Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/UEAJN1fm-Y7AjUW5WHbOuUy8h4Q.roa
File: UEAJN1fm-Y7AjUW5WHbOuUy8h4Q.roa (raw, json)
Hash identifier: WSHcJXuOORkpVVSnCPErplZXNTxmpfXOlMUOb57GPHc=
Subject key identifier: 50:40:09:37:57:E6:F9:8E:C0:8D:45:B9:58:76:CE:B9:4C:BC:87:84
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E37AE1D8C6BF2727454BF475BDE122C4E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/UEAJN1fm-Y7AjUW5WHbOuUy8h4Q.roa
Signing time: Sun 17 May 2026 20:43:38 +0000
ROA not before: Sun 17 May 2026 20:43:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401152
IP address blocks: 2.26.95.0/24 maxlen: 24
31.76.128.0/21 maxlen: 24
31.76.168.0/21 maxlen: 24
31.76.192.0/22 maxlen: 24
31.76.200.0/22 maxlen: 24
31.76.208.0/22 maxlen: 24
31.76.216.0/22 maxlen: 24
31.76.228.0/23 maxlen: 24
31.76.232.0/23 maxlen: 24
31.76.236.0/23 maxlen: 24
31.76.242.0/23 maxlen: 24
144.31.8.0/23 maxlen: 24
144.31.110.0/24 maxlen: 24
144.31.160.0/22 maxlen: 24
144.31.235.0/24 maxlen: 24
150.241.69.0/24 maxlen: 24
185.207.135.0/24 maxlen: 24
185.216.104.0/22 maxlen: 24
193.23.192.0/24 maxlen: 24
193.23.198.0/24 maxlen: 24
193.23.204.0/22 maxlen: 22
193.23.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 May 2026 14:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:37:ae:1d:8c:6b:f2:72:74:54:bf:47:5b:de:12:2c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 17 20:43:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5040093757e6f98ec08d45b95876ceb94cbc8784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:ea:cd:f4:3e:9d:41:5d:ed:2f:c2:2b:bb:
c9:84:ff:ac:9d:84:8f:c8:fd:ab:99:df:1e:40:a6:
17:ad:0d:ba:8f:a9:45:da:86:6b:ab:a7:ca:a5:1c:
af:52:cf:9d:0d:a6:5f:83:fa:46:4a:fe:18:b5:23:
80:48:67:bd:a5:4d:56:a8:0c:8b:1f:09:21:ee:b9:
20:ba:54:f6:a7:01:9e:d4:18:2a:cd:89:2f:c1:df:
30:b2:29:e9:5e:aa:02:29:fb:bf:9c:72:59:55:47:
1e:5e:c6:cd:39:b0:f3:e1:33:61:88:cd:a1:e8:59:
e2:02:7a:b9:a4:d1:c1:68:1c:01:6f:d0:01:bf:0e:
85:39:28:04:d0:bd:ee:43:fe:26:f5:a4:cf:0d:18:
b6:21:54:bd:ee:ff:7b:ba:42:87:0b:46:be:ff:39:
13:ab:46:5e:ce:0a:b3:5b:9c:20:87:16:c5:e9:5d:
66:6b:02:52:68:67:4c:07:df:bf:2d:5f:64:5d:1e:
b3:0e:e6:b2:c1:fa:ab:f2:d0:c1:ed:da:e9:95:b9:
45:70:ef:dd:dd:37:cb:28:f3:a7:bd:32:f4:61:e9:
42:29:37:e7:ea:3a:b1:69:5b:9d:3d:17:1a:18:6a:
34:71:f3:6a:5f:cf:b0:09:fc:13:26:54:d8:4c:ca:
02:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:40:09:37:57:E6:F9:8E:C0:8D:45:B9:58:76:CE:B9:4C:BC:87:84
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/UEAJN1fm-Y7AjUW5WHbOuUy8h4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.95.0/24
31.76.128.0/21
31.76.168.0/21
31.76.192.0/22
31.76.200.0/22
31.76.208.0/22
31.76.216.0/22
31.76.228.0/23
31.76.232.0/23
31.76.236.0/23
31.76.242.0/23
144.31.8.0/23
144.31.110.0/24
144.31.160.0/22
144.31.235.0/24
150.241.69.0/24
185.207.135.0/24
185.216.104.0/22
193.23.192.0/24
193.23.198.0/24
193.23.204.0/22
193.23.212.0/22
Signature Algorithm: sha256WithRSAEncryption
97:5e:23:78:c2:c2:d7:7d:2d:04:ca:e3:a6:e9:d0:5c:6a:89:
e4:a2:8d:f4:7e:fd:3c:60:87:d1:08:cc:0e:b3:49:0a:78:d5:
e8:88:68:a0:91:5d:b3:36:cf:84:fe:e9:c8:4b:22:97:50:08:
da:7f:7b:fb:6a:d3:06:a0:1b:4b:af:e4:81:f3:b6:2a:57:a5:
49:d3:23:4e:e1:c4:b8:fc:e8:40:3c:88:3b:59:9b:a4:a1:1d:
ac:32:75:1c:6c:b0:15:30:62:c2:5d:28:72:f8:3e:bd:d0:71:
d7:4c:6d:02:12:fe:23:d2:3d:af:d3:d2:e0:71:4a:8f:74:df:
fa:1d:db:77:64:5d:93:dd:87:dd:04:b4:18:77:ce:99:7e:e4:
fc:d7:c7:4e:6c:2d:c9:1d:00:81:4e:31:b1:65:39:d1:68:dc:
35:4e:9e:f9:6a:56:9c:f7:c1:f4:f5:1d:c2:13:65:bf:07:87:
2c:1a:b2:1e:ca:80:4f:e2:53:63:ad:52:4c:c1:16:2a:ad:47:
cd:2b:e9:69:64:e6:88:f4:12:27:98:33:bd:9e:32:84:1f:2b:
bf:5e:fc:9a:33:4e:ae:ee:39:38:f2:6f:f7:bb:f4:dc:e6:e6:
86:09:c5:34:a5:af:46:3a:d0:90:65:96:e4:84:ee:dc:47:2a:
68:b9:bc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 20 21:30:17 2026 by rpki-client