Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/aBU0DdGyiiBPcipk-jdtGDgtk0k.roa
File: aBU0DdGyiiBPcipk-jdtGDgtk0k.roa (raw, json)
Hash identifier: HdWgeRSPimWgRhRiIsYghFCq19ZgQXfNGYBacQorwB0=
Subject key identifier: 68:15:34:0D:D1:B2:8A:20:4F:72:2A:64:FA:37:6D:18:38:2D:93:49
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0544130B5352819C2F8A4DF548459D178
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/aBU0DdGyiiBPcipk-jdtGDgtk0k.roa
Signing time: Sun 30 Aug 2026 19:59:13 +0000
ROA not before: Sun 30 Aug 2026 19:59:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207461
IP address blocks: 2.27.64.0/22 maxlen: 24
2.27.72.0/23 maxlen: 24
2.27.74.0/23 maxlen: 24
2.27.76.0/24 maxlen: 24
2.27.77.0/24 maxlen: 24
2.27.80.0/24 maxlen: 24
2.27.81.0/24 maxlen: 24
2.27.87.0/24 maxlen: 24
2.27.89.0/24 maxlen: 24
2.27.91.0/24 maxlen: 24
13.143.144.0/22 maxlen: 24
13.143.148.0/22 maxlen: 24
13.143.160.0/22 maxlen: 24
13.143.164.0/22 maxlen: 24
13.143.168.0/22 maxlen: 24
13.143.172.0/22 maxlen: 24
13.143.180.0/22 maxlen: 24
13.143.184.0/22 maxlen: 24
13.143.188.0/22 maxlen: 24
13.143.192.0/22 maxlen: 24
13.143.196.0/22 maxlen: 24
31.77.16.0/22 maxlen: 24
31.77.28.0/22 maxlen: 24
31.77.44.0/23 maxlen: 24
31.77.64.0/23 maxlen: 24
31.77.68.0/23 maxlen: 24
31.77.70.0/23 maxlen: 24
31.77.164.0/23 maxlen: 24
31.77.166.0/23 maxlen: 24
179.254.108.0/22 maxlen: 24
201.10.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:54:41:30:b5:35:28:19:c2:f8:a4:df:54:84:59:d1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 30 19:59:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6815340dd1b28a204f722a64fa376d18382d9349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c8:75:f1:a3:59:03:fa:40:cc:cb:6d:0a:66:
65:5d:d8:35:c7:20:3d:81:7a:22:77:26:73:f9:9c:
3c:78:0d:7c:82:3d:c5:91:ca:39:22:fc:e5:93:b1:
29:b5:ff:fe:8d:e6:57:94:f9:9d:ec:fd:57:d2:25:
5b:e6:67:a9:cc:09:87:5c:8a:a5:66:36:9f:f9:1e:
bc:ca:f2:bf:f5:12:65:8a:ac:0f:a5:a6:7a:12:01:
d9:dc:73:9a:08:76:4f:77:b6:68:4a:a1:80:0b:51:
f7:f4:e7:ee:c5:00:95:f1:fa:fc:e2:0c:25:09:74:
68:77:20:7c:f9:42:ce:93:13:d7:60:77:99:a4:6f:
6b:89:67:65:9f:07:67:0d:28:3a:d3:8d:6d:73:2b:
59:71:06:d8:74:de:3c:85:b1:a9:aa:f9:0c:4c:ca:
35:33:f4:46:cd:d2:f4:12:b4:12:cf:25:63:fd:16:
9d:e5:30:da:c3:7e:30:4b:e5:fe:1a:c8:49:f9:ab:
dd:fe:5c:3d:bd:2e:4a:37:c3:ae:0f:9a:59:cb:12:
81:ab:ef:6a:48:72:a5:4b:9c:90:03:a1:e9:36:6e:
95:97:22:92:df:f4:b7:10:3e:07:a0:17:24:e6:12:
ce:10:cf:15:f2:0d:72:90:9a:f4:c9:53:ea:22:3d:
e3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:15:34:0D:D1:B2:8A:20:4F:72:2A:64:FA:37:6D:18:38:2D:93:49
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/aBU0DdGyiiBPcipk-jdtGDgtk0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.64.0/22
2.27.72.0-2.27.77.255
2.27.80.0/23
2.27.87.0/24
2.27.89.0/24
2.27.91.0/24
13.143.144.0/21
13.143.160.0/20
13.143.180.0-13.143.199.255
31.77.16.0/22
31.77.28.0/22
31.77.44.0/23
31.77.64.0/23
31.77.68.0/22
31.77.164.0/22
179.254.108.0/22
201.10.68.0/22
Signature Algorithm: sha256WithRSAEncryption
42:16:80:9a:ba:fd:d9:44:1b:38:e3:03:94:3e:c6:a0:c0:8e:
54:10:f0:08:6e:97:84:22:00:53:9a:f7:a8:89:17:19:6a:9f:
09:ba:6a:7d:63:96:f8:95:31:f5:6c:51:f1:36:62:f8:8b:47:
13:31:7c:8b:0a:f3:16:ac:1a:48:44:fd:c0:40:40:99:a0:25:
91:a1:cb:f8:78:14:7f:66:2b:d2:5e:25:c4:a5:0e:68:10:7f:
b8:1f:f7:b2:de:00:a8:3e:fb:17:3f:c4:c6:3d:c6:cb:69:f1:
92:56:51:e7:fd:ae:cd:9f:bc:5d:60:68:79:5b:eb:54:5e:03:
24:d9:f5:7b:07:25:8a:5b:0a:5c:41:23:f4:28:29:d1:37:1e:
82:29:b5:29:4a:69:07:d1:7b:71:9f:ae:22:0c:32:79:ec:99:
ba:1f:cf:be:cc:91:e3:d3:cd:41:c6:38:40:ec:cd:8d:47:12:
47:01:e2:9d:49:18:52:05:13:3b:2c:18:4d:f8:7b:a7:1f:98:
8b:51:78:b5:8d:e8:00:30:24:0b:16:ba:bd:24:1f:53:60:0c:
8b:ec:38:07:ee:d9:2f:e8:82:62:0e:68:f9:77:62:b0:d1:bb:
7a:8c:9a:47:fc:b4:b0:b0:6b:8b:98:e6:c6:db:0d:6a:11:18:
93:ef:94:19
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgISAaBUQTC1NSgZwvik31SEWdF4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwODMwMTk1OTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODE1MzQwZGQxYjI4YTIwNGY3MjJhNjRmYTM3NmQxODM4MmQ5MzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsh18aNZA/pAzMttCmZlXdg1xyA9
gXoidyZz+Zw8eA18gj3Fkco5Ivzlk7Eptf/+jeZXlPmd7P1X0iVb5mepzAmHXIql
Zjaf+R68yvK/9RJliqwPpaZ6EgHZ3HOaCHZPd7ZoSqGAC1H39OfuxQCV8fr84gwl
CXRodyB8+ULOkxPXYHeZpG9riWdlnwdnDSg6041tcytZcQbYdN48hbGpqvkMTMo1
M/RGzdL0ErQSzyVj/Rad5TDaw34wS+X+GshJ+avd/lw9vS5KN8OuD5pZyxKBq+9q
SHKlS5yQA6HpNm6VlyKS3/S3ED4HoBck5hLOEM8V8g1ykJr0yVPqIj3jmwIDAQAB
o4ICezCCAncwHQYDVR0OBBYEFGgVNA3RsoogT3IqZPo3bRg4LZNJMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvYUJVMERkR3lpaUJQY2lway1qZHRHRGd0azBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MHwEAgABMHYDBAICG0Aw
DAMEAwIbSAMEAQIbTAMEAQIbUAMEAAIbVwMEAAIbWQMEAAIbWwMEAw2PkAMEBA2P
oDAMAwQCDY+0AwQDDY/AAwQCH00QAwQCH00cAwQBH00sAwQBH01AAwQCH01EAwQC
H02kAwQCs/5sAwQCyQpEMA0GCSqGSIb3DQEBCwUAA4IBAQBCFoCauv3ZRBs44wOU
PsagwI5UEPAIbpeEIgBTmveoiRcZap8Jump9Y5b4lTH1bFHxNmL4i0cTMXyLCvMW
rBpIRP3AQECZoCWRocv4eBR/ZivSXiXEpQ5oEH+4H/ey3gCoPvsXP8TGPcbLafGS
VlHn/a7Nn7xdYGh5W+tUXgMk2fV7ByWKWwpcQSP0KCnRNx6CKbUpSmkH0Xtxn64i
DDJ57Jm6H8++zJHj081BxjhA7M2NRxJHAeKdSRhSBRM7LBhN+HunH5iLUXi1jegA
MCQLFrq9JB9TYAyL7DgH7tkv6IJiDmj5d2Kw0bt6jJpH/LSwsGuLmObG2w1qERiT
75QZ
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:06:39 2026 by rpki-client