Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/RDd26RHBq93lokkqPHyXoBHFhBo.roa
File: RDd26RHBq93lokkqPHyXoBHFhBo.roa (raw, json)
Hash identifier: fiCORdDxy1ZfEvR15r3yOufUN82Jgnb5KY/Fv/rP6uA=
Subject key identifier: 44:37:76:E9:11:C1:AB:DD:E5:A2:49:2A:3C:7C:97:A0:11:C5:84:1A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1A36FF8AEE27A5DF7473C091F2F88D981
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/RDd26RHBq93lokkqPHyXoBHFhBo.roa
Signing time: Tue 03 Nov 2026 22:03:06 +0000
ROA not before: Tue 03 Nov 2026 22:03:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201988
IP address blocks: 2.26.122.0/24 maxlen: 24
2.26.123.0/24 maxlen: 24
2.26.224.0/24 maxlen: 24
2.26.225.0/24 maxlen: 24
2.26.226.0/24 maxlen: 24
2.26.227.0/24 maxlen: 24
13.143.132.0/24 maxlen: 24
13.143.133.0/24 maxlen: 24
13.143.166.0/24 maxlen: 24
13.143.167.0/24 maxlen: 24
31.76.30.0/24 maxlen: 24
31.76.94.0/24 maxlen: 24
31.76.100.0/24 maxlen: 24
31.76.102.0/23 maxlen: 24
31.76.244.0/24 maxlen: 24
31.76.245.0/24 maxlen: 24
31.76.251.0/24 maxlen: 24
31.76.252.0/24 maxlen: 24
31.77.6.0/24 maxlen: 24
31.77.116.0/24 maxlen: 24
31.77.124.0/24 maxlen: 24
31.77.211.0/24 maxlen: 24
31.77.214.0/24 maxlen: 24
144.31.53.0/24 maxlen: 24
144.31.148.0/24 maxlen: 24
144.31.169.0/24 maxlen: 24
144.31.221.0/24 maxlen: 24
144.31.223.0/24 maxlen: 24
144.31.238.0/24 maxlen: 24
179.198.48.0/24 maxlen: 24
191.217.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a3:6f:f8:ae:e2:7a:5d:f7:47:3c:09:1f:2f:88:d9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 3 22:03:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=443776e911c1abdde5a2492a3c7c97a011c5841a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6c:3f:6f:a6:77:c5:fc:32:7d:78:1d:55:06:
00:be:4b:9d:c9:0e:0d:75:1b:47:f1:55:9d:a3:43:
c3:2b:14:89:f5:0f:2c:22:1f:81:77:c3:58:df:f0:
44:c9:aa:46:18:e6:b1:6e:a9:6c:bf:dc:02:cc:4a:
bb:c9:23:78:cb:17:05:d7:82:be:3b:eb:c1:6f:91:
ed:2f:2f:55:8e:b0:20:2f:18:98:27:21:bc:c5:4a:
87:35:d9:93:15:1a:a6:88:5d:16:b0:52:e9:9f:eb:
55:fb:81:95:d8:4e:12:e8:21:65:ed:f0:3d:01:74:
71:e4:69:6c:e1:ec:2d:be:d2:2f:cb:4e:2e:86:ac:
0f:92:ec:41:2d:83:4f:92:15:85:46:6d:95:91:09:
f2:93:9f:78:23:2e:57:ee:62:95:b3:71:ca:ef:25:
4b:0c:fb:2e:68:31:6b:03:ce:89:31:ba:c2:21:52:
bb:99:20:ce:10:41:75:9d:d4:5e:b8:78:89:79:93:
27:7e:51:06:a3:e3:cc:df:7d:c1:ed:7a:be:db:db:
17:0d:bd:02:54:8b:eb:c2:f2:61:12:16:f5:4f:06:
6f:87:5d:7f:3d:55:01:6a:e4:d4:f2:13:65:7d:a1:
f2:e4:52:07:67:dd:33:d6:6d:39:af:e3:05:96:3a:
94:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:37:76:E9:11:C1:AB:DD:E5:A2:49:2A:3C:7C:97:A0:11:C5:84:1A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/RDd26RHBq93lokkqPHyXoBHFhBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.122.0/23
2.26.224.0/22
13.143.132.0/23
13.143.166.0/23
31.76.30.0/24
31.76.94.0/24
31.76.100.0/24
31.76.102.0/23
31.76.244.0/23
31.76.251.0-31.76.252.255
31.77.6.0/24
31.77.116.0/24
31.77.124.0/24
31.77.211.0/24
31.77.214.0/24
144.31.53.0/24
144.31.148.0/24
144.31.169.0/24
144.31.221.0/24
144.31.223.0/24
144.31.238.0/24
179.198.48.0/24
191.217.239.0/24
Signature Algorithm: sha256WithRSAEncryption
05:4d:64:89:d7:f7:b1:ca:c6:00:42:34:75:2c:17:79:6e:45:
20:a9:48:0b:35:8b:db:11:28:c8:ef:70:5f:43:a1:03:cf:a7:
aa:e1:7c:6a:72:c9:e8:a9:3b:93:51:e5:54:a4:5f:22:32:a6:
c8:1f:ab:d1:4d:fc:65:1d:c0:1f:d9:46:8e:28:4e:00:4b:13:
51:26:da:99:8c:3e:89:1a:9f:23:a2:52:1d:38:93:f1:c2:b0:
7c:86:26:cc:bc:b0:9b:57:57:38:8b:0b:e8:51:00:bc:cc:76:
5f:1f:68:e6:20:a1:bc:35:bf:5d:99:54:11:11:aa:b4:ea:fc:
0a:85:ad:f3:b1:ac:e1:14:dd:8d:88:0e:fc:84:32:2f:a1:76:
37:fe:95:27:95:fa:2d:49:7a:cc:3c:e0:0d:1b:c8:35:69:43:
04:ab:0c:2c:c6:07:36:38:9f:dd:2d:de:3b:90:b0:a5:cc:a3:
42:47:c2:92:59:f4:69:25:30:84:b9:d8:b1:dc:3e:75:a0:83:
55:3a:5a:d4:71:b3:e9:df:20:e0:10:d5:c0:95:9c:ef:10:dc:
1b:96:26:af:db:f9:7f:0a:59:32:57:91:22:4d:ef:18:6e:8a:
a7:e9:c4:99:d7:08:5c:e0:a9:e2:c0:e5:74:df:c5:31:b5:f7:
0a:7d:4c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:18:00 2026 by rpki-client