Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/O3BXdfHHnULd05lqO3Md9gxAHbg.roa
File: O3BXdfHHnULd05lqO3Md9gxAHbg.roa (raw, json)
Hash identifier: G0NjrN8duuGs67MuSCBu0DhKDm70XhI7xuA4o+O3mkM=
Subject key identifier: 3B:70:57:75:F1:C7:9D:42:DD:D3:99:6A:3B:73:1D:F6:0C:40:1D:B8
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0AB5019D6BF8BD281AB9D023A17393091
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/O3BXdfHHnULd05lqO3Md9gxAHbg.roa
Signing time: Wed 16 Sep 2026 17:42:28 +0000
ROA not before: Wed 16 Sep 2026 17:42:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207957
IP address blocks: 2.26.8.0/24 maxlen: 24
2.26.9.0/24 maxlen: 24
2.26.10.0/24 maxlen: 24
2.26.11.0/24 maxlen: 24
2.26.88.0/24 maxlen: 24
2.26.89.0/24 maxlen: 24
2.26.90.0/24 maxlen: 24
2.26.91.0/24 maxlen: 24
2.26.92.0/24 maxlen: 24
2.26.93.0/24 maxlen: 24
2.26.95.0/24 maxlen: 24
2.27.208.0/24 maxlen: 24
2.27.209.0/24 maxlen: 24
2.27.210.0/24 maxlen: 24
2.27.211.0/24 maxlen: 24
13.143.137.0/24 maxlen: 24
13.143.142.0/24 maxlen: 24
13.143.180.0/22 maxlen: 24
13.143.184.0/24 maxlen: 24
13.143.185.0/24 maxlen: 24
13.143.186.0/24 maxlen: 24
13.143.187.0/24 maxlen: 24
13.143.188.0/22 maxlen: 24
13.143.196.0/22 maxlen: 24
31.76.0.0/24 maxlen: 24
31.76.1.0/24 maxlen: 24
31.76.2.0/24 maxlen: 24
31.76.3.0/24 maxlen: 24
31.76.4.0/24 maxlen: 24
31.76.5.0/24 maxlen: 24
31.76.6.0/24 maxlen: 24
31.76.7.0/24 maxlen: 24
31.76.52.0/24 maxlen: 24
31.76.53.0/24 maxlen: 24
31.76.54.0/24 maxlen: 24
31.76.55.0/24 maxlen: 24
31.76.60.0/24 maxlen: 24
31.76.61.0/24 maxlen: 24
31.76.62.0/24 maxlen: 24
31.76.63.0/24 maxlen: 24
31.76.64.0/24 maxlen: 24
31.76.65.0/24 maxlen: 24
31.76.66.0/24 maxlen: 24
31.76.68.0/24 maxlen: 24
31.76.69.0/24 maxlen: 24
31.76.70.0/24 maxlen: 24
31.76.71.0/24 maxlen: 24
31.76.82.0/24 maxlen: 24
31.76.83.0/24 maxlen: 24
31.76.84.0/24 maxlen: 24
31.76.85.0/24 maxlen: 24
31.76.114.0/24 maxlen: 24
31.76.115.0/24 maxlen: 24
31.77.140.0/24 maxlen: 24
31.77.141.0/24 maxlen: 24
31.77.142.0/24 maxlen: 24
31.77.143.0/24 maxlen: 24
64.188.89.0/24 maxlen: 24
64.188.90.0/24 maxlen: 24
64.188.98.0/24 maxlen: 24
64.188.127.0/24 maxlen: 24
77.239.107.0/24 maxlen: 24
144.31.15.0/24 maxlen: 24
144.31.49.0/24 maxlen: 24
144.31.50.0/24 maxlen: 24
144.31.51.0/24 maxlen: 24
144.31.57.0/24 maxlen: 24
144.31.82.0/24 maxlen: 24
144.31.83.0/24 maxlen: 24
144.31.93.0/24 maxlen: 24
144.31.103.0/24 maxlen: 24
144.31.107.0/24 maxlen: 24
144.31.108.0/24 maxlen: 24
144.31.109.0/24 maxlen: 24
144.31.213.0/24 maxlen: 24
144.31.214.0/24 maxlen: 24
144.31.216.0/24 maxlen: 24
144.31.217.0/24 maxlen: 24
144.31.218.0/24 maxlen: 24
144.31.219.0/24 maxlen: 24
144.31.239.0/24 maxlen: 24
144.31.240.0/24 maxlen: 24
144.31.241.0/24 maxlen: 24
144.31.242.0/24 maxlen: 24
144.31.243.0/24 maxlen: 24
144.31.249.0/24 maxlen: 24
150.241.72.0/24 maxlen: 24
150.241.73.0/24 maxlen: 24
150.241.74.0/24 maxlen: 24
150.241.75.0/24 maxlen: 24
150.241.82.0/24 maxlen: 24
150.241.83.0/24 maxlen: 24
150.241.100.0/24 maxlen: 24
150.241.101.0/24 maxlen: 24
150.241.102.0/24 maxlen: 24
150.241.103.0/24 maxlen: 24
179.254.86.0/24 maxlen: 24
185.170.153.0/24 maxlen: 24
185.170.154.0/24 maxlen: 24
193.23.195.0/24 maxlen: 24
193.23.200.0/24 maxlen: 24
193.23.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ab:50:19:d6:bf:8b:d2:81:ab:9d:02:3a:17:39:30:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 16 17:42:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b705775f1c79d42ddd3996a3b731df60c401db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:53:1b:d4:0e:d1:22:32:57:67:05:e1:98:be:
30:aa:6c:6a:ec:41:5d:91:38:d6:08:10:ca:2d:db:
26:f0:8b:c0:65:7d:06:99:0a:35:9b:ce:aa:6b:1c:
d7:cb:02:d2:e7:7c:07:6e:4b:a1:70:ac:f3:46:29:
86:21:ae:ca:10:c7:91:32:57:01:b2:56:e2:8c:a3:
e8:21:27:a8:3d:13:93:83:76:8f:cb:a4:d1:ff:f4:
98:a2:6e:af:c5:5d:95:10:0f:cc:e1:b4:38:9c:4d:
f5:31:09:62:2e:d7:08:2e:88:fe:73:85:2c:37:a1:
a5:a4:c6:26:f9:5d:42:08:5c:25:e5:aa:3e:4c:53:
62:0a:2f:ca:2f:51:03:bc:81:7a:d0:ce:43:4b:12:
6f:9e:6b:3b:7b:98:9c:bc:76:5c:05:a3:e2:5d:02:
89:5d:f3:00:7c:bc:4d:92:4f:88:3a:89:92:48:90:
2e:2f:48:5d:7b:ac:e0:2c:3e:bd:9f:16:57:51:44:
67:a4:05:ff:4e:f1:06:93:ef:64:89:9d:6d:eb:01:
58:4c:9b:b3:3d:12:a8:c9:48:2a:42:a8:e8:33:c5:
69:3c:23:d5:39:69:07:75:1e:3c:a2:8f:c3:1c:02:
1b:18:a5:51:14:d5:08:eb:79:2b:68:3b:c0:44:83:
6d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:70:57:75:F1:C7:9D:42:DD:D3:99:6A:3B:73:1D:F6:0C:40:1D:B8
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/O3BXdfHHnULd05lqO3Md9gxAHbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.8.0/22
2.26.88.0-2.26.93.255
2.26.95.0/24
2.27.208.0/22
13.143.137.0/24
13.143.142.0/24
13.143.180.0-13.143.191.255
13.143.196.0/22
31.76.0.0/21
31.76.52.0/22
31.76.60.0-31.76.66.255
31.76.68.0/22
31.76.82.0-31.76.85.255
31.76.114.0/23
31.77.140.0/22
64.188.89.0-64.188.90.255
64.188.98.0/24
64.188.127.0/24
77.239.107.0/24
144.31.15.0/24
144.31.49.0-144.31.51.255
144.31.57.0/24
144.31.82.0/23
144.31.93.0/24
144.31.103.0/24
144.31.107.0-144.31.109.255
144.31.213.0-144.31.214.255
144.31.216.0/22
144.31.239.0-144.31.243.255
144.31.249.0/24
150.241.72.0/22
150.241.82.0/23
150.241.100.0/22
179.254.86.0/24
185.170.153.0-185.170.154.255
193.23.195.0/24
193.23.200.0/24
193.23.202.0/24
Signature Algorithm: sha256WithRSAEncryption
41:21:db:62:76:32:a8:32:4d:6e:23:92:6c:ab:97:e7:69:92:
8a:23:96:9a:5e:04:fe:fa:ff:ce:8f:c7:25:e0:e4:b1:b4:9c:
3b:92:9d:3e:1e:21:cd:c4:ad:52:69:2f:9d:bd:57:4e:63:aa:
0c:dd:dc:9c:7f:41:e2:7a:ee:ff:3c:fb:2d:b3:48:0e:dd:cf:
74:1a:e0:df:2f:b4:7b:ee:b1:18:ce:b5:8d:1e:eb:38:a0:b5:
ca:e1:ce:a4:99:ac:61:94:85:c9:4d:f7:cb:94:b9:56:98:25:
37:2c:d6:e3:b4:0f:7d:f2:48:db:28:09:f2:a9:06:38:d8:25:
7a:af:13:b7:1b:75:5d:35:ba:5e:b1:73:bc:75:84:02:dd:44:
4a:13:2d:31:36:12:05:a3:89:bd:25:d5:17:cb:52:7c:94:dc:
a9:d2:3f:e5:7a:91:8e:19:80:76:23:35:e2:87:77:52:24:9d:
19:fd:44:2f:81:6b:2b:aa:5d:52:09:d3:b1:51:5e:ff:f6:01:
6f:70:e4:83:a8:2a:19:93:60:6c:2d:d3:f9:a2:f6:61:1e:2c:
bb:31:92:6e:80:95:3c:f2:93:a9:05:de:a2:52:59:1a:8d:d0:
f2:fe:76:d2:ea:70:4c:9b:9e:71:d9:43:7e:bc:83:a5:bd:d4:
4e:7e:06:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:27:07 2026 by rpki-client