Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HQzih0CMFd6HX5cwTRkfLgOOyQ4.roa
File: HQzih0CMFd6HX5cwTRkfLgOOyQ4.roa (raw, json)
Hash identifier: 0IYu1C2+Dp8toN9+QRa3MVG8LaTQ0zU2BTIZtSgmAm4=
Subject key identifier: 1D:0C:E2:87:40:8C:15:DE:87:5F:97:30:4D:19:1F:2E:03:8E:C9:0E
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0E541E2C3A3F39FD4FABBF5BA782F327F
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HQzih0CMFd6HX5cwTRkfLgOOyQ4.roa
Signing time: Sun 27 Sep 2026 23:44:55 +0000
ROA not before: Sun 27 Sep 2026 23:44:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215590
IP address blocks: 2.26.20.0/22 maxlen: 24
2.26.60.0/22 maxlen: 24
2.26.68.0/22 maxlen: 24
2.26.78.0/23 maxlen: 24
2.26.104.0/21 maxlen: 24
2.27.32.0/21 maxlen: 24
2.27.52.0/23 maxlen: 24
2.27.54.0/23 maxlen: 24
2.27.68.0/22 maxlen: 24
13.143.64.0/22 maxlen: 24
13.143.128.0/23 maxlen: 24
13.143.130.0/23 maxlen: 24
31.76.12.0/22 maxlen: 24
31.76.48.0/22 maxlen: 24
31.76.230.0/23 maxlen: 24
31.77.196.0/22 maxlen: 24
31.77.202.0/23 maxlen: 24
31.77.204.0/23 maxlen: 24
31.77.206.0/23 maxlen: 24
64.188.118.0/23 maxlen: 24
77.239.108.0/22 maxlen: 24
144.31.52.0/24 maxlen: 24
144.31.126.0/24 maxlen: 24
144.31.127.0/24 maxlen: 24
144.31.140.0/22 maxlen: 24
144.31.152.0/23 maxlen: 24
144.31.186.0/23 maxlen: 24
150.241.88.0/23 maxlen: 24
150.241.96.0/22 maxlen: 24
150.241.106.0/23 maxlen: 24
150.241.115.0/24 maxlen: 24
150.241.116.0/24 maxlen: 24
150.241.123.0/24 maxlen: 24
177.1.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:41:e2:c3:a3:f3:9f:d4:fa:bb:f5:ba:78:2f:32:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 27 23:44:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d0ce287408c15de875f97304d191f2e038ec90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:9c:f3:67:c1:90:87:bb:19:e9:b2:aa:4b:99:
2e:c8:1c:2c:1c:bf:70:c4:e3:7b:0d:41:d8:0d:0c:
44:f6:d8:f7:e0:a9:be:74:1e:87:ed:00:37:38:60:
ba:94:ad:b5:72:c2:5e:b0:84:f9:07:a3:3e:86:d5:
72:4f:49:23:a6:e1:b9:5f:58:b8:39:55:f8:cf:5e:
85:81:13:77:32:02:64:58:f2:83:ce:be:c1:e2:95:
8c:97:9b:96:16:dc:31:f4:ca:96:83:96:68:43:5b:
0d:c1:d8:60:66:01:34:66:39:8a:44:bd:82:f4:cc:
9b:aa:20:e2:14:5b:0a:63:70:76:63:f9:ba:a3:8c:
90:b2:55:1f:b6:b5:b4:d0:6a:9b:94:de:eb:0c:c8:
10:5b:d9:a5:02:20:51:fc:7d:91:24:a9:62:d4:71:
33:f0:af:b7:7a:38:ed:32:bb:70:4d:b4:22:4a:c3:
16:b8:94:07:f3:fb:72:8a:40:11:8a:37:da:93:46:
85:9c:58:c8:73:71:2d:f0:36:f3:f5:c1:1e:07:d7:
b9:91:b7:6b:23:73:1f:d8:d1:d8:27:a2:94:77:bc:
93:e1:02:1d:1e:49:b5:cf:a0:62:fa:6e:b6:bf:45:
d5:94:84:6c:b3:f7:25:e6:7e:aa:7f:27:73:93:ba:
43:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0C:E2:87:40:8C:15:DE:87:5F:97:30:4D:19:1F:2E:03:8E:C9:0E
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HQzih0CMFd6HX5cwTRkfLgOOyQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.20.0/22
2.26.60.0/22
2.26.68.0/22
2.26.78.0/23
2.26.104.0/21
2.27.32.0/21
2.27.52.0/22
2.27.68.0/22
13.143.64.0/22
13.143.128.0/22
31.76.12.0/22
31.76.48.0/22
31.76.230.0/23
31.77.196.0/22
31.77.202.0-31.77.207.255
64.188.118.0/23
77.239.108.0/22
144.31.52.0/24
144.31.126.0/23
144.31.140.0/22
144.31.152.0/23
144.31.186.0/23
150.241.88.0/23
150.241.96.0/22
150.241.106.0/23
150.241.115.0-150.241.116.255
150.241.123.0/24
177.1.180.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:1f:fb:94:72:80:dc:6c:56:08:75:eb:c0:a0:54:f1:94:21:
93:1a:85:10:90:b8:5c:f6:ea:8c:b9:d2:39:2f:b4:b1:72:34:
d0:48:96:49:5a:e9:02:85:4a:df:87:ba:1e:8c:5e:c6:43:9a:
97:20:78:de:97:06:2e:18:e9:51:72:2e:d6:4e:f6:2c:a1:5d:
45:10:9e:9a:ab:80:28:46:67:05:da:f7:ec:73:f6:2f:73:99:
53:09:85:61:c1:a6:db:10:d9:74:df:56:ce:03:bd:87:3f:7a:
b8:c6:dd:a4:e2:ef:5b:88:21:5e:46:85:9f:0e:36:58:7a:2f:
66:6c:d0:42:44:5e:34:c3:69:1c:85:cc:44:10:b2:a3:a2:a9:
d0:92:c8:04:45:fc:a0:3e:b6:56:6a:6f:90:4e:d9:80:cc:46:
74:87:c4:19:70:90:bc:48:ad:c2:fb:83:72:ab:44:3f:54:22:
8d:84:0d:8f:bf:dd:3e:22:9a:17:b6:e8:d3:ef:e0:92:82:e3:
fb:94:99:ae:70:85:e5:0c:0e:ec:32:ac:21:e8:b0:e6:a5:81:
cd:6b:4c:87:c0:ff:c8:b3:0d:bd:50:68:a9:3f:86:19:a5:e2:
aa:55:de:d9:b1:95:aa:89:76:60:d7:c3:ea:fd:11:c1:87:f7:
d4:56:2c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:00:52 2026 by rpki-client