Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OY9EaQXry6Y5SLOO9mLbRBJ1jKk.roa
File: OY9EaQXry6Y5SLOO9mLbRBJ1jKk.roa (raw, json)
Hash identifier: 9chPSzPQCjEIDLDkMZn+6+oWU+e0MBbxsu51WagSgWc=
Subject key identifier: 39:8F:44:69:05:EB:CB:A6:39:48:B3:8E:F6:62:DB:44:12:75:8C:A9
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A19DC34DC8B2F718A8C8051A7F83EE9271
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OY9EaQXry6Y5SLOO9mLbRBJ1jKk.roa
Signing time: Mon 02 Nov 2026 19:36:24 +0000
ROA not before: Mon 02 Nov 2026 19:36:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216127
IP address blocks: 2.26.16.0/22 maxlen: 24
2.26.28.0/22 maxlen: 24
2.26.116.0/22 maxlen: 24
2.26.158.0/24 maxlen: 24
2.26.192.0/21 maxlen: 24
2.26.248.0/22 maxlen: 24
2.27.18.0/24 maxlen: 24
2.27.19.0/24 maxlen: 24
31.76.16.0/22 maxlen: 24
31.76.44.0/22 maxlen: 24
31.76.72.0/22 maxlen: 24
31.76.96.0/22 maxlen: 24
31.76.224.0/22 maxlen: 24
31.77.132.0/22 maxlen: 24
31.77.174.0/23 maxlen: 24
31.77.218.0/24 maxlen: 24
31.77.223.0/24 maxlen: 24
77.239.96.0/22 maxlen: 24
144.31.96.0/22 maxlen: 24
144.31.154.0/23 maxlen: 24
144.31.180.0/22 maxlen: 24
144.31.188.0/23 maxlen: 24
144.31.200.0/23 maxlen: 24
144.31.204.0/23 maxlen: 24
144.31.250.0/23 maxlen: 24
150.241.90.0/23 maxlen: 24
152.234.208.0/21 maxlen: 24
152.234.216.0/21 maxlen: 24
177.202.88.0/22 maxlen: 24
179.254.164.0/23 maxlen: 24
185.184.120.0/24 maxlen: 24
185.184.121.0/24 maxlen: 24
191.217.218.0/23 maxlen: 24
191.217.226.0/23 maxlen: 24
191.217.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:c3:4d:c8:b2:f7:18:a8:c8:05:1a:7f:83:ee:92:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 2 19:36:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=398f446905ebcba63948b38ef662db4412758ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:9c:a2:eb:f1:78:e3:54:cb:7b:69:1e:46:
87:f5:d7:25:b1:1b:0a:69:b1:c6:af:cd:87:bf:fe:
ef:bc:8e:d9:21:94:bf:01:d2:9c:01:7a:b0:76:f1:
15:da:eb:d9:6e:2a:e6:a7:33:18:2e:c6:b6:d2:1b:
a6:f5:f2:2d:48:f8:eb:12:32:d6:fc:cb:da:d2:e6:
98:ae:ec:e2:65:5a:82:b9:b0:7c:00:7a:8f:29:9e:
5e:50:73:92:e0:89:2b:e0:66:fb:0b:80:5e:72:ee:
39:f2:b5:f0:b1:ca:a0:f9:a9:7f:b5:6e:f2:4e:39:
2e:1b:42:0d:44:ed:ad:ad:40:6f:13:ae:e1:4a:7c:
c4:b7:e7:e5:41:35:cf:4e:94:39:1f:83:69:ac:59:
d7:23:6a:bf:55:12:20:c8:eb:13:43:4a:bd:ca:26:
78:af:0a:96:69:03:22:21:c3:5b:95:54:f0:cc:14:
92:bb:7b:a7:6c:fb:bb:fb:af:2f:e1:d5:9a:c6:88:
23:d9:5c:ef:37:83:44:87:81:ec:78:ba:d8:52:a9:
d2:f0:31:cb:72:84:30:18:10:28:60:0b:df:8b:0f:
d7:be:fd:87:b3:86:2e:5b:ee:f9:6d:14:71:ac:d2:
11:9c:18:67:ee:f2:31:b7:33:4f:7a:3a:a1:8b:91:
d6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8F:44:69:05:EB:CB:A6:39:48:B3:8E:F6:62:DB:44:12:75:8C:A9
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OY9EaQXry6Y5SLOO9mLbRBJ1jKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.16.0/22
2.26.28.0/22
2.26.116.0/22
2.26.158.0/24
2.26.192.0/21
2.26.248.0/22
2.27.18.0/23
31.76.16.0/22
31.76.44.0/22
31.76.72.0/22
31.76.96.0/22
31.76.224.0/22
31.77.132.0/22
31.77.174.0/23
31.77.218.0/24
31.77.223.0/24
77.239.96.0/22
144.31.96.0/22
144.31.154.0/23
144.31.180.0/22
144.31.188.0/23
144.31.200.0/23
144.31.204.0/23
144.31.250.0/23
150.241.90.0/23
152.234.208.0/20
177.202.88.0/22
179.254.164.0/23
185.184.120.0/23
191.217.218.0/23
191.217.226.0/23
191.217.230.0/23
Signature Algorithm: sha256WithRSAEncryption
96:77:0a:82:19:4c:9d:c7:3f:e7:5c:3f:3e:b7:7a:3d:b0:c0:
7b:94:9f:72:23:88:e4:5d:60:34:4b:25:8c:07:2c:75:79:43:
52:32:f1:01:da:1f:0e:3f:7b:48:1d:e1:40:64:69:4a:98:81:
49:01:30:b7:04:28:6b:76:75:35:19:4d:6b:80:01:e9:ba:d7:
99:e0:58:1b:1e:cb:6a:dd:2a:b4:14:34:cc:09:65:f1:98:e6:
9e:65:2f:24:4d:90:91:b4:42:b8:71:11:59:1e:af:49:e2:d6:
e6:ab:a6:a7:e1:84:02:e7:82:2f:69:52:48:82:5f:5f:d1:2a:
c8:66:ac:1b:e6:cf:a3:af:6c:3c:ad:8f:3d:fc:be:73:e0:58:
f4:49:2d:48:28:4f:b1:36:64:f8:c2:ac:99:e0:07:69:7b:3d:
2a:db:f2:72:bc:1a:16:3b:59:52:ea:13:a7:db:90:b0:22:87:
db:06:e8:26:8d:a5:f4:d1:4c:50:29:4c:92:b0:4d:00:01:ea:
d5:31:7b:e9:49:e0:12:11:44:59:55:43:62:ba:26:11:b5:45:
79:5e:90:84:76:27:98:77:2c:53:fc:cc:f1:26:ac:07:e5:5a:
2e:53:cf:cb:c0:0e:b7:6d:a5:5c:d3:dc:1a:28:9d:17:47:8a:
ae:c5:66:82
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgISAaGdw03IsvcYqMgFGn+D7pJxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYxMTAyMTkzNjI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOThmNDQ2OTA1ZWJjYmE2Mzk0OGIzOGVmNjYyZGI0NDEyNzU4Y2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvucouvxeONUy3tpHkaH9dclsRsK
abHGr82Hv/7vvI7ZIZS/AdKcAXqwdvEV2uvZbirmpzMYLsa20hum9fItSPjrEjLW
/Mva0uaYruziZVqCubB8AHqPKZ5eUHOS4Ikr4Gb7C4Becu458rXwscqg+al/tW7y
TjkuG0INRO2trUBvE67hSnzEt+flQTXPTpQ5H4NprFnXI2q/VRIgyOsTQ0q9yiZ4
rwqWaQMiIcNblVTwzBSSu3unbPu7+68v4dWaxogj2VzvN4NEh4HseLrYUqnS8DHL
coQwGBAoYAvfiw/Xvv2Hs4YuW+75bRRxrNIRnBhn7vIxtzNPejqhi5HWsQIDAQAB
o4ICyDCCAsQwHQYDVR0OBBYEFDmPRGkF68umOUizjvZi20QSdYypMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvT1k5RWFRWHJ5Nlk1U0xPTzltTGJSQkoxaktrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHdBggrBgEFBQcBBwEB/wSBzTCByjCBxwQCAAEwgcADBAIC
GhADBAICGhwDBAICGnQDBAACGp4DBAMCGsADBAICGvgDBAECGxIDBAIfTBADBAIf
TCwDBAIfTEgDBAIfTGADBAIfTOADBAIfTYQDBAEfTa4DBAAfTdoDBAAfTd8DBAJN
72ADBAKQH2ADBAGQH5oDBAKQH7QDBAGQH7wDBAGQH8gDBAGQH8wDBAGQH/oDBAGW
8VoDBASY6tADBAKxylgDBAGz/qQDBAG5uHgDBAG/2doDBAG/2eIDBAG/2eYwDQYJ
KoZIhvcNAQELBQADggEBAJZ3CoIZTJ3HP+dcPz63ej2wwHuUn3IjiORdYDRLJYwH
LHV5Q1Iy8QHaHw4/e0gd4UBkaUqYgUkBMLcEKGt2dTUZTWuAAem615ngWBsey2rd
KrQUNMwJZfGY5p5lLyRNkJG0QrhxEVker0ni1uarpqfhhALngi9pUkiCX1/RKshm
rBvmz6OvbDytjz38vnPgWPRJLUgoT7E2ZPjCrJngB2l7PSrb8nK8GhY7WVLqE6fb
kLAih9sG6CaNpfTRTFApTJKwTQAB6tUxe+lJ4BIRRFlVQ2K6JhG1RXlekIR2J5h3
LFP8zPEmrAflWi5Tz8vADrdtpVzT3BoonRdHiq7FZoI=
-----END CERTIFICATE-----
Generated at Wed Nov 4 16:41:48 2026 by rpki-client