Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/O-x6sVMfuZUAyjgL0NHAHjw-sgg.roa
File: O-x6sVMfuZUAyjgL0NHAHjw-sgg.roa (raw, json)
Hash identifier: fXBVszkuoM4fIEKYSengvcxJI2YR39WrsaqaVd+BtJk=
Subject key identifier: 3B:EC:7A:B1:53:1F:B9:95:00:CA:38:0B:D0:D1:C0:1E:3C:3E:B2:08
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A19DB0137F15B7F3661ED17F553E978D4A
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/O-x6sVMfuZUAyjgL0NHAHjw-sgg.roa
Signing time: Mon 02 Nov 2026 19:15:24 +0000
ROA not before: Mon 02 Nov 2026 19:15:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219337
IP address blocks: 2.27.136.0/24 maxlen: 24
2.27.200.0/24 maxlen: 24
2.27.201.0/24 maxlen: 24
2.27.202.0/24 maxlen: 24
2.27.203.0/24 maxlen: 24
2.27.204.0/24 maxlen: 24
2.27.205.0/24 maxlen: 24
2.27.206.0/24 maxlen: 24
2.27.207.0/24 maxlen: 24
13.143.160.0/24 maxlen: 24
13.143.161.0/24 maxlen: 24
13.143.162.0/24 maxlen: 24
13.143.163.0/24 maxlen: 24
13.143.172.0/24 maxlen: 24
13.143.173.0/24 maxlen: 24
13.143.174.0/24 maxlen: 24
13.143.175.0/24 maxlen: 24
31.77.8.0/24 maxlen: 24
31.77.9.0/24 maxlen: 24
31.77.10.0/24 maxlen: 24
31.77.11.0/24 maxlen: 24
31.77.12.0/24 maxlen: 24
31.77.13.0/24 maxlen: 24
31.77.14.0/24 maxlen: 24
31.77.15.0/24 maxlen: 24
31.77.16.0/24 maxlen: 24
31.77.17.0/24 maxlen: 24
31.77.18.0/24 maxlen: 24
31.77.19.0/24 maxlen: 24
177.3.208.0/24 maxlen: 24
177.3.209.0/24 maxlen: 24
177.3.212.0/24 maxlen: 24
177.3.213.0/24 maxlen: 24
177.3.214.0/24 maxlen: 24
177.3.215.0/24 maxlen: 24
177.3.216.0/24 maxlen: 24
177.3.217.0/24 maxlen: 24
177.3.218.0/24 maxlen: 24
177.3.219.0/24 maxlen: 24
177.3.220.0/24 maxlen: 24
177.3.221.0/24 maxlen: 24
177.3.222.0/24 maxlen: 24
177.3.223.0/24 maxlen: 24
177.202.64.0/24 maxlen: 24
177.202.65.0/24 maxlen: 24
177.202.66.0/24 maxlen: 24
177.202.67.0/24 maxlen: 24
177.202.68.0/24 maxlen: 24
177.202.69.0/24 maxlen: 24
177.202.70.0/24 maxlen: 24
177.202.71.0/24 maxlen: 24
177.202.72.0/24 maxlen: 24
177.202.73.0/24 maxlen: 24
177.202.74.0/24 maxlen: 24
177.202.75.0/24 maxlen: 24
177.202.76.0/24 maxlen: 24
177.202.77.0/24 maxlen: 24
177.202.78.0/24 maxlen: 24
177.202.79.0/24 maxlen: 24
201.58.176.0/24 maxlen: 24
201.58.177.0/24 maxlen: 24
201.58.178.0/24 maxlen: 24
201.58.179.0/24 maxlen: 24
201.58.180.0/24 maxlen: 24
201.58.181.0/24 maxlen: 24
201.58.182.0/24 maxlen: 24
201.58.183.0/24 maxlen: 24
201.58.184.0/24 maxlen: 24
201.58.185.0/24 maxlen: 24
201.58.186.0/24 maxlen: 24
201.58.187.0/24 maxlen: 24
201.58.188.0/24 maxlen: 24
201.58.189.0/24 maxlen: 24
201.58.190.0/24 maxlen: 24
201.58.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:b0:13:7f:15:b7:f3:66:1e:d1:7f:55:3e:97:8d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 2 19:15:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3bec7ab1531fb99500ca380bd0d1c01e3c3eb208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3b:28:cf:ae:c4:fe:31:d2:ab:df:9c:3e:30:
a1:83:10:a2:aa:81:56:60:b1:12:ef:30:e6:1d:e1:
a0:f8:06:55:c0:3e:7f:7a:bc:06:de:b7:d6:2b:0a:
41:00:a9:43:2e:03:3e:39:76:dd:c3:51:f5:d1:9f:
54:4e:47:e5:db:7f:6c:fc:63:b1:46:fe:ad:14:f4:
d5:b1:a9:a9:6f:0e:7a:f2:35:a1:71:6f:e3:52:c8:
10:9f:7d:9b:e6:8f:27:d0:7a:63:53:b2:ae:54:18:
b0:4f:8a:e6:88:de:a6:1a:87:22:8a:11:d0:b2:56:
42:7b:cf:f9:ee:8f:f6:cc:2e:05:14:92:38:95:5d:
c8:14:14:9b:cb:31:d4:72:b3:d6:50:a6:44:4f:ab:
f8:51:53:b4:e6:ab:77:bc:59:1f:9c:f2:0c:af:fa:
ff:62:05:da:e6:a8:23:27:32:ef:84:70:9e:94:94:
fb:84:0f:af:50:41:87:28:03:78:c7:e7:ab:20:2c:
8b:9d:6e:14:b7:f4:2e:7a:6a:39:88:97:a5:0d:6c:
85:90:26:61:7f:4a:5b:b4:b2:03:fa:bb:54:d9:31:
d3:11:6c:c0:2b:b9:15:80:1f:5d:a1:dd:b0:38:ac:
00:db:15:82:a9:7e:52:f3:6a:88:cd:39:e7:ac:59:
61:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EC:7A:B1:53:1F:B9:95:00:CA:38:0B:D0:D1:C0:1E:3C:3E:B2:08
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/O-x6sVMfuZUAyjgL0NHAHjw-sgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.136.0/24
2.27.200.0/21
13.143.160.0/22
13.143.172.0/22
31.77.8.0-31.77.19.255
177.3.208.0/23
177.3.212.0-177.3.223.255
177.202.64.0/20
201.58.176.0/20
Signature Algorithm: sha256WithRSAEncryption
48:f4:3e:04:07:ff:ba:ab:b2:b9:71:0a:b0:b0:69:90:a2:19:
e0:49:5e:d6:3a:0a:99:cd:91:c0:d3:5a:8a:3d:e1:80:6f:cb:
10:40:7f:d9:7d:85:ae:a2:1d:77:5f:8b:e9:aa:77:f4:9a:7c:
16:18:69:db:12:51:33:42:43:04:30:7f:ae:fe:38:4a:a7:b1:
1c:bc:a1:b1:74:8d:66:20:6e:af:6c:36:b4:b0:94:0d:32:7f:
4a:c8:4e:2b:a7:56:3f:0f:1a:74:dd:93:36:eb:3e:af:c0:d3:
cc:b7:90:de:c4:a7:38:08:ab:5d:1c:d5:51:e6:6a:f1:77:7c:
bb:63:d2:89:08:bb:d1:a0:be:3b:0c:26:d2:f4:93:af:c8:4f:
43:09:a4:47:2b:16:99:c8:7a:c7:4d:85:1e:4d:66:38:f6:2a:
7f:bf:79:62:cf:7a:ff:99:3a:9a:84:ae:38:8e:95:a5:74:f9:
29:88:e0:50:7e:74:fc:18:0c:c2:eb:cd:37:0d:ac:e6:a8:56:
93:36:4b:51:c4:11:79:c0:58:1d:21:3d:9f:85:c1:16:cf:53:
d9:d4:28:b2:2c:76:d3:9b:19:28:a2:a1:3f:32:12:ed:73:e8:
ad:bd:5a:0f:85:1b:71:7d:88:70:ca:82:0c:26:4c:98:53:2d:
17:08:87:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:30:20 2026 by rpki-client