Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/UhgWZxW1hS0Y2Wd9cE2YGSMu5t4.roa
File: UhgWZxW1hS0Y2Wd9cE2YGSMu5t4.roa (raw, json)
Hash identifier: LhumRC/zhaZgaHvr5STw4LSLfPOx1ZRsU0NIDXUAn9g=
Subject key identifier: 52:18:16:67:15:B5:85:2D:18:D9:67:7D:70:4D:98:19:23:2E:E6:DE
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A016FAC68D8DCD59C0A24842ADFCF69214
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/UhgWZxW1hS0Y2Wd9cE2YGSMu5t4.roa
Signing time: Tue 18 Aug 2026 22:25:28 +0000
ROA not before: Tue 18 Aug 2026 22:25:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401152
IP address blocks: 2.26.95.0/24 maxlen: 24
2.26.159.0/24 maxlen: 24
2.26.166.0/24 maxlen: 24
2.26.170.0/24 maxlen: 24
2.26.208.0/21 maxlen: 24
2.27.68.0/22 maxlen: 24
2.27.155.0/24 maxlen: 24
2.27.162.0/24 maxlen: 24
2.27.172.0/24 maxlen: 24
2.27.228.0/22 maxlen: 24
2.27.232.0/24 maxlen: 24
13.143.28.0/22 maxlen: 24
13.143.48.0/22 maxlen: 22
13.143.72.0/22 maxlen: 24
13.143.76.0/22 maxlen: 22
13.143.176.0/23 maxlen: 24
13.143.234.0/23 maxlen: 24
31.76.192.0/22 maxlen: 24
31.76.208.0/22 maxlen: 24
31.76.228.0/23 maxlen: 24
31.76.232.0/23 maxlen: 24
31.76.236.0/23 maxlen: 24
31.76.242.0/23 maxlen: 24
31.77.0.0/21 maxlen: 24
31.77.20.0/22 maxlen: 24
31.77.229.0/24 maxlen: 24
144.31.110.0/24 maxlen: 24
144.31.160.0/22 maxlen: 24
144.31.235.0/24 maxlen: 24
150.241.69.0/24 maxlen: 24
177.1.176.0/22 maxlen: 24
179.254.72.0/24 maxlen: 24
179.254.73.0/24 maxlen: 24
179.254.74.0/24 maxlen: 24
179.254.75.0/24 maxlen: 24
179.254.76.0/24 maxlen: 24
179.254.77.0/24 maxlen: 24
179.254.78.0/24 maxlen: 24
179.254.79.0/24 maxlen: 24
179.254.80.0/24 maxlen: 24
179.254.81.0/24 maxlen: 24
179.254.82.0/24 maxlen: 24
179.254.84.0/24 maxlen: 24
179.254.85.0/24 maxlen: 24
179.254.86.0/24 maxlen: 24
179.254.92.0/24 maxlen: 24
179.254.93.0/24 maxlen: 24
179.254.96.0/24 maxlen: 24
179.254.97.0/24 maxlen: 24
179.254.98.0/23 maxlen: 24
179.254.104.0/24 maxlen: 24
179.254.105.0/24 maxlen: 24
179.254.106.0/24 maxlen: 24
179.254.107.0/24 maxlen: 24
179.254.112.0/24 maxlen: 24
179.254.113.0/24 maxlen: 24
185.207.135.0/24 maxlen: 24
185.216.104.0/22 maxlen: 24
193.23.192.0/24 maxlen: 24
193.23.198.0/24 maxlen: 24
193.23.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:16:fa:c6:8d:8d:cd:59:c0:a2:48:42:ad:fc:f6:92:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 18 22:25:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5218166715b5852d18d9677d704d9819232ee6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:46:0c:f8:8f:88:64:bd:ee:d2:2a:db:78:5e:
9d:43:ce:61:fd:b6:c6:de:13:67:1d:de:a3:8f:40:
cb:c9:44:d1:e7:c5:eb:75:d0:35:ac:c1:20:85:c9:
89:96:6e:2b:ae:01:6f:e8:4e:6c:c1:fd:45:0f:e3:
7f:d6:dc:18:58:eb:3c:8f:59:c7:09:ac:ca:e8:9c:
ae:b5:bc:86:2a:86:da:69:11:47:20:c0:13:e5:1a:
32:51:f1:f6:f9:f3:d5:d8:ff:3a:2d:56:06:97:02:
64:dc:2a:8e:f8:40:56:f0:cf:7d:c1:ab:58:a6:5a:
f2:56:cc:dd:51:b9:94:af:d8:79:f9:8a:52:ae:40:
1f:8e:14:22:36:0b:30:d8:e0:fb:9c:a0:6b:b2:8f:
32:40:fd:93:77:e0:a4:72:65:d4:ed:f0:d5:05:34:
88:dd:b6:19:1a:c1:3c:cf:6f:98:f6:e5:fb:4d:81:
27:52:47:4d:ae:29:a0:2f:f8:d9:b7:1a:65:ae:0d:
4c:f4:ac:ba:48:95:7d:fc:7a:3e:a1:a7:a7:58:c5:
5d:bc:9c:d3:80:88:2b:3e:8a:94:76:6e:fa:87:31:
d9:d3:f6:8f:52:0c:c3:bd:91:c1:35:90:e2:6f:43:
5b:de:ef:e7:59:39:a7:44:f0:2c:68:33:13:c7:d5:
16:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:18:16:67:15:B5:85:2D:18:D9:67:7D:70:4D:98:19:23:2E:E6:DE
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/UhgWZxW1hS0Y2Wd9cE2YGSMu5t4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.95.0/24
2.26.159.0/24
2.26.166.0/24
2.26.170.0/24
2.26.208.0/21
2.27.68.0/22
2.27.155.0/24
2.27.162.0/24
2.27.172.0/24
2.27.228.0-2.27.232.255
13.143.28.0/22
13.143.48.0/22
13.143.72.0/21
13.143.176.0/23
13.143.234.0/23
31.76.192.0/22
31.76.208.0/22
31.76.228.0/23
31.76.232.0/23
31.76.236.0/23
31.76.242.0/23
31.77.0.0/21
31.77.20.0/22
31.77.229.0/24
144.31.110.0/24
144.31.160.0/22
144.31.235.0/24
150.241.69.0/24
177.1.176.0/22
179.254.72.0-179.254.82.255
179.254.84.0-179.254.86.255
179.254.92.0/23
179.254.96.0/22
179.254.104.0/22
179.254.112.0/23
185.207.135.0/24
185.216.104.0/22
193.23.192.0/24
193.23.198.0/24
193.23.204.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:46:a7:f4:ce:70:37:ad:b0:85:89:94:b7:9b:2a:8b:a6:4b:
23:aa:73:6b:1c:fe:92:09:54:34:17:a4:f8:cc:2e:7c:04:e4:
60:84:f8:43:c4:28:7a:96:fd:5a:64:b4:3f:55:8f:9e:92:c3:
6b:ef:5a:58:fb:1a:5f:b4:0d:88:f8:19:f4:fb:92:7b:89:01:
9d:35:42:a9:e8:36:d5:ba:17:86:6b:51:83:53:cd:79:45:82:
06:af:6f:9f:53:ac:13:35:05:e9:2c:cc:d6:18:b1:e4:b5:6a:
2c:38:20:cf:bb:81:33:0e:df:77:7d:9b:05:67:72:39:de:14:
91:de:62:de:8f:ae:7d:68:e3:56:f5:c1:0f:48:7c:91:a5:8b:
0e:9a:12:24:2d:ad:bc:0d:0b:9d:6d:e7:df:4b:87:c0:bd:c5:
8d:71:5e:2e:ad:3a:50:c9:0f:12:5a:0d:cc:ab:a6:e6:11:b0:
df:86:de:9e:0c:17:b5:ed:78:14:6d:3b:43:f4:14:c3:cb:89:
46:3f:91:b3:59:94:6b:67:94:fc:e0:4b:ec:a2:09:46:06:58:
86:b8:96:5c:c8:42:ab:62:c0:c4:50:ff:56:06:68:b8:1a:26:
74:e8:8b:d2:b2:9a:ea:e5:79:5d:a5:1d:cc:c0:9e:a8:07:6b:
8f:b3:6a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 09:24:12 2026 by rpki-client