Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/EnfzJAuTAW8oQfiyzNjm-J7cvMw.roa
File: EnfzJAuTAW8oQfiyzNjm-J7cvMw.roa (raw, json)
Hash identifier: KsvuFkuvOlwN5a3lmp97LCQ77ReYtebO2ffdXKQugVM=
Subject key identifier: 12:77:F3:24:0B:93:01:6F:28:41:F8:B2:CC:D8:E6:F8:9E:DC:BC:CC
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019C67A8FA73E4FDEA925E09AD85CEAB7405
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/EnfzJAuTAW8oQfiyzNjm-J7cvMw.roa
Signing time: Mon 16 Feb 2026 18:14:13 +0000
ROA not before: Mon 16 Feb 2026 18:14:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401152
IP address blocks: 77.239.100.0/22 maxlen: 24
77.239.112.0/22 maxlen: 24
144.31.8.0/23 maxlen: 24
144.31.15.0/24 maxlen: 24
144.31.109.0/24 maxlen: 24
144.31.110.0/24 maxlen: 24
144.31.160.0/22 maxlen: 24
144.31.235.0/24 maxlen: 24
144.31.236.0/24 maxlen: 24
150.241.69.0/24 maxlen: 24
150.241.86.0/24 maxlen: 24
193.23.192.0/24 maxlen: 24
193.23.198.0/24 maxlen: 24
193.23.204.0/22 maxlen: 22
193.23.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Feb 2026 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:67:a8:fa:73:e4:fd:ea:92:5e:09:ad:85:ce:ab:74:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Feb 16 18:14:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1277f3240b93016f2841f8b2ccd8e6f89edcbccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:13:ac:da:db:71:0a:e9:de:f0:e9:5a:81:fb:
1a:16:56:e6:ab:0e:b7:e7:fe:a7:d6:6c:3e:41:42:
ad:f7:67:e0:62:33:71:3d:df:8f:91:53:0c:6c:0c:
89:ae:2f:56:98:f5:d7:9f:0e:c2:e5:97:88:ce:3d:
08:eb:06:60:64:f3:54:4e:36:be:fa:77:04:36:57:
84:98:4f:23:f3:82:c1:16:1d:4a:da:d8:3d:88:d8:
bf:ae:23:44:9a:9b:8b:a4:14:ab:23:65:14:41:67:
4d:47:30:3d:05:25:06:12:01:c9:3a:5c:50:05:57:
6e:79:76:bb:96:b1:09:37:f3:bf:f4:2d:1b:5b:bb:
38:dc:4e:f9:14:91:b4:98:8e:27:77:a2:37:97:10:
4f:7b:26:b1:89:74:20:c3:7b:88:dc:a8:18:a6:54:
a0:ea:69:8a:ee:27:e6:66:90:4a:40:db:46:85:cb:
bd:b8:9c:0c:4a:6b:91:65:00:cd:69:f0:e0:40:7a:
c9:ac:e3:f8:d5:23:ba:7b:86:61:8d:e0:40:17:32:
c6:6e:a2:bc:95:65:ce:b0:75:68:2b:e3:e4:e1:da:
34:fc:b8:72:29:ca:e2:fa:82:9b:9c:7e:6a:d9:a2:
9f:43:f0:76:a5:f3:bf:4c:13:8d:28:2d:c8:f6:82:
f3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:77:F3:24:0B:93:01:6F:28:41:F8:B2:CC:D8:E6:F8:9E:DC:BC:CC
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/EnfzJAuTAW8oQfiyzNjm-J7cvMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.239.100.0/22
77.239.112.0/22
144.31.8.0/23
144.31.15.0/24
144.31.109.0-144.31.110.255
144.31.160.0/22
144.31.235.0-144.31.236.255
150.241.69.0/24
150.241.86.0/24
193.23.192.0/24
193.23.198.0/24
193.23.204.0/22
193.23.212.0/22
Signature Algorithm: sha256WithRSAEncryption
02:5b:df:6b:09:3b:a8:c2:26:dc:96:b0:9c:66:5e:0a:2f:b7:
16:78:07:a7:a5:72:fa:1e:89:ec:aa:53:d0:5c:14:31:6c:33:
86:fc:59:64:b5:26:fc:9f:77:d9:9b:b6:91:d0:13:93:7e:ab:
29:91:77:cd:e0:c8:1b:06:27:3c:c2:8c:a2:17:76:89:34:ec:
f5:e3:85:83:95:78:3a:11:84:2c:0d:9a:76:9e:ef:fb:bd:3f:
10:14:d3:a4:d2:68:0d:34:40:ec:4c:89:b0:bd:a6:90:dd:3d:
db:f0:6b:9a:6d:f6:f4:b6:be:a2:6e:71:20:f0:e2:4c:73:cc:
a7:4c:9b:3d:3b:b9:b1:4f:f1:55:c2:24:77:2f:8f:b5:40:70:
12:98:23:84:37:ee:f2:e3:0b:93:75:18:3f:66:a1:32:63:2e:
ac:11:3b:e4:a5:31:fb:b6:c0:b7:e6:70:42:9c:f5:de:fb:2d:
67:5a:b7:60:50:66:1f:29:77:a6:b5:60:d5:2c:0d:1a:1c:63:
a4:4d:e9:fe:69:ca:e5:35:02:7f:73:cd:ef:a4:14:8f:e9:19:
9b:b4:52:a1:f3:5d:45:bf:1c:d4:14:87:cc:e8:96:19:0f:fc:
fc:8c:b9:91:eb:e6:b9:f8:dc:4f:da:38:0b:f5:cd:61:a4:90:
7b:f3:f0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 17 09:29:38 2026 by rpki-client