Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/J3839DmYrfcJZB1eWt1jyISHK7U.roa
File: J3839DmYrfcJZB1eWt1jyISHK7U.roa (raw, json)
Hash identifier: o3k4dhBnfu7fCPKZfPWx4E9VTE56AtuUdZaj8eKd5UQ=
Subject key identifier: 27:7F:37:F4:39:98:AD:F7:09:64:1D:5E:5A:DD:63:C8:84:87:2B:B5
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A155359C29E59ED7C74ACDCCF1B502DAFF
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/J3839DmYrfcJZB1eWt1jyISHK7U.roa
Signing time: Mon 19 Oct 2026 17:28:59 +0000
ROA not before: Mon 19 Oct 2026 17:28:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202831
IP address blocks: 2.27.98.0/24 maxlen: 24
13.143.134.0/24 maxlen: 24
31.77.232.0/24 maxlen: 24
31.77.251.0/24 maxlen: 24
144.31.34.0/24 maxlen: 24
144.31.222.0/24 maxlen: 24
150.241.69.0/24 maxlen: 24
150.241.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:35:9c:29:e5:9e:d7:c7:4a:cd:cc:f1:b5:02:da:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 19 17:28:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=277f37f43998adf709641d5e5add63c884872bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d5:16:49:6d:93:11:1b:68:02:44:e5:97:c2:
6a:c3:67:3b:51:fc:1e:d1:72:32:54:18:3d:67:88:
2e:80:e1:74:aa:95:ef:0e:3e:3c:2f:bb:3d:94:f7:
3f:71:7d:5e:34:34:e4:99:41:fc:76:b0:b3:35:2a:
ca:15:eb:5e:02:fb:6e:8e:1d:73:e3:70:2f:8c:87:
1e:c0:04:62:6a:8a:d8:bd:8e:49:29:ac:8a:08:55:
84:55:4f:68:b1:0d:53:eb:07:37:61:bb:a3:00:e5:
f0:37:7d:17:65:3d:58:3f:5c:db:3d:65:9e:58:c5:
71:5a:a4:f1:dc:95:c5:3c:ef:f9:f1:83:41:74:47:
12:07:56:3f:aa:f8:ba:70:8f:eb:2b:fe:fe:fe:54:
c3:b2:bc:4c:ca:e0:aa:8a:3c:26:69:30:b5:55:c8:
cf:c5:3e:c0:fb:3b:9e:3a:aa:33:be:99:1c:37:e1:
66:8c:cd:c6:1a:92:84:6d:cf:fc:13:4c:6b:21:ee:
07:81:74:23:60:80:8f:29:b2:7e:09:d1:ef:84:e0:
6a:46:67:b7:ce:0f:4f:5f:03:6d:20:ea:b3:bb:09:
87:13:2e:9c:7d:4a:68:ce:f9:c8:b4:78:2f:6c:aa:
41:ae:6a:77:d2:d9:c2:ff:9e:53:09:5a:c2:7c:45:
91:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7F:37:F4:39:98:AD:F7:09:64:1D:5E:5A:DD:63:C8:84:87:2B:B5
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/J3839DmYrfcJZB1eWt1jyISHK7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.98.0/24
13.143.134.0/24
31.77.232.0/24
31.77.251.0/24
144.31.34.0/24
144.31.222.0/24
150.241.69.0/24
150.241.85.0/24
Signature Algorithm: sha256WithRSAEncryption
47:f9:2a:dd:83:2d:f5:e5:66:09:64:9a:d0:89:08:e7:f3:f2:
1d:cd:9a:72:b6:63:89:0c:86:66:c8:e2:c4:c0:04:0c:5e:3a:
e4:c6:71:69:32:80:36:55:83:f7:3e:01:c5:4e:35:30:e9:89:
5a:5b:4a:00:3f:5a:fc:d7:91:b7:04:a6:27:5a:d5:58:95:ca:
2f:1c:6f:0f:32:3e:40:9b:e8:8c:e2:9d:c6:12:bb:1e:37:8c:
a3:fc:2f:c0:ec:e4:e3:0f:09:45:67:fc:56:2f:e4:f6:5b:8f:
23:6b:86:55:b9:be:b2:ab:3f:1b:fe:b7:5b:b0:ec:39:9f:3f:
41:f7:36:e9:7f:58:1a:d8:d1:0f:1a:1e:41:60:52:69:7e:4a:
c8:de:c6:40:81:c1:4d:2f:33:8c:6d:98:55:ec:38:f7:90:c0:
b5:b1:a1:d9:6c:0f:79:49:f7:29:63:23:4a:b4:58:e4:ad:11:
df:cb:b3:50:07:4a:5a:76:aa:5a:8e:46:ec:c5:54:f0:67:86:
b9:0b:12:ad:69:90:7d:06:3c:77:73:79:52:ee:d3:88:8f:7e:
79:ea:e8:d1:b1:e3:d9:c2:a9:3e:d8:ef:b2:aa:2b:e4:67:33:
96:fd:47:35:a0:3c:70:de:c7:80:72:e5:f7:09:6a:11:ec:ee:
31:b7:1a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 14:36:06 2026 by rpki-client