Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MXkk9Fx2sKX29O9pJJk7-2-nFxM.roa
File: MXkk9Fx2sKX29O9pJJk7-2-nFxM.roa (raw, json)
Hash identifier: b4/e5R53TFH96gqdtTQ1MKF2XEair+Ai4A1xMuFgkEU=
Subject key identifier: 31:79:24:F4:5C:76:B0:A5:F6:F4:EF:69:24:99:3B:FB:6F:A7:17:13
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FB3F7013221FCC72B898C4C2D499D64D9
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MXkk9Fx2sKX29O9pJJk7-2-nFxM.roa
Signing time: Thu 30 Jul 2026 16:58:57 +0000
ROA not before: Thu 30 Jul 2026 16:58:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207957
IP address blocks: 2.26.8.0/24 maxlen: 24
2.26.9.0/24 maxlen: 24
2.26.10.0/24 maxlen: 24
2.26.11.0/24 maxlen: 24
2.26.88.0/24 maxlen: 24
2.26.89.0/24 maxlen: 24
2.26.90.0/24 maxlen: 24
2.26.91.0/24 maxlen: 24
2.26.92.0/24 maxlen: 24
2.26.93.0/24 maxlen: 24
31.76.0.0/24 maxlen: 24
31.76.1.0/24 maxlen: 24
31.76.2.0/24 maxlen: 24
31.76.3.0/24 maxlen: 24
31.76.4.0/24 maxlen: 24
31.76.5.0/24 maxlen: 24
31.76.6.0/24 maxlen: 24
31.76.7.0/24 maxlen: 24
31.76.52.0/24 maxlen: 24
31.76.53.0/24 maxlen: 24
31.76.54.0/24 maxlen: 24
31.76.55.0/24 maxlen: 24
31.76.60.0/24 maxlen: 24
31.76.61.0/24 maxlen: 24
31.76.62.0/24 maxlen: 24
31.76.63.0/24 maxlen: 24
31.76.64.0/24 maxlen: 24
31.76.65.0/24 maxlen: 24
31.76.66.0/24 maxlen: 24
31.76.68.0/24 maxlen: 24
31.76.69.0/24 maxlen: 24
31.76.70.0/24 maxlen: 24
31.76.82.0/24 maxlen: 24
31.76.83.0/24 maxlen: 24
31.76.84.0/24 maxlen: 24
31.76.85.0/24 maxlen: 24
31.76.114.0/24 maxlen: 24
31.76.115.0/24 maxlen: 24
31.77.140.0/24 maxlen: 24
31.77.141.0/24 maxlen: 24
31.77.142.0/24 maxlen: 24
31.77.143.0/24 maxlen: 24
64.188.89.0/24 maxlen: 24
64.188.90.0/24 maxlen: 24
64.188.98.0/24 maxlen: 24
64.188.127.0/24 maxlen: 24
77.239.107.0/24 maxlen: 24
144.31.15.0/24 maxlen: 24
144.31.49.0/24 maxlen: 24
144.31.50.0/24 maxlen: 24
144.31.51.0/24 maxlen: 24
144.31.57.0/24 maxlen: 24
144.31.82.0/24 maxlen: 24
144.31.83.0/24 maxlen: 24
144.31.93.0/24 maxlen: 24
144.31.103.0/24 maxlen: 24
144.31.107.0/24 maxlen: 24
144.31.108.0/24 maxlen: 24
144.31.109.0/24 maxlen: 24
144.31.213.0/24 maxlen: 24
144.31.214.0/24 maxlen: 24
144.31.216.0/24 maxlen: 24
144.31.217.0/24 maxlen: 24
144.31.218.0/24 maxlen: 24
144.31.219.0/24 maxlen: 24
144.31.239.0/24 maxlen: 24
144.31.240.0/24 maxlen: 24
144.31.241.0/24 maxlen: 24
144.31.242.0/24 maxlen: 24
144.31.243.0/24 maxlen: 24
144.31.249.0/24 maxlen: 24
150.241.72.0/24 maxlen: 24
150.241.73.0/24 maxlen: 24
150.241.74.0/24 maxlen: 24
150.241.75.0/24 maxlen: 24
150.241.82.0/24 maxlen: 24
150.241.83.0/24 maxlen: 24
150.241.100.0/24 maxlen: 24
150.241.101.0/24 maxlen: 24
150.241.102.0/24 maxlen: 24
150.241.103.0/24 maxlen: 24
185.170.153.0/24 maxlen: 24
185.170.154.0/24 maxlen: 24
193.23.195.0/24 maxlen: 24
193.23.200.0/24 maxlen: 24
193.23.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:f7:01:32:21:fc:c7:2b:89:8c:4c:2d:49:9d:64:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 30 16:58:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=317924f45c76b0a5f6f4ef6924993bfb6fa71713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:33:b7:25:d4:de:59:d8:af:c9:38:1c:50:39:
e4:37:49:65:08:0f:f7:d6:07:86:a5:61:fa:8d:c0:
17:e4:03:10:e4:53:45:6f:c3:96:4b:0d:18:d5:16:
00:37:2c:4a:fd:5c:24:87:c8:39:73:66:61:71:ed:
3c:30:1b:27:e7:2c:ae:f5:d7:f8:11:16:fa:93:2a:
e2:43:59:c4:1e:31:d9:77:61:9a:9f:e4:6f:b6:6a:
56:26:1f:50:e5:60:bf:a2:f2:bc:02:b0:c8:63:9e:
64:fb:97:55:1b:58:9a:a5:69:0a:7c:1a:8e:55:b1:
58:90:cc:32:d7:88:a6:31:53:26:07:44:d5:b3:31:
dc:ab:57:cb:f1:4a:53:3a:1e:82:e2:8d:26:99:85:
36:d9:53:b7:bf:b1:ca:4a:eb:21:49:3e:52:19:1d:
14:a9:e9:11:05:87:11:b0:4c:5f:c6:20:6f:98:c6:
53:bd:bb:2a:b8:26:dc:ea:f1:ee:7f:ae:e8:4b:04:
dd:1c:26:f4:7e:fc:a7:63:b1:e5:f1:c5:67:e4:06:
c1:06:6d:4f:23:41:0f:c7:5c:b6:dc:90:9e:57:c3:
97:4b:4b:4c:bd:20:9e:0e:79:72:83:39:51:7c:4b:
5b:11:34:97:55:56:6b:23:bd:61:98:8b:52:fc:26:
fa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:79:24:F4:5C:76:B0:A5:F6:F4:EF:69:24:99:3B:FB:6F:A7:17:13
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MXkk9Fx2sKX29O9pJJk7-2-nFxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.8.0/22
2.26.88.0-2.26.93.255
31.76.0.0/21
31.76.52.0/22
31.76.60.0-31.76.66.255
31.76.68.0-31.76.70.255
31.76.82.0-31.76.85.255
31.76.114.0/23
31.77.140.0/22
64.188.89.0-64.188.90.255
64.188.98.0/24
64.188.127.0/24
77.239.107.0/24
144.31.15.0/24
144.31.49.0-144.31.51.255
144.31.57.0/24
144.31.82.0/23
144.31.93.0/24
144.31.103.0/24
144.31.107.0-144.31.109.255
144.31.213.0-144.31.214.255
144.31.216.0/22
144.31.239.0-144.31.243.255
144.31.249.0/24
150.241.72.0/22
150.241.82.0/23
150.241.100.0/22
185.170.153.0-185.170.154.255
193.23.195.0/24
193.23.200.0/24
193.23.202.0/24
Signature Algorithm: sha256WithRSAEncryption
47:de:be:fa:30:83:d2:88:1f:62:33:c8:2b:51:47:5a:8a:e8:
bf:db:52:7a:c7:5c:ef:78:d6:cb:45:a3:f8:42:fe:9c:c5:bf:
95:2d:6c:0f:b1:90:e5:d7:40:e5:7f:47:bf:e5:e2:6c:a6:d8:
2d:ec:20:33:24:40:de:b6:cc:80:95:6c:17:46:18:56:08:3b:
ef:2f:0f:87:72:08:73:c6:73:b3:af:13:14:8f:33:c8:85:f2:
84:1d:b6:e6:6f:86:92:af:bb:73:0f:d0:47:04:89:b8:ca:5f:
67:4d:1e:68:3a:59:88:b6:93:d5:2f:78:18:05:8f:4b:42:31:
57:f9:f4:f0:e6:ee:72:60:6d:aa:f4:57:62:25:ad:85:0c:3a:
0a:0f:28:91:fa:85:7b:c0:82:70:f3:e1:f3:3f:97:df:ab:95:
74:a6:c9:ec:0e:9e:5b:f2:cc:db:61:2b:59:7a:4c:c2:6b:48:
ba:6a:ff:3c:aa:75:0d:6a:e3:a5:33:6e:ed:20:da:9f:91:ae:
da:ac:4e:7c:31:69:24:a9:0d:29:2f:9b:9d:51:7d:2c:fa:ed:
72:2e:c8:50:30:28:1a:fd:b6:d9:71:6b:75:59:13:75:09:09:
29:78:07:c0:2a:48:2a:15:ad:33:18:c7:bb:9d:35:45:ac:12:
1e:22:b5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:52:09 2026 by rpki-client