Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Xj8Pjiimnj1Asebq8MtUEwMAdXg.roa
File: Xj8Pjiimnj1Asebq8MtUEwMAdXg.roa (raw, json)
Hash identifier: s3atxvY9cpma1L4W65NGDViZSgviu349U5vTFBh0TB8=
Subject key identifier: 5E:3F:0F:8E:28:A6:9E:3D:40:B1:E6:EA:F0:CB:54:13:03:00:75:78
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0AC78BAB08064D28BEE00E3A5693F220A
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Xj8Pjiimnj1Asebq8MtUEwMAdXg.roa
Signing time: Wed 16 Sep 2026 23:06:28 +0000
ROA not before: Wed 16 Sep 2026 23:06:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213520
IP address blocks: 2.26.24.0/22 maxlen: 24
2.26.76.0/23 maxlen: 24
2.26.162.0/23 maxlen: 24
2.27.24.0/23 maxlen: 24
2.27.28.0/22 maxlen: 24
2.27.82.0/24 maxlen: 24
2.27.175.0/24 maxlen: 24
31.77.105.0/24 maxlen: 24
31.77.160.0/23 maxlen: 24
31.77.162.0/24 maxlen: 24
31.77.226.0/24 maxlen: 24
64.188.68.0/22 maxlen: 24
64.188.74.0/24 maxlen: 24
64.188.104.0/22 maxlen: 24
77.239.120.0/23 maxlen: 24
144.31.16.0/23 maxlen: 24
144.31.18.0/23 maxlen: 24
144.31.62.0/23 maxlen: 24
144.31.84.0/23 maxlen: 24
144.31.116.0/23 maxlen: 24
144.31.118.0/23 maxlen: 24
144.31.122.0/23 maxlen: 24
144.31.134.0/23 maxlen: 24
144.31.138.0/23 maxlen: 24
144.31.196.0/23 maxlen: 24
144.31.232.0/24 maxlen: 24
144.31.233.0/24 maxlen: 24
150.241.64.0/24 maxlen: 24
150.241.78.0/23 maxlen: 24
177.1.186.0/23 maxlen: 24
177.1.188.0/23 maxlen: 24
193.23.197.0/24 maxlen: 24
193.23.210.0/23 maxlen: 24
193.23.218.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ac:78:ba:b0:80:64:d2:8b:ee:00:e3:a5:69:3f:22:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 16 23:06:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e3f0f8e28a69e3d40b1e6eaf0cb541303007578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8d:32:ae:0a:1f:33:cd:88:97:75:88:8d:23:
1b:c3:97:20:46:6f:97:d9:db:20:60:85:61:1d:f6:
0b:cb:21:57:5d:04:4b:b2:99:a4:01:f0:e1:4c:ca:
c9:39:a4:f2:90:30:48:34:0a:43:c8:51:9a:94:e2:
55:8c:77:e1:79:73:32:e3:46:ec:f5:7e:1f:74:b6:
02:11:c3:a6:7e:dd:bd:9d:4c:30:e9:e9:e8:d6:bb:
61:4c:04:dd:cd:58:bb:68:01:74:0d:01:80:39:2d:
11:f6:c4:0d:f9:aa:10:78:3d:26:03:b9:99:cb:46:
15:93:42:73:57:c0:42:08:ee:ed:87:d9:c7:66:b9:
b6:aa:64:60:76:3c:cf:ac:9d:5d:e4:a9:da:dd:5c:
35:09:6f:ca:5e:93:27:63:09:ea:c6:11:d8:94:5a:
f5:80:d7:66:16:cf:25:65:d1:68:33:8b:47:af:f1:
c0:34:2d:01:1c:03:67:7e:0d:c3:33:44:98:d3:d9:
19:f1:07:eb:26:0f:52:75:b0:9c:7e:e9:e9:8f:3a:
59:10:af:8b:12:66:31:cd:6b:bd:eb:70:0c:6a:f7:
8b:28:da:97:4e:19:14:79:8c:89:fe:f5:28:ee:2b:
23:68:f2:a9:19:83:1b:63:4f:53:a7:52:98:7c:ca:
29:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3F:0F:8E:28:A6:9E:3D:40:B1:E6:EA:F0:CB:54:13:03:00:75:78
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Xj8Pjiimnj1Asebq8MtUEwMAdXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.24.0/22
2.26.76.0/23
2.26.162.0/23
2.27.24.0/23
2.27.28.0/22
2.27.82.0/24
2.27.175.0/24
31.77.105.0/24
31.77.160.0-31.77.162.255
31.77.226.0/24
64.188.68.0/22
64.188.74.0/24
64.188.104.0/22
77.239.120.0/23
144.31.16.0/22
144.31.62.0/23
144.31.84.0/23
144.31.116.0/22
144.31.122.0/23
144.31.134.0/23
144.31.138.0/23
144.31.196.0/23
144.31.232.0/23
150.241.64.0/24
150.241.78.0/23
177.1.186.0-177.1.189.255
193.23.197.0/24
193.23.210.0/23
193.23.218.0/23
Signature Algorithm: sha256WithRSAEncryption
01:2e:5c:28:65:1b:8e:d7:0e:81:a5:13:7c:4a:23:ca:6e:7e:
7f:d2:0c:b0:68:c3:0c:81:8a:52:aa:a1:51:a4:1f:01:7f:cd:
99:54:d0:d3:da:ab:c8:21:a8:1d:7c:ef:5c:52:1f:8e:d0:7b:
42:48:7d:2f:f5:c3:6b:ba:bf:02:e1:c3:26:10:9f:a4:48:b8:
76:37:a0:19:6f:85:84:fe:3d:08:b2:e1:2c:40:99:1e:f7:3c:
d0:ee:88:72:f2:fd:2a:41:fb:af:38:16:c8:b9:3d:71:69:87:
91:77:86:2f:d9:be:33:23:4d:5d:ea:a7:29:2f:43:57:56:15:
7a:3d:ad:1f:07:c4:b1:3d:d8:41:9f:a7:46:7d:26:22:ee:f8:
6b:db:1d:e8:87:88:77:c6:c8:6a:78:72:27:bf:c0:1a:aa:cc:
c8:8b:b0:10:4d:38:aa:f9:87:00:db:58:a3:58:ac:77:95:17:
f5:78:33:8a:e1:bc:d3:6f:e3:a5:80:aa:22:ac:03:b3:66:80:
aa:3f:b5:2d:79:64:eb:45:00:1b:83:ca:9f:e2:11:05:2d:bd:
41:8a:d7:a1:55:1e:be:c7:3d:2b:dc:57:f5:a7:25:7c:02:1b:
10:34:28:98:ff:94:14:a4:ee:76:7e:bc:f7:48:48:bf:30:4f:
b8:7f:f4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:46 2026 by rpki-client