: 24
2.26.123.0/24 maxlen: 24
2.26.224.0/24 maxlen: 24
2.26.225.0/24 maxlen: 24
2.26.226.0/24 maxlen: 24
2.26.227.0/24 maxlen: 24
13.143.132.0/24 maxlen: 24
13.143.133.0/24 maxlen: 24
13.143.166.0/24 maxlen: 24
13.143.167.0/24 maxlen: 24
31.76.30.0/24 maxlen: 24
31.76.94.0/24 maxlen: 24
31.76.100.0/23 maxlen: 24
31.76.102.0/23 maxlen: 24
31.76.244.0/24 maxlen: 24
31.76.245.0/24 maxlen: 24
31.76.251.0/24 maxlen: 24
31.76.252.0/24 maxlen: 24
144.31.53.0/24 maxlen: 24
144.31.148.0/24 maxlen: 24
144.31.169.0/24 maxlen: 24
144.31.223.0/24 maxlen: 24
144.31.238.0/24 maxlen: 24
179.198.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:fb:84:97:59:56:f5:00:da:4a:f4:7f:e4:f7:7b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 10 20:21:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1048c7da4fa116f9a5443c730b5c57321f62b9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2f:d0:1d:51:ae:1e:87:5c:75:e4:52:0a:54:
1f:a3:7a:4f:d3:a3:cd:7d:1b:4a:79:b4:11:04:4a:
bf:a5:8d:ad:99:9f:3f:44:99:b9:05:09:dc:44:99:
58:1d:42:3f:10:af:08:4d:7d:62:14:db:2f:4f:e6:
0d:ce:d0:11:4b:51:e8:bb:66:7e:aa:ae:fa:12:53:
d1:e9:ef:8a:ff:52:c3:69:26:10:bb:f8:88:5c:b4:
b1:a4:50:8f:c4:a5:92:1c:d0:77:30:f6:4c:21:32:
2f:bf:11:af:ed:e3:dd:2b:46:77:ca:5e:d7:25:cb:
ec:e5:ca:b5:0b:90:cc:3f:58:86:6f:51:8f:45:bf:
08:6f:66:38:20:c6:af:cc:59:97:ac:18:a3:d2:a6:
19:d0:98:70:64:e7:b7:26:a3:3d:42:4c:d5:f4:54:
24:24:b1:02:dc:2b:b0:63:cc:56:9c:41:cc:47:47:
3f:0c:dc:a8:66:ba:72:ae:ea:fa:60:47:49:ef:38:
15:85:6a:ef:61:b4:d7:0f:ae:ee:d5:e4:1f:91:43:
96:da:10:ac:9a:d8:2e:b1:f3:8e:5e:98:5b:5c:20:
a2:15:65:3d:4c:10:f5:11:50:54:78:20:0e:c2:11:
47:71:e7:f2:de:f5:b0:c2:b0:04:1c:2c:f7:62:03:
2d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:48:C7:DA:4F:A1:16:F9:A5:44:3C:73:0B:5C:57:32:1F:62:B9:B1
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/EEjH2k-hFvmlRDxzC1xXMh9iubE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.122.0/23
2.26.224.0/22
13.143.132.0/23
13.143.166.0/23
31.76.30.0/24
31.76.94.0/24
31.76.100.0/22
31.76.244.0/23
31.76.251.0-31.76.252.255
144.31.53.0/24
144.31.148.0/24
144.31.169.0/24
144.31.223.0/24
144.31.238.0/24
179.198.48.0/24
Signature Algorithm: sha256WithRSAEncryption
47:94:eb:f1:c3:2b:1a:e6:17:63:a1:2f:bd:5b:52:db:fc:68:
33:23:fe:31:08:fd:d3:8d:9d:27:19:10:bd:6d:b5:0a:0a:f7:
60:92:02:19:f9:1d:b4:5c:b0:3f:e0:e1:fe:a9:6a:83:d0:d6:
fc:b9:64:99:e5:08:9d:4f:6e:f1:68:06:63:e0:1e:6f:c4:6b:
55:ee:97:9e:62:06:6d:42:fd:b1:07:1b:51:7f:6f:7b:2d:8c:
ff:66:23:d5:6e:9a:37:52:be:d5:f7:30:a0:af:4a:5a:32:4d:
d9:1f:b2:f6:a6:ad:00:9d:19:a1:e6:8c:1a:a8:04:3d:df:43:
5f:42:8c:7c:10:ce:7a:9c:ce:66:d2:fe:8a:f6:ee:63:08:89:
c1:43:90:fb:37:6d:20:28:b2:f2:5b:74:f7:f7:7b:27:c6:6e:
c0:ab:c0:ce:2d:0e:c3:07:ba:3c:f6:e4:a1:9b:32:af:01:cf:
61:aa:47:9b:51:b4:e9:1e:84:1d:38:a0:17:91:5f:f8:de:72:
d2:81:ac:2d:5d:da:4c:1e:4f:b5:c1:ff:93:19:78:1a:e3:a4:
53:91:d7:a0:e4:f5:8e:be:0b:4a:ce:b1:68:75:a5:27:c1:93:
20:91:8d:0d:06:64:9f:c3:ff:2a:38:77:82:39:0d:e5:27:3a:
95:d4:c4:07
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgISAaCM+4SXWVb1ANpK9H/k93vEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwOTEwMjAyMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDQ4YzdkYTRmYTExNmY5YTU0NDNjNzMwYjVjNTczMjFmNjJiOWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS/QHVGuHodcdeRSClQfo3pP06PN
fRtKebQRBEq/pY2tmZ8/RJm5BQncRJlYHUI/EK8ITX1iFNsvT+YNztARS1Hou2Z+
qq76ElPR6e+K/1LDaSYQu/iIXLSxpFCPxKWSHNB3MPZMITIvvxGv7ePdK0Z3yl7X
Jcvs5cq1C5DMP1iGb1GPRb8Ib2Y4IMavzFmXrBij0qYZ0JhwZOe3JqM9QkzV9FQk
JLEC3CuwY8xWnEHMR0c/DNyoZrpyrur6YEdJ7zgVhWrvYbTXD67u1eQfkUOW2hCs
mtgusfOOXphbXCCiFWU9TBD1EVBUeCAOwhFHcefy3vWwwrAEHCz3YgMtTQIDAQAB
o4ICZTCCAmEwHQYDVR0OBBYEFBBIx9pPoRb5pUQ8cwtcVzIfYrmxMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvRUVqSDJrLWhGdm1sUkR4ekMxeFhNaDlpdWJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAATBiAwQBAhp6AwQC
AhrgAwQBDY+EAwQBDY+mAwQAH0weAwQAH0xeAwQCH0xkAwQBH0z0MAwDBAAfTPsD
BAAfTPwDBACQHzUDBACQH5QDBACQH6kDBACQH98DBACQH+4DBACzxjAwDQYJKoZI
hvcNAQELBQADggEBAEeU6/HDKxrmF2OhL71bUtv8aDMj/jEI/dONnScZEL1ttQoK
92CSAhn5HbRcsD/g4f6paoPQ1vy5ZJnlCJ1PbvFoBmPgHm/Ea1Xul55iBm1C/bEH
G1F/b3stjP9mI9VumjdSvtX3MKCvSloyTdkfsvamrQCdGaHmjBqoBD3fQ19CjHwQ
znqczmbS/or27mMIicFDkPs3bSAosvJbdPf3eyfGbsCrwM4tDsMHujz25KGbMq8B
z2GqR5tRtOkehB04oBeRX/jectKBrC1d2kweT7XB/5MZeBrjpFOR16Dk9Y6+C0rO
sWh1pSfBkyCRjQ0GZJ/D/yo4d4I5DeUnOpXUxAc=
-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:28 2026 by rpki-client