Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/XY1hSucYHpB6cbZhZN4uA90WnJ0.roa
File: XY1hSucYHpB6cbZhZN4uA90WnJ0.roa (raw, json)
Hash identifier: HJlAOw16LJLE8Cf0nsocIJdbqSi+Tddf9nQj1/gdhpQ=
Subject key identifier: 5D:8D:61:4A:E7:18:1E:90:7A:71:B6:61:64:DE:2E:03:DD:16:9C:9D
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A18A4BDE2ED96C39948B32412B432B6171
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/XY1hSucYHpB6cbZhZN4uA90WnJ0.roa
Signing time: Fri 30 Oct 2026 00:53:10 +0000
ROA not before: Fri 30 Oct 2026 00:53:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 2.26.157.0/24 maxlen: 24
2.26.164.0/24 maxlen: 24
2.26.253.0/24 maxlen: 24
2.27.151.0/24 maxlen: 24
2.27.224.0/24 maxlen: 24
2.27.225.0/24 maxlen: 24
2.27.226.0/24 maxlen: 24
2.27.227.0/24 maxlen: 24
2.27.251.0/24 maxlen: 24
13.143.100.0/22 maxlen: 24
13.143.121.0/24 maxlen: 24
13.143.126.0/24 maxlen: 24
31.76.178.0/23 maxlen: 24
31.76.238.0/23 maxlen: 24
31.76.248.0/24 maxlen: 24
31.77.117.0/24 maxlen: 24
31.77.118.0/24 maxlen: 24
144.31.10.0/24 maxlen: 24
177.202.124.0/23 maxlen: 24
179.198.36.0/22 maxlen: 24
179.198.40.0/22 maxlen: 24
191.223.132.0/22 maxlen: 24
201.14.230.0/24 maxlen: 24
201.14.241.0/24 maxlen: 24
201.14.247.0/24 maxlen: 24
201.14.248.0/24 maxlen: 24
201.24.162.0/23 maxlen: 24
201.24.168.0/23 maxlen: 24
201.24.174.0/23 maxlen: 24
201.24.178.0/23 maxlen: 24
201.24.182.0/23 maxlen: 24
201.24.186.0/23 maxlen: 24
201.25.160.0/23 maxlen: 24
201.25.164.0/23 maxlen: 24
201.25.166.0/23 maxlen: 24
201.25.168.0/23 maxlen: 24
201.25.170.0/23 maxlen: 24
201.25.172.0/23 maxlen: 24
201.25.176.0/23 maxlen: 24
201.25.178.0/23 maxlen: 24
201.25.184.0/23 maxlen: 24
201.25.188.0/23 maxlen: 24
201.58.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 23:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8a:4b:de:2e:d9:6c:39:94:8b:32:41:2b:43:2b:61:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 30 00:53:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d8d614ae7181e907a71b66164de2e03dd169c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d7:16:d2:4a:d6:87:35:bc:58:d9:53:ed:88:
f2:82:7c:10:f6:39:f6:f3:ad:1f:5a:1e:0b:18:a0:
e8:f8:bf:b3:cd:bd:44:cf:05:63:2b:80:63:f8:b8:
f4:f4:86:43:ce:d5:87:9f:4c:60:3e:2d:fc:d9:03:
99:59:02:af:18:4d:8f:6e:74:4d:f6:68:51:d9:e1:
39:89:5c:c4:75:bd:cc:88:ac:9f:49:74:12:30:52:
11:c5:16:66:31:7c:c7:5d:c4:5b:71:4a:9d:fd:2a:
fa:d8:ce:58:55:ca:76:7a:10:f2:0f:b5:1c:b9:0b:
93:ee:6e:64:4c:dd:8f:1c:33:b8:f2:92:ba:3c:6a:
8a:c8:c5:20:be:0d:c6:be:14:e7:5a:f3:af:5d:e8:
5c:24:33:c5:72:52:11:d3:79:e2:a9:8f:f9:04:14:
32:75:41:da:af:44:ff:b3:b1:5d:f9:b9:cb:b7:a6:
9e:81:a3:93:92:9e:df:07:0b:2a:cd:50:4d:e8:b1:
88:cf:48:4b:e2:86:ee:57:19:40:92:04:b0:b4:d8:
07:e1:44:a8:51:c1:f4:5b:df:81:40:a6:26:5e:77:
26:f0:cc:56:fa:e4:c7:15:7b:51:da:6e:07:67:fc:
e9:aa:6b:00:83:be:65:42:f1:1c:bf:99:39:71:ec:
98:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8D:61:4A:E7:18:1E:90:7A:71:B6:61:64:DE:2E:03:DD:16:9C:9D
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/XY1hSucYHpB6cbZhZN4uA90WnJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.157.0/24
2.26.164.0/24
2.26.253.0/24
2.27.151.0/24
2.27.224.0/22
2.27.251.0/24
13.143.100.0/22
13.143.121.0/24
13.143.126.0/24
31.76.178.0/23
31.76.238.0/23
31.76.248.0/24
31.77.117.0-31.77.118.255
144.31.10.0/24
177.202.124.0/23
179.198.36.0-179.198.43.255
191.223.132.0/22
201.14.230.0/24
201.14.241.0/24
201.14.247.0-201.14.248.255
201.24.162.0/23
201.24.168.0/23
201.24.174.0/23
201.24.178.0/23
201.24.182.0/23
201.24.186.0/23
201.25.160.0/23
201.25.164.0-201.25.173.255
201.25.176.0/22
201.25.184.0/23
201.25.188.0/23
201.58.130.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:db:13:5d:25:6a:da:7c:cc:0f:17:d5:09:e9:95:16:1a:ca:
45:e3:48:46:a0:0b:90:01:97:e7:65:ef:1d:d2:8a:e1:49:b6:
16:f8:92:dd:af:f3:1e:a7:2f:54:37:5c:6c:15:a5:d4:de:8f:
f9:60:86:26:84:c1:dd:50:59:93:40:8d:34:54:11:03:21:db:
13:11:5e:cf:3d:40:70:fd:f7:d6:a3:e9:a3:53:34:87:c9:4d:
e6:92:56:85:0b:83:c0:c1:4b:9d:6c:16:b4:27:ec:27:ae:1d:
0a:38:42:48:b3:c8:ca:cd:09:79:18:e5:c0:e4:58:61:98:95:
f6:c4:fe:3b:10:dc:a3:b7:0a:01:15:18:71:44:53:b6:f0:21:
25:03:31:0c:9e:dc:b7:ae:a6:a5:12:70:cd:bb:d2:cd:3f:b5:
97:c4:23:5a:ab:37:9a:89:5f:54:9b:00:b2:1c:8b:22:7d:1f:
d4:7b:92:06:23:dc:93:ca:ce:88:2f:cb:1f:e5:ba:85:d7:7b:
71:3f:d0:c7:f6:08:0f:ea:05:da:d5:80:e1:2a:3c:c3:76:33:
f7:a6:ad:a1:22:b0:18:b2:6f:5b:ec:72:ef:8d:75:fb:43:2c:
5b:92:8e:c4:dc:79:e4:73:d6:b7:52:82:86:f0:44:6a:52:97:
83:6f:79:0d
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgISAaGKS94u2Ww5lIsyQStDK2FxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYxMDMwMDA1MzEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDhkNjE0YWU3MTgxZTkwN2E3MWI2NjE2NGRlMmUwM2RkMTY5YzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitcW0krWhzW8WNlT7YjygnwQ9jn2
860fWh4LGKDo+L+zzb1EzwVjK4Bj+Lj09IZDztWHn0xgPi382QOZWQKvGE2PbnRN
9mhR2eE5iVzEdb3MiKyfSXQSMFIRxRZmMXzHXcRbcUqd/Sr62M5YVcp2ehDyD7Uc
uQuT7m5kTN2PHDO48pK6PGqKyMUgvg3GvhTnWvOvXehcJDPFclIR03niqY/5BBQy
dUHar0T/s7Fd+bnLt6aegaOTkp7fBwsqzVBN6LGIz0hL4obuVxlAkgSwtNgH4USo
UcH0W9+BQKYmXncm8MxW+uTHFXtR2m4HZ/zpqmsAg75lQvEcv5k5ceyYuwIDAQAB
o4IC6DCCAuQwHQYDVR0OBBYEFF2NYUrnGB6QenG2YWTeLgPdFpydMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvWFkxaFN1Y1lIcEI2Y2JaaFpONHVBOTBXbkowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH9BggrBgEFBQcBBwEB/wSB7TCB6jCB5wQCAAEwgeADBAAC
Gp0DBAACGqQDBAACGv0DBAACG5cDBAICG+ADBAACG/sDBAINj2QDBAANj3kDBAAN
j34DBAEfTLIDBAEfTO4DBAAfTPgwDAMEAB9NdQMEAB9NdgMEAJAfCgMEAbHKfDAM
AwQCs8YkAwQCs8YoAwQCv9+EAwQAyQ7mAwQAyQ7xMAwDBADJDvcDBADJDvgDBAHJ
GKIDBAHJGKgDBAHJGK4DBAHJGLIDBAHJGLYDBAHJGLoDBAHJGaAwDAMEAskZpAME
AckZrAMEAskZsAMEAckZuAMEAckZvAMEAMk6gjANBgkqhkiG9w0BAQsFAAOCAQEA
e9sTXSVq2nzMDxfVCemVFhrKReNIRqALkAGX52XvHdKK4Um2FviS3a/zHqcvVDdc
bBWl1N6P+WCGJoTB3VBZk0CNNFQRAyHbExFezz1AcP331qPpo1M0h8lN5pJWhQuD
wMFLnWwWtCfsJ64dCjhCSLPIys0JeRjlwORYYZiV9sT+OxDco7cKARUYcURTtvAh
JQMxDJ7ct66mpRJwzbvSzT+1l8QjWqs3molfVJsAshyLIn0f1HuSBiPck8rOiC/L
H+W6hdd7cT/Qx/YID+oF2tWA4So8w3Yz96atoSKwGLJvW+xy7411+0MsW5KOxNx5
5HPWt1KChvBEalKXg295DQ==
-----END CERTIFICATE-----
Generated at Wed Nov 4 04:16:25 2026 by rpki-client