Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/c4VIfMfWBrnf98YU17eC4sgCdO4.roa
File: c4VIfMfWBrnf98YU17eC4sgCdO4.roa (raw, json)
Hash identifier: KJjW4ul66iXFm+67fOxAx8kCcroLL98ZSC6VF0CP6II=
Subject key identifier: 73:85:48:7C:C7:D6:06:B9:DF:F7:C6:14:D7:B7:82:E2:C8:02:74:EE
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A19E7C3C272034249A2A63A39A468672D5
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/c4VIfMfWBrnf98YU17eC4sgCdO4.roa
Signing time: Mon 02 Nov 2026 22:58:24 +0000
ROA not before: Mon 02 Nov 2026 22:58:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209693
IP address blocks: 2.26.148.0/24 maxlen: 24
2.26.175.0/24 maxlen: 24
2.26.189.0/24 maxlen: 24
2.27.244.0/24 maxlen: 24
2.27.254.0/24 maxlen: 24
31.76.22.0/24 maxlen: 24
31.76.23.0/24 maxlen: 24
64.188.76.0/24 maxlen: 24
64.188.77.0/24 maxlen: 24
64.188.78.0/24 maxlen: 24
64.188.79.0/24 maxlen: 24
64.188.80.0/24 maxlen: 24
64.188.81.0/24 maxlen: 24
64.188.82.0/24 maxlen: 24
64.188.83.0/24 maxlen: 24
77.239.126.0/24 maxlen: 24
87.251.16.0/24 maxlen: 24
87.251.17.0/24 maxlen: 24
87.251.18.0/24 maxlen: 24
87.251.19.0/24 maxlen: 24
144.31.168.0/22 maxlen: 24
177.3.248.0/24 maxlen: 24
177.3.249.0/24 maxlen: 24
177.3.250.0/24 maxlen: 24
177.3.251.0/24 maxlen: 24
179.254.108.0/24 maxlen: 24
179.254.109.0/24 maxlen: 24
179.254.110.0/24 maxlen: 24
179.254.111.0/24 maxlen: 24
191.217.245.0/24 maxlen: 24
191.217.246.0/24 maxlen: 24
191.217.252.0/24 maxlen: 24
193.23.216.0/24 maxlen: 24
193.23.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9e:7c:3c:27:20:34:24:9a:2a:63:a3:9a:46:86:72:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 2 22:58:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7385487cc7d606b9dff7c614d7b782e2c80274ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2a:13:ed:fb:13:12:97:cb:bb:74:cd:4b:90:
1c:98:ce:f8:f7:e5:35:ef:57:f7:e2:22:9f:7a:4c:
1a:86:6e:04:8d:fe:9c:e9:59:e1:90:1e:37:e6:66:
28:1f:ea:25:ff:e8:c2:7d:e5:f9:9e:1b:e5:77:8e:
12:45:be:89:bb:63:31:bf:9c:a3:f8:67:3e:3a:1e:
a4:11:3a:72:37:58:57:ad:24:96:99:00:1d:f6:1b:
05:79:36:e0:ce:f4:26:68:5d:e6:8b:dc:c3:b3:74:
cf:3f:40:14:2d:87:ef:26:a4:76:79:ed:f1:e0:96:
a4:f0:34:fb:65:78:7a:a7:5f:21:5c:fd:2c:db:36:
c5:73:db:b6:69:95:50:36:a5:61:8b:31:a7:6e:62:
31:b8:c2:26:08:a2:d2:ee:6a:e2:e8:bf:0b:f0:d6:
86:8c:76:43:37:3e:d6:87:0d:b2:39:b2:07:89:e1:
b4:2e:bb:b2:3f:96:1b:20:42:20:6c:db:82:1a:ff:
5a:f6:0a:f1:dd:3f:49:b7:9b:ae:83:b3:bd:b6:32:
6b:9b:c4:db:8e:ee:fc:1c:b4:47:8c:19:fb:d6:28:
23:7e:71:6e:c7:64:b9:0d:c6:39:17:a3:a9:b9:2c:
98:ea:5a:22:dc:e8:90:47:f7:9e:ae:71:41:df:51:
45:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:85:48:7C:C7:D6:06:B9:DF:F7:C6:14:D7:B7:82:E2:C8:02:74:EE
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/c4VIfMfWBrnf98YU17eC4sgCdO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.148.0/24
2.26.175.0/24
2.26.189.0/24
2.27.244.0/24
2.27.254.0/24
31.76.22.0/23
64.188.76.0-64.188.83.255
77.239.126.0/24
87.251.16.0/22
144.31.168.0/22
177.3.248.0/22
179.254.108.0/22
191.217.245.0-191.217.246.255
191.217.252.0/24
193.23.216.0/24
193.23.221.0/24
Signature Algorithm: sha256WithRSAEncryption
20:e0:ff:b1:19:d8:18:2c:ac:2b:b5:ac:42:91:d1:ab:99:f5:
a1:23:c6:12:44:57:23:94:0a:cb:87:aa:77:04:94:8d:67:d5:
4d:68:ff:97:25:46:e9:75:cc:50:fc:14:f9:bb:88:5c:7b:b8:
0f:47:a2:fd:77:76:04:0f:fe:e6:d2:88:ad:01:40:07:44:b9:
03:f7:b1:41:84:a9:c3:33:dd:99:e1:72:7d:e5:e0:8d:a7:48:
0c:a9:1c:2a:63:ce:c3:e8:8e:8e:ff:e0:ba:c2:ff:03:56:c2:
7f:5a:03:60:b3:d3:5d:58:fe:d2:dc:d3:5f:0d:51:82:ec:4b:
ce:d8:85:cf:62:26:16:7c:f6:07:44:14:ab:c8:ac:2c:ee:c7:
2f:9d:cd:99:71:37:1d:1a:ff:b9:e2:24:d3:ef:1d:f5:e2:9e:
60:a3:35:83:c2:f8:7b:a9:21:c8:ed:80:47:61:b8:a4:83:d6:
fb:05:bd:c6:57:e6:9e:32:0e:7d:d7:12:c2:87:a2:8b:b6:2a:
f6:00:9a:32:ad:15:4c:ab:dc:93:f1:cb:dc:19:d9:22:e2:69:
29:53:53:6e:45:a8:84:fe:50:06:e8:55:36:42:2e:35:8c:c4:
68:39:d6:50:fe:71:6e:83:40:26:02:e2:ad:a9:95:74:99:48:
97:c0:06:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:42:52 2026 by rpki-client