Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/U-4fFgsFfD37SE_3hnmzoK_jFR0.roa
File: U-4fFgsFfD37SE_3hnmzoK_jFR0.roa (raw, json)
Hash identifier: p1K/QNo+vnW9HrsTZYWElYkzTZ7cBLL3Ife76+9ta6E=
Subject key identifier: 53:EE:1F:16:0B:05:7C:3D:FB:48:4F:F7:86:79:B3:A0:AF:E3:15:1D
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A087D268E50040B5FF3777C36C291AC6E1
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/U-4fFgsFfD37SE_3hnmzoK_jFR0.roa
Signing time: Wed 09 Sep 2026 20:18:28 +0000
ROA not before: Wed 09 Sep 2026 20:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207957
IP address blocks: 2.26.8.0/24 maxlen: 24
2.26.9.0/24 maxlen: 24
2.26.10.0/24 maxlen: 24
2.26.11.0/24 maxlen: 24
2.26.88.0/24 maxlen: 24
2.26.89.0/24 maxlen: 24
2.26.90.0/24 maxlen: 24
2.26.91.0/24 maxlen: 24
2.26.92.0/24 maxlen: 24
2.26.93.0/24 maxlen: 24
2.27.208.0/24 maxlen: 24
2.27.209.0/24 maxlen: 24
2.27.210.0/24 maxlen: 24
2.27.211.0/24 maxlen: 24
13.143.137.0/24 maxlen: 24
13.143.180.0/22 maxlen: 24
13.143.188.0/22 maxlen: 24
13.143.196.0/22 maxlen: 24
31.76.0.0/24 maxlen: 24
31.76.1.0/24 maxlen: 24
31.76.2.0/24 maxlen: 24
31.76.3.0/24 maxlen: 24
31.76.4.0/24 maxlen: 24
31.76.5.0/24 maxlen: 24
31.76.6.0/24 maxlen: 24
31.76.7.0/24 maxlen: 24
31.76.52.0/24 maxlen: 24
31.76.53.0/24 maxlen: 24
31.76.54.0/24 maxlen: 24
31.76.55.0/24 maxlen: 24
31.76.60.0/24 maxlen: 24
31.76.61.0/24 maxlen: 24
31.76.62.0/24 maxlen: 24
31.76.63.0/24 maxlen: 24
31.76.64.0/24 maxlen: 24
31.76.65.0/24 maxlen: 24
31.76.66.0/24 maxlen: 24
31.76.68.0/24 maxlen: 24
31.76.69.0/24 maxlen: 24
31.76.70.0/24 maxlen: 24
31.76.71.0/24 maxlen: 24
31.76.82.0/24 maxlen: 24
31.76.83.0/24 maxlen: 24
31.76.84.0/24 maxlen: 24
31.76.85.0/24 maxlen: 24
31.76.114.0/24 maxlen: 24
31.76.115.0/24 maxlen: 24
31.77.140.0/24 maxlen: 24
31.77.141.0/24 maxlen: 24
31.77.142.0/24 maxlen: 24
31.77.143.0/24 maxlen: 24
64.188.89.0/24 maxlen: 24
64.188.90.0/24 maxlen: 24
64.188.98.0/24 maxlen: 24
64.188.127.0/24 maxlen: 24
77.239.107.0/24 maxlen: 24
144.31.15.0/24 maxlen: 24
144.31.49.0/24 maxlen: 24
144.31.50.0/24 maxlen: 24
144.31.51.0/24 maxlen: 24
144.31.57.0/24 maxlen: 24
144.31.82.0/24 maxlen: 24
144.31.83.0/24 maxlen: 24
144.31.93.0/24 maxlen: 24
144.31.103.0/24 maxlen: 24
144.31.107.0/24 maxlen: 24
144.31.108.0/24 maxlen: 24
144.31.109.0/24 maxlen: 24
144.31.213.0/24 maxlen: 24
144.31.214.0/24 maxlen: 24
144.31.216.0/24 maxlen: 24
144.31.217.0/24 maxlen: 24
144.31.218.0/24 maxlen: 24
144.31.219.0/24 maxlen: 24
144.31.239.0/24 maxlen: 24
144.31.240.0/24 maxlen: 24
144.31.241.0/24 maxlen: 24
144.31.242.0/24 maxlen: 24
144.31.243.0/24 maxlen: 24
144.31.249.0/24 maxlen: 24
150.241.72.0/24 maxlen: 24
150.241.73.0/24 maxlen: 24
150.241.74.0/24 maxlen: 24
150.241.75.0/24 maxlen: 24
150.241.82.0/24 maxlen: 24
150.241.83.0/24 maxlen: 24
150.241.100.0/24 maxlen: 24
150.241.101.0/24 maxlen: 24
150.241.102.0/24 maxlen: 24
150.241.103.0/24 maxlen: 24
179.254.86.0/24 maxlen: 24
185.170.153.0/24 maxlen: 24
185.170.154.0/24 maxlen: 24
193.23.195.0/24 maxlen: 24
193.23.200.0/24 maxlen: 24
193.23.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:87:d2:68:e5:00:40:b5:ff:37:77:c3:6c:29:1a:c6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 9 20:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53ee1f160b057c3dfb484ff78679b3a0afe3151d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f7:01:15:58:92:2e:dd:9a:1f:b3:c8:1b:b6:
82:0e:96:d5:f8:b7:5f:90:cd:5a:ae:b7:c9:9a:5b:
db:31:eb:c0:6b:ca:c5:ea:1e:74:aa:fa:77:af:37:
75:03:21:ed:3b:ec:e5:86:3a:47:a7:f2:e7:dc:0c:
05:2f:a9:df:11:60:58:89:82:c8:7a:e1:ed:a1:c4:
94:36:2d:fc:d5:70:98:2f:43:9d:4d:c7:e2:ef:3d:
c0:94:6a:e7:23:60:60:25:aa:3f:d2:59:82:a8:71:
f7:2c:ab:54:c2:1e:ed:72:00:ea:9d:ee:10:ce:35:
c2:a7:b8:78:90:2d:64:3b:fa:35:e9:65:a9:c0:b9:
92:94:3b:a8:6e:c9:3d:1b:16:b5:34:ff:af:76:88:
df:60:2a:6b:88:59:1c:0d:23:d6:2d:51:62:b2:9c:
33:bc:88:59:01:b0:62:d5:ab:6f:a9:93:53:87:7d:
86:5c:23:1b:eb:63:d1:4f:85:6d:cc:7f:78:83:9e:
43:5d:6c:30:43:2e:a5:4f:e6:2a:e7:05:62:cc:6a:
e7:a4:5b:1d:dc:67:a3:ba:44:be:04:50:64:45:9e:
1f:ff:15:22:80:db:50:5a:2a:23:bb:41:06:42:48:
c1:4b:de:f4:74:6d:5b:81:49:7c:e1:0b:9a:88:8d:
36:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EE:1F:16:0B:05:7C:3D:FB:48:4F:F7:86:79:B3:A0:AF:E3:15:1D
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/U-4fFgsFfD37SE_3hnmzoK_jFR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.8.0/22
2.26.88.0-2.26.93.255
2.27.208.0/22
13.143.137.0/24
13.143.180.0/22
13.143.188.0/22
13.143.196.0/22
31.76.0.0/21
31.76.52.0/22
31.76.60.0-31.76.66.255
31.76.68.0/22
31.76.82.0-31.76.85.255
31.76.114.0/23
31.77.140.0/22
64.188.89.0-64.188.90.255
64.188.98.0/24
64.188.127.0/24
77.239.107.0/24
144.31.15.0/24
144.31.49.0-144.31.51.255
144.31.57.0/24
144.31.82.0/23
144.31.93.0/24
144.31.103.0/24
144.31.107.0-144.31.109.255
144.31.213.0-144.31.214.255
144.31.216.0/22
144.31.239.0-144.31.243.255
144.31.249.0/24
150.241.72.0/22
150.241.82.0/23
150.241.100.0/22
179.254.86.0/24
185.170.153.0-185.170.154.255
193.23.195.0/24
193.23.200.0/24
193.23.202.0/24
Signature Algorithm: sha256WithRSAEncryption
54:5e:c0:39:64:91:a5:d1:11:87:43:db:42:e1:4f:d2:93:eb:
96:ce:d6:06:bd:76:f7:ea:03:48:75:0e:3c:ef:d4:70:f4:1d:
b8:cd:89:51:5c:5b:d7:4b:02:59:0e:f9:3e:4b:92:e1:66:3c:
ce:eb:46:48:21:4a:0a:e8:fd:e7:11:93:26:ed:b6:19:ac:c0:
8d:a2:22:2b:ef:74:79:23:12:9a:3b:c4:ee:3e:45:3a:ee:72:
38:fa:35:be:2e:3b:34:39:d8:f6:cc:9f:e8:c5:9a:d3:57:b2:
1e:ed:cf:33:8e:28:fe:81:3b:39:e5:ce:d0:b5:cb:52:32:42:
6d:b0:31:aa:ba:53:b9:12:10:67:66:b6:96:0b:59:55:3e:0b:
62:5a:de:4d:e3:33:ab:3f:ed:90:50:80:ef:cc:7b:e1:2a:c3:
5a:92:c7:d7:37:a2:c9:1c:cd:7a:11:60:6b:2e:04:e2:6e:c9:
41:f6:1b:bd:79:e4:fe:0e:44:24:24:3f:7d:2a:e6:f5:9a:c8:
d4:9d:17:89:2c:93:22:d2:18:96:d0:19:f3:de:63:6a:3e:89:
f4:4d:a5:ec:23:f5:2e:a3:e5:f0:9c:11:0d:d9:72:37:23:c7:
7d:b2:12:7b:9b:2e:32:7f:c1:ef:3e:81:86:4f:54:51:5d:de:
fa:7e:21:f9
-----BEGIN CERTIFICATE-----
MIIGJzCCBQ+gAwIBAgISAaCH0mjlAEC1/zd3w2wpGsbhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwOTA5MjAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2VlMWYxNjBiMDU3YzNkZmI0ODRmZjc4Njc5YjNhMGFmZTMxNTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfcBFViSLt2aH7PIG7aCDpbV+Ldf
kM1arrfJmlvbMevAa8rF6h50qvp3rzd1AyHtO+zlhjpHp/Ln3AwFL6nfEWBYiYLI
euHtocSUNi381XCYL0OdTcfi7z3AlGrnI2BgJao/0lmCqHH3LKtUwh7tcgDqne4Q
zjXCp7h4kC1kO/o16WWpwLmSlDuobsk9Gxa1NP+vdojfYCpriFkcDSPWLVFispwz
vIhZAbBi1atvqZNTh32GXCMb62PRT4VtzH94g55DXWwwQy6lT+Yq5wVizGrnpFsd
3GejukS+BFBkRZ4f/xUigNtQWioju0EGQkjBS970dG1bgUl84QuaiI021wIDAQAB
o4IDMzCCAy8wHQYDVR0OBBYEFFPuHxYLBXw9+0hP94Z5s6Cv4xUdMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvVS00ZkZnc0ZmRDM3U0VfM2hubXpvS19qRlIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBRwYIKwYBBQUHAQcBAf8EggE2MIIBMjCCAS4EAgABMIIB
JgMEAgIaCDAMAwQDAhpYAwQBAhpcAwQCAhvQAwQADY+JAwQCDY+0AwQCDY+8AwQC
DY/EAwQDH0wAAwQCH0w0MAwDBAIfTDwDBAAfTEIDBAIfTEQwDAMEAR9MUgMEAR9M
VAMEAR9McgMEAh9NjDAMAwQAQLxZAwQAQLxaAwQAQLxiAwQAQLx/AwQATe9rAwQA
kB8PMAwDBACQHzEDBAKQHzADBACQHzkDBAGQH1IDBACQH10DBACQH2cwDAMEAJAf
awMEAZAfbDAMAwQAkB/VAwQAkB/WAwQCkB/YMAwDBACQH+8DBAKQH/ADBACQH/kD
BAKW8UgDBAGW8VIDBAKW8WQDBACz/lYwDAMEALmqmQMEALmqmgMEAMEXwwMEAMEX
yAMEAMEXyjANBgkqhkiG9w0BAQsFAAOCAQEAVF7AOWSRpdERh0PbQuFP0pPrls7W
Br129+oDSHUOPO/UcPQduM2JUVxb10sCWQ75PkuS4WY8zutGSCFKCuj95xGTJu22
GazAjaIiK+90eSMSmjvE7j5FOu5yOPo1vi47NDnY9syf6MWa01eyHu3PM44o/oE7
OeXO0LXLUjJCbbAxqrpTuRIQZ2a2lgtZVT4LYlreTeMzqz/tkFCA78x74SrDWpLH
1zeiyRzNehFgay4E4m7JQfYbvXnk/g5EJCQ/fSrm9ZrI1J0XiSyTItIYltAZ895j
aj6J9E2l7CP1LqPl8JwRDdlyNyPHfbISe5suMn/B7z6Bhk9UUV3e+n4h+Q==
-----END CERTIFICATE-----
Generated at Thu Sep 10 13:00:53 2026 by rpki-client