Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/dOHa3JlM0nDskexyno431h60LGo.roa
File: dOHa3JlM0nDskexyno431h60LGo.roa (raw, json)
Hash identifier: WKnHDTef5CR7ahaZwYEmndSk8VZIX3QS1MwdBJLTr/4=
Subject key identifier: 74:E1:DA:DC:99:4C:D2:70:EC:91:EC:72:9E:8E:37:D6:1E:B4:2C:6A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A15F8A0836699D2FE9B94D8AF298EA0F0E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/dOHa3JlM0nDskexyno431h60LGo.roa
Signing time: Wed 21 Oct 2026 17:37:23 +0000
ROA not before: Wed 21 Oct 2026 17:37:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207957
IP address blocks: 2.26.8.0/24 maxlen: 24
2.26.9.0/24 maxlen: 24
2.26.10.0/24 maxlen: 24
2.26.11.0/24 maxlen: 24
2.26.88.0/24 maxlen: 24
2.26.89.0/24 maxlen: 24
2.26.90.0/24 maxlen: 24
2.26.91.0/24 maxlen: 24
2.26.92.0/24 maxlen: 24
2.26.93.0/24 maxlen: 24
2.26.95.0/24 maxlen: 24
2.27.208.0/24 maxlen: 24
2.27.209.0/24 maxlen: 24
2.27.210.0/24 maxlen: 24
2.27.211.0/24 maxlen: 24
13.143.137.0/24 maxlen: 24
13.143.142.0/24 maxlen: 24
13.143.180.0/22 maxlen: 24
13.143.184.0/24 maxlen: 24
13.143.185.0/24 maxlen: 24
13.143.186.0/24 maxlen: 24
13.143.187.0/24 maxlen: 24
13.143.188.0/22 maxlen: 24
13.143.192.0/24 maxlen: 24
13.143.193.0/24 maxlen: 24
13.143.194.0/24 maxlen: 24
13.143.195.0/24 maxlen: 24
13.143.196.0/22 maxlen: 24
31.76.0.0/24 maxlen: 24
31.76.1.0/24 maxlen: 24
31.76.2.0/24 maxlen: 24
31.76.3.0/24 maxlen: 24
31.76.4.0/24 maxlen: 24
31.76.5.0/24 maxlen: 24
31.76.6.0/24 maxlen: 24
31.76.7.0/24 maxlen: 24
31.76.52.0/24 maxlen: 24
31.76.53.0/24 maxlen: 24
31.76.54.0/24 maxlen: 24
31.76.55.0/24 maxlen: 24
31.76.60.0/24 maxlen: 24
31.76.61.0/24 maxlen: 24
31.76.62.0/24 maxlen: 24
31.76.63.0/24 maxlen: 24
31.76.64.0/24 maxlen: 24
31.76.65.0/24 maxlen: 24
31.76.66.0/24 maxlen: 24
31.76.68.0/24 maxlen: 24
31.76.69.0/24 maxlen: 24
31.76.70.0/24 maxlen: 24
31.76.71.0/24 maxlen: 24
31.76.82.0/24 maxlen: 24
31.76.83.0/24 maxlen: 24
31.76.84.0/24 maxlen: 24
31.76.85.0/24 maxlen: 24
31.76.114.0/24 maxlen: 24
31.76.115.0/24 maxlen: 24
31.77.38.0/24 maxlen: 24
31.77.39.0/24 maxlen: 24
31.77.46.0/24 maxlen: 24
31.77.47.0/24 maxlen: 24
31.77.140.0/24 maxlen: 24
31.77.141.0/24 maxlen: 24
31.77.142.0/24 maxlen: 24
31.77.143.0/24 maxlen: 24
31.77.238.0/24 maxlen: 24
64.188.89.0/24 maxlen: 24
64.188.90.0/24 maxlen: 24
64.188.98.0/24 maxlen: 24
64.188.127.0/24 maxlen: 24
77.239.107.0/24 maxlen: 24
144.31.15.0/24 maxlen: 24
144.31.49.0/24 maxlen: 24
144.31.50.0/24 maxlen: 24
144.31.51.0/24 maxlen: 24
144.31.57.0/24 maxlen: 24
144.31.82.0/24 maxlen: 24
144.31.83.0/24 maxlen: 24
144.31.93.0/24 maxlen: 24
144.31.103.0/24 maxlen: 24
144.31.107.0/24 maxlen: 24
144.31.108.0/24 maxlen: 24
144.31.109.0/24 maxlen: 24
144.31.213.0/24 maxlen: 24
144.31.214.0/24 maxlen: 24
144.31.216.0/24 maxlen: 24
144.31.217.0/24 maxlen: 24
144.31.218.0/24 maxlen: 24
144.31.219.0/24 maxlen: 24
144.31.239.0/24 maxlen: 24
144.31.240.0/24 maxlen: 24
144.31.241.0/24 maxlen: 24
144.31.242.0/24 maxlen: 24
144.31.243.0/24 maxlen: 24
144.31.249.0/24 maxlen: 24
150.241.72.0/24 maxlen: 24
150.241.73.0/24 maxlen: 24
150.241.74.0/24 maxlen: 24
150.241.75.0/24 maxlen: 24
150.241.82.0/24 maxlen: 24
150.241.83.0/24 maxlen: 24
150.241.100.0/24 maxlen: 24
150.241.101.0/24 maxlen: 24
150.241.102.0/24 maxlen: 24
150.241.103.0/24 maxlen: 24
179.253.110.0/24 maxlen: 24
179.254.86.0/24 maxlen: 24
179.254.132.0/22 maxlen: 24
179.254.156.0/22 maxlen: 24
179.254.170.0/24 maxlen: 24
179.254.171.0/24 maxlen: 24
179.254.172.0/24 maxlen: 24
179.254.173.0/24 maxlen: 24
179.254.174.0/24 maxlen: 24
179.254.175.0/24 maxlen: 24
179.254.176.0/24 maxlen: 24
179.254.177.0/24 maxlen: 24
179.254.178.0/24 maxlen: 24
179.254.179.0/24 maxlen: 24
179.254.180.0/24 maxlen: 24
179.254.181.0/24 maxlen: 24
179.254.182.0/24 maxlen: 24
179.254.183.0/24 maxlen: 24
179.254.184.0/24 maxlen: 24
179.254.185.0/24 maxlen: 24
179.254.186.0/24 maxlen: 24
179.254.187.0/24 maxlen: 24
179.254.188.0/24 maxlen: 24
179.254.189.0/24 maxlen: 24
179.254.190.0/24 maxlen: 24
179.254.191.0/24 maxlen: 24
185.170.153.0/24 maxlen: 24
185.170.154.0/24 maxlen: 24
193.23.195.0/24 maxlen: 24
193.23.200.0/24 maxlen: 24
193.23.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:8a:08:36:69:9d:2f:e9:b9:4d:8a:f2:98:ea:0f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 21 17:37:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74e1dadc994cd270ec91ec729e8e37d61eb42c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dc:87:d3:68:0e:77:71:8d:e4:9b:df:09:6d:
89:cc:e2:4b:03:ca:a6:37:85:91:8c:fe:1a:be:23:
45:8a:97:09:28:84:74:60:6d:da:29:4f:e0:88:1f:
43:e8:31:77:23:99:82:3b:a3:5a:9f:b9:c5:45:b6:
ca:52:b1:88:36:cc:f6:b9:7d:87:5c:e9:f1:7a:26:
53:21:1f:91:bc:d7:44:27:7c:bc:76:fd:c9:a8:28:
a7:95:68:4c:5a:49:9b:6b:bb:b6:7c:2f:69:a7:f7:
65:a7:0d:fa:83:c5:e2:8f:79:48:3b:1c:9b:9e:32:
a4:e6:28:d2:cf:d6:8e:63:73:9a:fd:1a:23:9e:a5:
8e:4b:e3:7e:72:10:82:47:23:83:74:92:00:a3:a6:
af:2e:a2:00:c1:45:26:75:28:f0:a1:a7:5d:5a:80:
e2:13:a3:7a:a6:1b:84:58:c2:67:41:3a:a7:6c:23:
cc:f6:ef:81:cd:a6:eb:74:c1:4d:7a:95:70:07:e4:
62:b6:90:34:63:bf:e4:86:6d:e5:9f:be:94:49:2c:
73:b3:4c:48:64:33:20:ce:3a:3a:3e:b9:a9:28:92:
cd:05:e6:f8:68:04:7d:a6:9d:70:a0:2b:21:c5:be:
84:7f:6c:1a:42:9d:09:c1:3a:04:b2:af:87:74:48:
48:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E1:DA:DC:99:4C:D2:70:EC:91:EC:72:9E:8E:37:D6:1E:B4:2C:6A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/dOHa3JlM0nDskexyno431h60LGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.8.0/22
2.26.88.0-2.26.93.255
2.26.95.0/24
2.27.208.0/22
13.143.137.0/24
13.143.142.0/24
13.143.180.0-13.143.199.255
31.76.0.0/21
31.76.52.0/22
31.76.60.0-31.76.66.255
31.76.68.0/22
31.76.82.0-31.76.85.255
31.76.114.0/23
31.77.38.0/23
31.77.46.0/23
31.77.140.0/22
31.77.238.0/24
64.188.89.0-64.188.90.255
64.188.98.0/24
64.188.127.0/24
77.239.107.0/24
144.31.15.0/24
144.31.49.0-144.31.51.255
144.31.57.0/24
144.31.82.0/23
144.31.93.0/24
144.31.103.0/24
144.31.107.0-144.31.109.255
144.31.213.0-144.31.214.255
144.31.216.0/22
144.31.239.0-144.31.243.255
144.31.249.0/24
150.241.72.0/22
150.241.82.0/23
150.241.100.0/22
179.253.110.0/24
179.254.86.0/24
179.254.132.0/22
179.254.156.0/22
179.254.170.0-179.254.191.255
185.170.153.0-185.170.154.255
193.23.195.0/24
193.23.200.0/24
193.23.202.0/24
Signature Algorithm: sha256WithRSAEncryption
43:41:85:91:0d:55:22:6f:be:a7:e4:80:23:5c:81:17:28:44:
f6:34:87:1c:36:be:a7:8f:81:ad:89:ab:3a:1f:23:97:f2:d4:
dc:86:25:99:5d:66:b7:0b:5d:01:f3:61:1b:d6:5b:5a:14:0d:
f6:42:b0:f3:0c:7c:af:ed:06:d3:b5:e2:6c:3d:f3:4a:52:09:
37:46:56:bd:88:ee:6b:8c:85:63:04:ff:8a:1b:bd:ed:ef:8c:
d3:54:74:3d:24:2f:ce:4d:f5:d5:28:7b:ed:42:f4:d9:40:4f:
ea:16:13:d8:23:2a:0e:91:15:93:33:64:e5:f6:d6:35:bd:51:
fd:07:6a:e6:44:7f:d6:0c:45:75:ac:da:ca:32:46:60:56:6b:
21:b6:67:aa:d5:e9:5c:63:c6:e1:10:b2:e1:63:bf:e5:8d:51:
e7:ad:5f:75:87:84:33:f8:db:86:83:3a:d8:e3:a5:ac:00:f7:
56:46:4b:14:1e:4c:fe:87:36:ab:5b:cd:12:cf:7c:b4:3f:93:
dd:01:45:fd:25:03:76:d4:a3:74:40:61:a0:9e:5e:e2:8f:4d:
09:42:5e:af:7b:4b:cc:94:60:5d:a3:17:49:48:a8:ee:3e:e2:
51:99:c2:ce:f4:56:07:7b:22:66:d7:10:03:f4:ed:6b:06:9e:
e7:38:71:db
-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgISAaFfigg2aZ0v6blNivKY6g8OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYxMDIxMTczNzIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGUxZGFkYzk5NGNkMjcwZWM5MWVjNzI5ZThlMzdkNjFlYjQyYzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9yH02gOd3GN5JvfCW2JzOJLA8qm
N4WRjP4aviNFipcJKIR0YG3aKU/giB9D6DF3I5mCO6Nan7nFRbbKUrGINsz2uX2H
XOnxeiZTIR+RvNdEJ3y8dv3JqCinlWhMWkmba7u2fC9pp/dlpw36g8Xij3lIOxyb
njKk5ijSz9aOY3Oa/RojnqWOS+N+chCCRyODdJIAo6avLqIAwUUmdSjwoaddWoDi
E6N6phuEWMJnQTqnbCPM9u+BzabrdMFNepVwB+RitpA0Y7/khm3ln76USSxzs0xI
ZDMgzjo6PrmpKJLNBeb4aAR9pp1woCshxb6Ef2waQp0JwToEsq+HdEhIpwIDAQAB
o4IDbTCCA2kwHQYDVR0OBBYEFHTh2tyZTNJw7JHscp6ON9YetCxqMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvZE9IYTNKbE0wbkRza2V4eW5vNDMxaDYwTEdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBgQYIKwYBBQUHAQcBAf8EggFwMIIBbDCCAWgEAgABMIIB
YAMEAgIaCDAMAwQDAhpYAwQBAhpcAwQAAhpfAwQCAhvQAwQADY+JAwQADY+OMAwD
BAINj7QDBAMNj8ADBAMfTAADBAIfTDQwDAMEAh9MPAMEAB9MQgMEAh9MRDAMAwQB
H0xSAwQBH0xUAwQBH0xyAwQBH00mAwQBH00uAwQCH02MAwQAH03uMAwDBABAvFkD
BABAvFoDBABAvGIDBABAvH8DBABN72sDBACQHw8wDAMEAJAfMQMEApAfMAMEAJAf
OQMEAZAfUgMEAJAfXQMEAJAfZzAMAwQAkB9rAwQBkB9sMAwDBACQH9UDBACQH9YD
BAKQH9gwDAMEAJAf7wMEApAf8AMEAJAf+QMEApbxSAMEAZbxUgMEApbxZAMEALP9
bgMEALP+VgMEArP+hAMEArP+nDAMAwQBs/6qAwQGs/6AMAwDBAC5qpkDBAC5qpoD
BADBF8MDBADBF8gDBADBF8owDQYJKoZIhvcNAQELBQADggEBAENBhZENVSJvvqfk
gCNcgRcoRPY0hxw2vqePga2JqzofI5fy1NyGJZldZrcLXQHzYRvWW1oUDfZCsPMM
fK/tBtO14mw980pSCTdGVr2I7muMhWME/4obve3vjNNUdD0kL85N9dUoe+1C9NlA
T+oWE9gjKg6RFZMzZOX21jW9Uf0HauZEf9YMRXWs2soyRmBWayG2Z6rV6VxjxuEQ
suFjv+WNUeetX3WHhDP424aDOtjjpawA91ZGSxQeTP6HNqtbzRLPfLQ/k90BRf0l
A3bUo3RAYaCeXuKPTQlCXq97S8yUYF2jF0lIqO4+4lGZws70Vgd7ImbXEAP07WsG
nuc4cds=
-----END CERTIFICATE-----
Generated at Mon Oct 26 12:37:54 2026 by rpki-client