Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_-w3-M9OK40USnHpZHZAaYgJJWA.roa
File: _-w3-M9OK40USnHpZHZAaYgJJWA.roa (raw, json)
Hash identifier: dldJVCtuGKlnN9jdBpoc6pYvEbT+5Q35VodcI6b4aZU=
Subject key identifier: FF:EC:37:F8:CF:4E:2B:8D:14:4A:71:E9:64:76:40:69:88:09:25:60
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A034F94F20126E2A9BD5ADCFBEA3372349
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_-w3-M9OK40USnHpZHZAaYgJJWA.roa
Signing time: Mon 24 Aug 2026 18:12:29 +0000
ROA not before: Mon 24 Aug 2026 18:12:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 2.26.157.0/24 maxlen: 24
2.26.164.0/24 maxlen: 24
2.26.253.0/24 maxlen: 24
2.27.151.0/24 maxlen: 24
2.27.224.0/24 maxlen: 24
2.27.225.0/24 maxlen: 24
2.27.226.0/24 maxlen: 24
2.27.227.0/24 maxlen: 24
2.27.251.0/24 maxlen: 24
13.143.100.0/22 maxlen: 24
13.143.121.0/24 maxlen: 24
13.143.126.0/24 maxlen: 24
31.76.178.0/23 maxlen: 24
31.76.238.0/23 maxlen: 24
31.76.248.0/24 maxlen: 24
31.77.117.0/24 maxlen: 24
31.77.118.0/24 maxlen: 24
144.31.10.0/24 maxlen: 24
177.202.124.0/23 maxlen: 24
179.198.36.0/22 maxlen: 24
179.198.40.0/22 maxlen: 24
191.223.132.0/22 maxlen: 24
201.14.230.0/24 maxlen: 24
201.14.241.0/24 maxlen: 24
201.14.247.0/24 maxlen: 24
201.14.248.0/24 maxlen: 24
201.24.162.0/23 maxlen: 24
201.24.168.0/23 maxlen: 24
201.24.174.0/23 maxlen: 24
201.24.178.0/23 maxlen: 24
201.24.182.0/23 maxlen: 24
201.24.186.0/23 maxlen: 24
201.25.160.0/23 maxlen: 24
201.25.164.0/23 maxlen: 24
201.25.166.0/23 maxlen: 24
201.25.168.0/23 maxlen: 24
201.25.170.0/23 maxlen: 24
201.25.172.0/23 maxlen: 24
201.25.176.0/23 maxlen: 24
201.25.178.0/23 maxlen: 24
201.25.184.0/23 maxlen: 24
201.25.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:f9:4f:20:12:6e:2a:9b:d5:ad:cf:be:a3:37:23:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 24 18:12:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffec37f8cf4e2b8d144a71e96476406988092560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9f:e8:e4:14:9e:c3:77:f8:4e:ab:ea:26:71:
e4:5e:6e:89:92:1d:81:63:a3:68:a1:9b:5c:a0:21:
12:ce:e0:93:f7:c0:ae:43:4c:ae:e1:15:e4:1c:0a:
8f:b8:51:3c:95:53:9d:12:ac:c3:fe:00:6d:fb:4a:
49:8a:d2:1d:b2:58:d4:5c:19:5c:37:a7:9d:4d:6c:
94:2e:1b:f7:12:39:d2:54:e5:ee:55:fd:df:19:6e:
f6:e1:2e:27:e0:6e:76:4e:0d:32:80:f9:79:e3:2b:
d1:f9:5e:a7:71:3b:b1:5c:d3:a4:27:d1:0e:97:b0:
3b:29:62:b2:90:cf:70:df:b6:39:fc:d1:69:7c:a3:
2d:db:6a:ac:01:9d:bd:f6:94:ae:17:51:9a:49:77:
a4:9c:68:b1:1e:39:c9:54:09:14:e5:5d:36:50:3f:
59:9c:25:ed:09:05:73:42:8c:a8:14:77:e2:3a:93:
79:c7:0a:a5:ea:d8:25:c0:26:20:65:76:2f:9c:ab:
14:09:a5:39:bf:53:3c:c6:fd:60:5b:56:a2:01:f6:
9b:83:a6:bd:8c:78:ef:c6:5b:e8:2e:75:28:e7:8c:
8e:23:8b:9e:12:c9:a7:23:cc:eb:a2:27:83:19:91:
eb:56:58:49:ea:8a:e2:8c:01:49:e3:6a:f4:1d:0a:
9b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EC:37:F8:CF:4E:2B:8D:14:4A:71:E9:64:76:40:69:88:09:25:60
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_-w3-M9OK40USnHpZHZAaYgJJWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.157.0/24
2.26.164.0/24
2.26.253.0/24
2.27.151.0/24
2.27.224.0/22
2.27.251.0/24
13.143.100.0/22
13.143.121.0/24
13.143.126.0/24
31.76.178.0/23
31.76.238.0/23
31.76.248.0/24
31.77.117.0-31.77.118.255
144.31.10.0/24
177.202.124.0/23
179.198.36.0-179.198.43.255
191.223.132.0/22
201.14.230.0/24
201.14.241.0/24
201.14.247.0-201.14.248.255
201.24.162.0/23
201.24.168.0/23
201.24.174.0/23
201.24.178.0/23
201.24.182.0/23
201.24.186.0/23
201.25.160.0/23
201.25.164.0-201.25.173.255
201.25.176.0/22
201.25.184.0/23
201.25.188.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:d3:e9:13:2b:80:42:ba:2e:b9:06:20:d4:21:78:34:b9:ee:
63:f1:03:44:c9:ef:0d:d8:77:a3:f1:69:14:cc:02:4a:5b:bc:
83:fe:f7:87:e2:29:ec:1a:0a:8f:06:7c:fb:8c:d1:70:88:78:
44:1a:c3:8a:01:97:0d:b2:49:9f:fd:e2:18:88:6b:f0:6b:33:
ae:f7:b4:44:3d:43:03:13:36:67:f3:f3:34:4b:c0:5b:d1:e7:
6c:31:eb:57:2d:37:1a:f1:e9:45:56:7b:1f:e1:6a:fa:eb:7c:
f6:30:0d:d1:4b:42:70:8e:21:10:3c:b1:61:2c:ee:28:43:d6:
05:d4:6b:e0:10:73:55:6e:dd:1f:a9:a4:13:a2:bb:39:9f:6c:
11:ff:cb:1b:f8:e5:b0:79:22:80:85:f8:2b:c5:db:d4:f7:d3:
54:d9:f8:e0:7e:3a:92:b9:7e:b7:5a:c3:ae:1f:58:c7:a3:80:
0f:29:9e:bd:7c:66:0f:2f:09:b8:73:26:fb:90:14:30:3f:09:
34:cf:66:ab:8e:40:ed:01:b5:9b:21:23:a4:31:0d:02:6e:47:
55:38:b2:92:24:0c:44:a6:99:e0:4e:9d:cb:bd:a0:0a:7a:ba:
4d:86:19:22:1c:68:bf:22:e5:7d:46:99:1f:df:03:a3:eb:67:
8e:47:f6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:04:47 2026 by rpki-client