Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Jkp5MNE7hCB_P5jaUVMZw36rvtk.roa
File: Jkp5MNE7hCB_P5jaUVMZw36rvtk.roa (raw, json)
Hash identifier: 2yYhyBiB0IeFcTCqpUwWeMypfBpFcwRzQ+dL84ArPmQ=
Subject key identifier: 26:4A:79:30:D1:3B:84:20:7F:3F:98:DA:51:53:19:C3:7E:AB:BE:D9
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FC9D2B496A02F243781A9F5C162972A1E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Jkp5MNE7hCB_P5jaUVMZw36rvtk.roa
Signing time: Mon 03 Aug 2026 22:50:56 +0000
ROA not before: Mon 03 Aug 2026 22:50:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401152
IP address blocks: 2.26.95.0/24 maxlen: 24
2.26.175.0/24 maxlen: 24
2.26.208.0/21 maxlen: 24
2.27.200.0/22 maxlen: 24
2.27.204.0/22 maxlen: 24
2.27.224.0/22 maxlen: 24
2.27.228.0/22 maxlen: 24
2.27.243.0/24 maxlen: 24
13.143.28.0/22 maxlen: 24
13.143.48.0/22 maxlen: 22
13.143.72.0/22 maxlen: 24
13.143.76.0/22 maxlen: 22
13.143.211.0/24 maxlen: 24
13.143.250.0/24 maxlen: 24
31.76.192.0/22 maxlen: 24
31.76.208.0/22 maxlen: 24
31.76.228.0/23 maxlen: 24
31.76.232.0/23 maxlen: 24
31.76.236.0/23 maxlen: 24
31.76.242.0/23 maxlen: 24
31.77.34.0/23 maxlen: 24
31.77.36.0/23 maxlen: 24
31.77.42.0/23 maxlen: 24
31.77.97.0/24 maxlen: 24
31.77.106.0/24 maxlen: 24
31.77.113.0/24 maxlen: 24
31.77.124.0/24 maxlen: 24
31.77.219.0/24 maxlen: 24
31.77.220.0/24 maxlen: 24
31.77.239.0/24 maxlen: 24
31.77.242.0/23 maxlen: 24
31.77.253.0/24 maxlen: 24
144.31.8.0/23 maxlen: 24
144.31.39.0/24 maxlen: 24
144.31.41.0/24 maxlen: 24
144.31.110.0/24 maxlen: 24
144.31.150.0/24 maxlen: 24
144.31.160.0/22 maxlen: 24
144.31.235.0/24 maxlen: 24
150.241.69.0/24 maxlen: 24
177.1.176.0/22 maxlen: 24
177.1.204.0/22 maxlen: 24
179.198.52.0/23 maxlen: 24
179.198.54.0/23 maxlen: 24
185.207.135.0/24 maxlen: 24
185.216.104.0/22 maxlen: 24
193.23.192.0/24 maxlen: 24
193.23.198.0/24 maxlen: 24
193.23.204.0/22 maxlen: 22
193.23.212.0/22 maxlen: 24
193.23.217.0/24 maxlen: 24
201.10.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c9:d2:b4:96:a0:2f:24:37:81:a9:f5:c1:62:97:2a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 3 22:50:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=264a7930d13b84207f3f98da515319c37eabbed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b9:62:54:29:29:fd:e0:78:7e:2c:af:40:68:
43:9f:6c:6d:1d:61:f6:a4:e4:39:06:22:82:ef:7e:
a4:51:6f:6e:1d:1a:b0:14:23:2e:8c:72:d7:ae:d4:
4c:55:2d:96:d4:c9:a0:da:97:58:cc:8c:1f:91:f1:
1d:1a:57:49:3a:de:97:7a:98:67:d7:df:0b:bb:49:
18:0c:bd:9b:18:e5:37:28:d0:0b:15:9a:e5:de:a0:
24:b1:0b:68:12:40:1b:72:e8:45:ac:38:9a:b2:aa:
55:59:5c:b7:ec:cf:27:1b:c6:05:7a:db:6f:ef:fa:
7d:9d:16:1e:45:d3:f1:8e:b5:7f:65:c8:e4:0e:b2:
c6:77:8e:3f:bb:ab:00:96:c4:1b:75:4d:7b:94:0c:
16:bb:3f:92:72:d7:31:e8:0d:cc:bb:6d:53:29:cc:
77:71:53:b9:0b:05:b1:80:53:d9:40:da:ce:2e:51:
e2:66:f1:cc:57:bd:39:ba:cd:a9:96:11:3a:82:1e:
95:6f:c0:5a:2c:9b:f1:68:e4:7c:86:14:75:fa:48:
bb:7e:f0:54:d4:25:13:26:b5:78:25:ab:28:d3:38:
d2:05:b3:46:42:76:3f:62:58:bf:1b:85:ae:a4:11:
13:b5:16:8c:46:de:5b:6b:8b:14:3e:d8:41:eb:17:
b2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4A:79:30:D1:3B:84:20:7F:3F:98:DA:51:53:19:C3:7E:AB:BE:D9
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Jkp5MNE7hCB_P5jaUVMZw36rvtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.95.0/24
2.26.175.0/24
2.26.208.0/21
2.27.200.0/21
2.27.224.0/21
2.27.243.0/24
13.143.28.0/22
13.143.48.0/22
13.143.72.0/21
13.143.211.0/24
13.143.250.0/24
31.76.192.0/22
31.76.208.0/22
31.76.228.0/23
31.76.232.0/23
31.76.236.0/23
31.76.242.0/23
31.77.34.0-31.77.37.255
31.77.42.0/23
31.77.97.0/24
31.77.106.0/24
31.77.113.0/24
31.77.124.0/24
31.77.219.0-31.77.220.255
31.77.239.0/24
31.77.242.0/23
31.77.253.0/24
144.31.8.0/23
144.31.39.0/24
144.31.41.0/24
144.31.110.0/24
144.31.150.0/24
144.31.160.0/22
144.31.235.0/24
150.241.69.0/24
177.1.176.0/22
177.1.204.0/22
179.198.52.0/22
185.207.135.0/24
185.216.104.0/22
193.23.192.0/24
193.23.198.0/24
193.23.204.0/22
193.23.212.0/22
193.23.217.0/24
201.10.81.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:95:4d:29:c3:1e:cb:d4:35:50:7f:cd:09:6d:88:7e:72:8c:
01:de:eb:03:10:1a:b8:f1:dd:5a:30:61:47:2a:3e:98:ea:fd:
eb:0c:20:54:fd:a3:63:08:6e:29:b3:78:06:c1:ff:be:f0:98:
c5:19:55:ec:b3:86:21:a5:06:6d:6a:99:7a:7e:33:0b:b0:21:
fb:06:d2:e7:61:0d:12:05:53:62:5f:55:0e:fc:12:d2:a1:87:
c1:06:89:b4:9a:67:3d:f4:8f:9e:7b:be:5c:db:35:e4:07:11:
c8:08:9f:e7:f4:8b:17:2e:a8:44:8a:3a:81:9d:bb:d1:ef:df:
ed:2c:95:24:16:b8:8d:ea:b9:5f:6a:10:46:ba:8d:4d:80:5e:
7b:16:cd:b5:c6:03:a4:f6:f4:3a:71:09:3e:8b:c8:6e:97:0d:
5f:d7:b4:b2:34:95:6b:61:78:2a:15:30:0b:a5:28:3c:60:50:
02:65:e6:ed:84:e3:1c:88:34:b8:ee:e2:01:28:d7:ce:a4:13:
1d:ae:e5:2b:68:c3:a0:b8:3e:64:bf:98:ce:88:a2:e2:64:e5:
6b:f4:7a:3c:6b:e2:43:7a:15:ef:29:6a:c3:fc:c1:b5:6a:55:
f8:e1:ad:d6:0f:f9:2e:68:2e:8a:c6:e7:78:5d:56:ba:3a:c6:
a0:1f:e5:87
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgISAZ/J0rSWoC8kN4Gp9cFilyoeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwODAzMjI1MDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjRhNzkzMGQxM2I4NDIwN2YzZjk4ZGE1MTUzMTljMzdlYWJiZWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbliVCkp/eB4fiyvQGhDn2xtHWH2
pOQ5BiKC736kUW9uHRqwFCMujHLXrtRMVS2W1Mmg2pdYzIwfkfEdGldJOt6Xephn
198Lu0kYDL2bGOU3KNALFZrl3qAksQtoEkAbcuhFrDiasqpVWVy37M8nG8YFettv
7/p9nRYeRdPxjrV/ZcjkDrLGd44/u6sAlsQbdU17lAwWuz+Sctcx6A3Mu21TKcx3
cVO5CwWxgFPZQNrOLlHiZvHMV705us2plhE6gh6Vb8BaLJvxaOR8hhR1+ki7fvBU
1CUTJrV4Jaso0zjSBbNGQnY/Yli/G4WupBETtRaMRt5ba4sUPthB6xeyiQIDAQAB
o4IDMTCCAy0wHQYDVR0OBBYEFCZKeTDRO4Qgfz+Y2lFTGcN+q77ZMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvSmtwNU1ORTdoQ0JfUDVqYVVWTVp3MzZydnRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBRQYIKwYBBQUHAQcBAf8EggE0MIIBMDCCASwEAgABMIIB
JAMEAAIaXwMEAAIarwMEAwIa0AMEAwIbyAMEAwIb4AMEAAIb8wMEAg2PHAMEAg2P
MAMEAw2PSAMEAA2P0wMEAA2P+gMEAh9MwAMEAh9M0AMEAR9M5AMEAR9M6AMEAR9M
7AMEAR9M8jAMAwQBH00iAwQBH00kAwQBH00qAwQAH01hAwQAH01qAwQAH01xAwQA
H018MAwDBAAfTdsDBAAfTdwDBAAfTe8DBAEfTfIDBAAfTf0DBAGQHwgDBACQHycD
BACQHykDBACQH24DBACQH5YDBAKQH6ADBACQH+sDBACW8UUDBAKxAbADBAKxAcwD
BAKzxjQDBAC5z4cDBAK52GgDBADBF8ADBADBF8YDBALBF8wDBALBF9QDBADBF9kD
BADJClEwDQYJKoZIhvcNAQELBQADggEBAHuVTSnDHsvUNVB/zQltiH5yjAHe6wMQ
Grjx3VowYUcqPpjq/esMIFT9o2MIbimzeAbB/77wmMUZVeyzhiGlBm1qmXp+Mwuw
IfsG0udhDRIFU2JfVQ78EtKhh8EGibSaZz30j557vlzbNeQHEcgIn+f0ixcuqESK
OoGdu9Hv3+0slSQWuI3quV9qEEa6jU2AXnsWzbXGA6T29DpxCT6LyG6XDV/XtLI0
lWtheCoVMAulKDxgUAJl5u2E4xyINLju4gEo186kEx2u5Stow6C4PmS/mM6IouJk
5Wv0ejxr4kN6Fe8pasP8wbVqVfjhrdYP+S5oLorG53hdVro6xqAf5Yc=
-----END CERTIFICATE-----
Generated at Tue Aug 4 09:51:31 2026 by rpki-client