Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Ql4xA2VXsvjByT9tTERwCITBjH4.roa
File: Ql4xA2VXsvjByT9tTERwCITBjH4.roa (raw, json)
Hash identifier: BSRZQKDcJ0wWDL3qlRbFJjSsbTNk+WnE2qOex24lvI8=
Subject key identifier: 42:5E:31:03:65:57:B2:F8:C1:C9:3F:6D:4C:44:70:08:84:C1:8C:7E
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019ED6B8B201A8E03F360C77448CE7D03BA6
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Ql4xA2VXsvjByT9tTERwCITBjH4.roa
Signing time: Wed 17 Jun 2026 17:54:48 +0000
ROA not before: Wed 17 Jun 2026 17:54:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206134
IP address blocks: 2.26.16.0/22 maxlen: 24
2.26.28.0/22 maxlen: 24
2.26.116.0/22 maxlen: 24
2.26.151.0/24 maxlen: 24
2.26.192.0/21 maxlen: 24
2.26.248.0/22 maxlen: 24
2.27.16.0/22 maxlen: 24
2.27.120.0/22 maxlen: 24
31.76.16.0/22 maxlen: 24
31.76.44.0/22 maxlen: 24
31.76.72.0/22 maxlen: 24
31.76.96.0/22 maxlen: 24
31.76.224.0/22 maxlen: 24
31.77.132.0/22 maxlen: 24
31.77.174.0/23 maxlen: 24
64.188.115.0/24 maxlen: 24
77.239.127.0/24 maxlen: 24
144.31.98.0/24 maxlen: 24
144.31.154.0/23 maxlen: 24
144.31.180.0/22 maxlen: 24
144.31.188.0/23 maxlen: 24
144.31.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d6:b8:b2:01:a8:e0:3f:36:0c:77:44:8c:e7:d0:3b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 17 17:54:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=425e31036557b2f8c1c93f6d4c44700884c18c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:61:50:3a:2a:9b:90:ce:c8:ac:d8:04:19:79:
c2:aa:b7:e2:18:98:ac:c3:55:19:1b:bf:82:41:f0:
1e:ff:df:6f:21:ec:7e:5d:f7:2b:a9:a4:23:99:09:
cd:bf:9f:1d:c1:53:bb:61:5f:47:d2:c4:b2:b4:4a:
33:20:c4:a5:a8:58:d8:aa:41:65:fe:21:75:c5:6f:
f1:a0:a6:7a:c9:e4:dc:c5:2d:e5:b8:95:99:1e:9c:
ac:6e:86:a9:3c:e9:7d:64:e1:71:c6:3a:af:dd:f2:
35:ea:cb:08:43:c0:33:80:50:07:e2:ce:33:a9:03:
ea:c3:db:ed:9a:39:eb:b4:60:4a:3c:dc:4c:b9:8c:
5b:c3:f7:42:11:f7:c2:63:c2:02:26:9c:58:55:c6:
7f:49:28:6c:30:58:23:fd:17:aa:5b:1c:da:75:78:
d7:8b:82:d0:7b:58:70:1b:a3:91:17:ed:72:8f:ad:
49:c5:ec:d3:c9:b7:a2:4d:05:74:e8:78:7c:2e:2b:
ab:2e:bd:65:5f:f6:c6:5f:6d:4c:20:00:a1:3d:68:
f3:9c:75:b1:a6:22:42:80:6d:4d:38:5b:d1:d2:2a:
5b:fc:21:65:58:00:9b:6c:6e:b6:f7:65:f5:8c:95:
82:bb:99:6c:99:92:ef:02:88:a2:4e:96:db:d4:91:
78:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5E:31:03:65:57:B2:F8:C1:C9:3F:6D:4C:44:70:08:84:C1:8C:7E
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Ql4xA2VXsvjByT9tTERwCITBjH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.16.0/22
2.26.28.0/22
2.26.116.0/22
2.26.151.0/24
2.26.192.0/21
2.26.248.0/22
2.27.16.0/22
2.27.120.0/22
31.76.16.0/22
31.76.44.0/22
31.76.72.0/22
31.76.96.0/22
31.76.224.0/22
31.77.132.0/22
31.77.174.0/23
64.188.115.0/24
77.239.127.0/24
144.31.98.0/24
144.31.154.0/23
144.31.180.0/22
144.31.188.0/23
144.31.251.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:29:57:f9:1f:a2:5f:3f:f0:af:e6:08:f7:ec:fc:aa:3e:61:
3e:6a:d2:9c:c9:71:42:b5:aa:02:6f:1e:29:dd:64:e8:74:0d:
70:74:78:06:06:44:ef:88:cc:4e:4a:a0:95:3c:bf:6e:92:87:
24:45:6a:68:4f:38:9f:1a:32:50:3d:ee:cb:8a:65:6c:88:87:
1f:58:92:c1:45:7b:03:36:5d:d3:af:0e:82:cf:ab:14:16:6b:
a2:b6:42:74:ad:92:97:2d:e5:f4:75:cf:cb:cc:55:2d:1c:66:
0a:a2:84:2c:64:f8:13:59:cc:de:21:24:e5:c4:03:a3:aa:cf:
f2:89:a9:1e:f7:ba:4c:f3:ac:72:72:57:ab:69:cd:1f:f7:82:
07:35:43:f7:1f:7b:46:8c:51:2a:f4:ae:cf:f4:76:e7:78:96:
5e:4a:87:fe:4d:0a:88:11:8b:b0:1a:fe:78:ac:7f:b8:fe:54:
b1:80:8a:4b:f2:62:93:b6:84:a6:12:ae:3a:9c:49:b8:76:89:
5f:cd:52:84:73:7b:2b:11:85:6e:99:8c:ef:d2:26:83:e0:25:
5d:e2:af:44:4e:a9:9a:a8:c8:39:97:f9:7c:0f:5c:c5:7f:78:
42:e3:1f:40:19:55:b7:c6:21:57:b0:60:13:10:78:c8:38:8a:
5f:1c:09:ae
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgISAZ7WuLIBqOA/Ngx3RIzn0DumMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNjE3MTc1NDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjVlMzEwMzY1NTdiMmY4YzFjOTNmNmQ0YzQ0NzAwODg0YzE4YzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GFQOiqbkM7IrNgEGXnCqrfiGJis
w1UZG7+CQfAe/99vIex+XfcrqaQjmQnNv58dwVO7YV9H0sSytEozIMSlqFjYqkFl
/iF1xW/xoKZ6yeTcxS3luJWZHpysboapPOl9ZOFxxjqv3fI16ssIQ8AzgFAH4s4z
qQPqw9vtmjnrtGBKPNxMuYxbw/dCEffCY8ICJpxYVcZ/SShsMFgj/ReqWxzadXjX
i4LQe1hwG6ORF+1yj61JxezTybeiTQV06Hh8LiurLr1lX/bGX21MIAChPWjznHWx
piJCgG1NOFvR0ipb/CFlWACbbG6292X1jJWCu5lsmZLvAoiiTpbb1JF4VwIDAQAB
o4ICjDCCAogwHQYDVR0OBBYEFEJeMQNlV7L4wck/bUxEcAiEwYx+MB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvUWw0eEEyVlhzdmpCeVQ5dFRFUndDSVRCakg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGhBggrBgEFBQcBBwEB/wSBkTCBjjCBiwQCAAEwgYQDBAIC
GhADBAICGhwDBAICGnQDBAACGpcDBAMCGsADBAICGvgDBAICGxADBAICG3gDBAIf
TBADBAIfTCwDBAIfTEgDBAIfTGADBAIfTOADBAIfTYQDBAEfTa4DBABAvHMDBABN
738DBACQH2IDBAGQH5oDBAKQH7QDBAGQH7wDBACQH/swDQYJKoZIhvcNAQELBQAD
ggEBALspV/kfol8/8K/mCPfs/Ko+YT5q0pzJcUK1qgJvHindZOh0DXB0eAYGRO+I
zE5KoJU8v26ShyRFamhPOJ8aMlA97suKZWyIhx9YksFFewM2XdOvDoLPqxQWa6K2
QnStkpct5fR1z8vMVS0cZgqihCxk+BNZzN4hJOXEA6Oqz/KJqR73ukzzrHJyV6tp
zR/3ggc1Q/cfe0aMUSr0rs/0dud4ll5Kh/5NCogRi7Aa/nisf7j+VLGAikvyYpO2
hKYSrjqcSbh2iV/NUoRzeysRhW6ZjO/SJoPgJV3ir0ROqZqoyDmX+XwPXMV/eELj
H0AZVbfGIVewYBMQeMg4il8cCa4=
-----END CERTIFICATE-----
Generated at Sat Jun 20 04:06:47 2026 by rpki-client