Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Otmy-ra4ZBwifZVKj2Bs2c03raU.roa
File: Otmy-ra4ZBwifZVKj2Bs2c03raU.roa (raw, json)
Hash identifier: jlJrruprYGWouQQkxKWx0MNWp6dPpK6H4GurFi1IA5k=
Subject key identifier: 3A:D9:B2:FA:B6:B8:64:1C:22:7D:95:4A:8F:60:6C:D9:CD:37:AD:A5
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F619B24DA889E91DD32BACCEE19EF09BE
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Otmy-ra4ZBwifZVKj2Bs2c03raU.roa
Signing time: Tue 14 Jul 2026 17:09:45 +0000
ROA not before: Tue 14 Jul 2026 17:09:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 2.26.222.0/24 maxlen: 24
2.27.98.0/24 maxlen: 24
2.27.154.0/24 maxlen: 24
2.27.214.0/23 maxlen: 24
2.27.241.0/24 maxlen: 24
31.77.98.0/24 maxlen: 24
31.77.99.0/24 maxlen: 24
31.77.104.0/24 maxlen: 24
31.77.105.0/24 maxlen: 24
31.77.109.0/24 maxlen: 24
31.77.190.0/23 maxlen: 24
31.77.206.0/23 maxlen: 24
31.77.217.0/24 maxlen: 24
31.77.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:61:9b:24:da:88:9e:91:dd:32:ba:cc:ee:19:ef:09:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 14 17:09:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ad9b2fab6b8641c227d954a8f606cd9cd37ada5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ac:2f:b5:0d:97:0d:db:51:3a:75:d9:14:4e:
55:cb:76:c7:92:1c:36:66:e8:85:a1:37:91:e6:fd:
62:64:bc:40:aa:f9:85:c3:30:e8:b6:d2:e9:2b:42:
39:d5:e9:6a:33:c3:26:8d:e8:19:4a:e3:1a:2c:b1:
3b:b6:29:ab:6c:3b:67:29:9d:75:9c:c8:e2:c0:04:
8c:1b:c0:11:69:99:44:78:59:19:3f:76:4c:70:2f:
83:8f:d1:5d:ab:ed:69:21:0c:12:63:12:28:06:53:
11:6b:3c:b0:4d:62:42:ff:28:c3:35:e3:03:81:21:
9f:3d:7c:4f:02:4f:a6:84:3a:89:c4:2b:db:a5:8d:
c3:f8:b4:d4:ac:80:8c:41:60:10:b0:a2:cd:40:b2:
9a:e0:af:d9:35:37:9c:6d:50:57:ff:88:a8:8a:a0:
bd:41:23:88:34:8f:01:9f:19:23:d0:87:3d:97:e5:
a1:12:af:a4:03:92:77:05:78:88:1b:41:04:9a:98:
8b:f3:34:5b:4a:a6:72:76:57:e0:b1:21:61:a4:e6:
03:a9:c9:9f:7c:56:64:77:49:ae:e9:45:9f:85:fd:
f1:cc:18:e9:aa:65:a9:38:b2:1a:e7:5b:31:13:9d:
0f:21:ef:35:3f:74:61:10:e8:81:80:41:3f:1e:c9:
e7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D9:B2:FA:B6:B8:64:1C:22:7D:95:4A:8F:60:6C:D9:CD:37:AD:A5
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Otmy-ra4ZBwifZVKj2Bs2c03raU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.222.0/24
2.27.98.0/24
2.27.154.0/24
2.27.214.0/23
2.27.241.0/24
31.77.98.0/23
31.77.104.0/23
31.77.109.0/24
31.77.190.0/23
31.77.206.0/23
31.77.217.0/24
31.77.240.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:99:dd:ac:27:03:32:f8:a7:36:16:05:59:b5:a5:fe:33:92:
e9:f7:7c:ac:1e:b4:13:97:6e:13:db:95:a5:47:6d:46:d8:d8:
22:64:f8:f1:6b:a7:a0:92:88:82:79:b7:9d:7c:9b:99:76:d5:
66:35:0e:c2:7e:4c:31:80:11:41:cb:01:a9:5a:6a:fb:48:35:
c9:75:e4:f7:46:33:82:2e:4c:60:5a:73:ca:8d:50:f4:9c:a6:
63:89:1f:51:54:1b:45:90:34:e3:a2:64:ca:f8:8f:08:95:d3:
8d:89:ec:a9:82:ac:52:af:6c:f6:31:2d:cb:95:12:86:e4:2e:
ed:ac:55:8d:a1:99:d3:5b:82:4d:80:24:9e:72:24:07:4f:42:
fd:77:41:af:7e:9e:08:30:1b:c2:d1:fd:a9:c2:04:8d:e2:67:
78:2e:f4:58:54:6b:83:4b:99:01:37:11:db:13:9e:f5:54:21:
b1:64:79:79:9f:58:d2:91:5e:72:7f:15:6f:1d:4c:41:1f:23:
02:cc:ec:2d:09:3d:e9:da:63:a8:9e:43:43:12:a4:5e:7a:4f:
ae:ba:f8:0a:f8:80:6f:14:fc:cd:e4:f8:1f:d4:c3:1f:5f:ec:
4d:9c:e9:7c:c1:99:ec:63:b8:ed:5b:21:40:7f:e1:98:41:9b:
d0:83:2b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:19 2026 by rpki-client