Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/YLWWTfZ4TwdyfiSwGde56yjdk4Q.roa
File: YLWWTfZ4TwdyfiSwGde56yjdk4Q.roa (raw, json)
Hash identifier: fqB4UNsnofjfHhFluwUeCFV9LWEalSfV81N4GqEm3B8=
Subject key identifier: 60:B5:96:4D:F6:78:4F:07:72:7E:24:B0:19:D7:B9:EB:28:DD:93:84
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A19DE6101C4045FDF318025E4A0943D099
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/YLWWTfZ4TwdyfiSwGde56yjdk4Q.roa
Signing time: Mon 02 Nov 2026 20:14:22 +0000
ROA not before: Mon 02 Nov 2026 20:14:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215590
IP address blocks: 2.26.20.0/22 maxlen: 24
2.26.60.0/22 maxlen: 24
2.26.68.0/22 maxlen: 24
2.26.78.0/23 maxlen: 24
2.26.104.0/21 maxlen: 24
2.27.32.0/21 maxlen: 24
2.27.52.0/23 maxlen: 24
2.27.54.0/23 maxlen: 24
2.27.68.0/22 maxlen: 24
13.143.64.0/22 maxlen: 24
13.143.128.0/23 maxlen: 24
13.143.130.0/23 maxlen: 24
31.76.12.0/22 maxlen: 24
31.76.48.0/22 maxlen: 24
31.76.230.0/23 maxlen: 24
31.77.196.0/22 maxlen: 24
31.77.202.0/23 maxlen: 24
31.77.204.0/23 maxlen: 24
31.77.206.0/23 maxlen: 24
64.188.118.0/23 maxlen: 24
77.239.108.0/22 maxlen: 24
144.31.52.0/24 maxlen: 24
144.31.126.0/24 maxlen: 24
144.31.127.0/24 maxlen: 24
144.31.140.0/22 maxlen: 24
144.31.152.0/23 maxlen: 24
144.31.186.0/23 maxlen: 24
150.241.88.0/23 maxlen: 24
150.241.96.0/22 maxlen: 24
150.241.106.0/23 maxlen: 24
150.241.115.0/24 maxlen: 24
150.241.116.0/24 maxlen: 24
150.241.123.0/24 maxlen: 24
152.234.232.0/21 maxlen: 24
177.1.180.0/22 maxlen: 24
179.236.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:e6:10:1c:40:45:fd:f3:18:02:5e:4a:09:43:d0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 2 20:14:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60b5964df6784f07727e24b019d7b9eb28dd9384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1f:ae:00:4d:80:7b:d1:af:b1:6a:2b:93:30:
45:89:55:ab:36:c8:58:0a:ac:bf:02:3a:50:2a:2d:
76:f7:e8:22:4a:4b:e3:35:38:02:01:87:70:82:65:
60:e9:d4:70:34:02:a1:e0:f3:16:1d:f4:f0:8d:59:
20:67:9e:ec:ca:02:39:39:b4:05:f8:0f:4f:93:45:
01:e6:f0:78:10:18:a7:d9:aa:79:e5:ad:3d:94:c1:
6f:72:71:c0:a0:06:bd:f9:bb:cb:4a:ea:de:a2:10:
8b:32:50:39:98:1b:ce:1f:c8:a0:fa:ec:71:a7:f7:
ef:45:8e:6b:92:3e:e2:94:57:da:2c:27:d0:4a:9f:
f0:85:53:aa:dc:ed:b7:44:85:c2:31:5c:ed:ab:0c:
2c:d2:62:5e:44:2f:4e:f2:f3:e4:ff:54:28:08:a4:
88:8b:e9:0b:3e:12:75:d7:6c:8f:68:e8:db:91:be:
1c:6e:18:a7:8d:31:85:bb:e7:29:31:65:30:de:5e:
b6:b5:17:2b:a9:9d:b1:ab:73:a8:ba:a1:a5:38:8e:
2f:57:cc:6c:a0:cc:b1:85:cd:09:21:c9:58:3e:9a:
73:c1:30:c8:7a:65:f6:05:c3:93:a0:8e:05:73:64:
9e:82:75:60:d6:d2:69:f4:70:e6:44:2f:42:dc:06:
01:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B5:96:4D:F6:78:4F:07:72:7E:24:B0:19:D7:B9:EB:28:DD:93:84
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/YLWWTfZ4TwdyfiSwGde56yjdk4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.20.0/22
2.26.60.0/22
2.26.68.0/22
2.26.78.0/23
2.26.104.0/21
2.27.32.0/21
2.27.52.0/22
2.27.68.0/22
13.143.64.0/22
13.143.128.0/22
31.76.12.0/22
31.76.48.0/22
31.76.230.0/23
31.77.196.0/22
31.77.202.0-31.77.207.255
64.188.118.0/23
77.239.108.0/22
144.31.52.0/24
144.31.126.0/23
144.31.140.0/22
144.31.152.0/23
144.31.186.0/23
150.241.88.0/23
150.241.96.0/22
150.241.106.0/23
150.241.115.0-150.241.116.255
150.241.123.0/24
152.234.232.0/21
177.1.180.0/22
179.236.144.0/22
Signature Algorithm: sha256WithRSAEncryption
11:e8:b9:12:c1:ce:ad:26:47:37:84:60:22:1c:bd:e1:7c:1a:
2d:6c:12:96:39:26:a8:e3:a3:4d:f0:a0:e2:a8:60:7b:62:92:
f8:16:1b:d6:7a:c6:32:14:1c:71:13:d9:b0:06:f2:58:48:8b:
58:b2:93:33:c3:cb:c8:b0:0c:ad:36:c6:63:37:b2:86:23:1a:
b1:d8:20:cf:07:f1:e8:29:f2:42:e8:9c:6e:38:3d:e1:28:f5:
83:45:4f:ac:69:df:30:20:45:f6:e4:85:a1:72:bb:6a:38:90:
60:8a:53:7b:f6:82:4f:f8:28:56:b0:60:7d:fd:7d:3b:55:6c:
42:06:86:32:0a:1b:e0:99:9a:54:86:04:e3:c7:5b:27:2c:d5:
ec:17:f8:e2:07:da:9d:be:a3:68:c3:c6:3c:64:03:3b:d6:4f:
03:94:c3:c8:d5:a0:3f:e3:70:9f:81:d5:cd:e3:02:a1:f4:6b:
66:2b:f9:e7:60:62:a5:1b:0d:e2:02:e6:a3:6c:a2:d5:0f:ea:
c1:cc:ef:9e:00:1e:3b:3e:51:1f:63:a7:10:8f:46:bb:f7:df:
b3:55:05:91:8a:0d:2c:a2:f1:69:4f:13:d3:65:34:f8:05:51:
bf:60:a7:23:94:3f:e7:d1:7b:fd:5f:da:8a:b4:82:bb:b7:fe:
52:ea:68:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:42:41 2026 by rpki-client