Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/e-7KwmsvGOdBK54SpCFoNCZIOk8.roa
File: e-7KwmsvGOdBK54SpCFoNCZIOk8.roa (raw, json)
Hash identifier: PBAQyaqlUSCAxF974rIIy2AfEXkBPm+7O378f6xQKZo=
Subject key identifier: 7B:EE:CA:C2:6B:2F:18:E7:41:2B:9E:12:A4:21:68:34:26:48:3A:4F
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A145BF69C38C1D7F9BB2978FE46314F238
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/e-7KwmsvGOdBK54SpCFoNCZIOk8.roa
Signing time: Fri 16 Oct 2026 17:25:34 +0000
ROA not before: Fri 16 Oct 2026 17:25:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 2.27.76.0/24 maxlen: 24
2.27.77.0/24 maxlen: 24
2.27.80.0/24 maxlen: 24
2.27.81.0/24 maxlen: 24
13.143.219.0/24 maxlen: 24
13.143.247.0/24 maxlen: 24
31.77.252.0/24 maxlen: 24
177.202.97.0/24 maxlen: 24
177.202.98.0/24 maxlen: 24
177.202.99.0/24 maxlen: 24
177.202.100.0/24 maxlen: 24
177.202.101.0/24 maxlen: 24
177.202.102.0/24 maxlen: 24
177.202.103.0/24 maxlen: 24
177.202.104.0/24 maxlen: 24
177.202.105.0/24 maxlen: 24
177.202.106.0/24 maxlen: 24
177.202.107.0/24 maxlen: 24
177.202.108.0/24 maxlen: 24
177.202.109.0/24 maxlen: 24
177.202.110.0/24 maxlen: 24
179.236.139.0/24 maxlen: 24
179.236.140.0/24 maxlen: 24
179.236.141.0/24 maxlen: 24
179.236.143.0/24 maxlen: 24
179.253.112.0/24 maxlen: 24
179.253.113.0/24 maxlen: 24
179.253.114.0/24 maxlen: 24
179.253.115.0/24 maxlen: 24
179.253.116.0/24 maxlen: 24
179.253.117.0/24 maxlen: 24
179.253.118.0/24 maxlen: 24
179.253.119.0/24 maxlen: 24
179.253.120.0/24 maxlen: 24
179.253.121.0/24 maxlen: 24
179.253.122.0/24 maxlen: 24
179.253.123.0/24 maxlen: 24
179.253.124.0/24 maxlen: 24
179.253.125.0/24 maxlen: 24
179.253.126.0/24 maxlen: 24
179.253.127.0/24 maxlen: 24
179.253.171.0/24 maxlen: 24
179.253.173.0/24 maxlen: 24
179.253.174.0/24 maxlen: 24
179.253.181.0/24 maxlen: 24
179.253.184.0/24 maxlen: 24
179.253.185.0/24 maxlen: 24
179.254.72.0/24 maxlen: 24
179.254.74.0/24 maxlen: 24
179.254.77.0/24 maxlen: 24
179.254.79.0/24 maxlen: 24
179.254.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:bf:69:c3:8c:1d:7f:9b:b2:97:8f:e4:63:14:f2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 16 17:25:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7beecac26b2f18e7412b9e12a421683426483a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8c:20:86:4f:73:53:72:86:d7:ca:c2:e4:de:
8c:aa:8b:9f:00:ba:43:2f:78:d0:8b:5d:bb:b5:06:
ab:1c:7a:59:b3:b8:25:fe:b4:3c:60:48:3d:ec:62:
5b:71:60:0f:f1:6a:b6:03:06:48:c0:36:76:9d:8c:
0c:6a:e3:28:37:1e:e5:64:e8:3c:fa:85:16:0f:d7:
3b:a1:09:eb:fe:37:65:cf:6e:4a:2e:0b:b2:70:b1:
0d:b3:73:c9:77:d3:e9:77:15:7e:06:6e:84:38:d2:
3b:1e:cf:19:fc:30:e4:e6:03:e9:a6:a0:8b:49:d3:
37:11:bf:54:fd:1e:0b:85:20:51:9d:ac:a8:89:38:
25:77:e9:c2:73:f0:eb:27:7f:7c:d5:4a:07:7b:c9:
e9:38:cf:84:39:a6:fb:20:1e:24:e5:aa:43:23:a2:
d4:4f:01:13:10:6b:24:9e:ea:83:9e:e3:7e:3a:8d:
28:bf:69:21:7a:45:9c:ed:df:36:2b:e7:dd:58:f3:
b0:ca:db:6c:de:2b:12:1b:a1:18:6f:f9:2e:c1:46:
2c:e9:66:29:0e:10:7b:ee:12:c5:b4:cc:db:1c:ad:
5d:ff:3e:80:92:e2:aa:8c:e9:6d:c0:18:32:66:e2:
37:f8:f1:93:45:28:32:c8:58:d7:49:0d:e2:a0:4e:
01:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EE:CA:C2:6B:2F:18:E7:41:2B:9E:12:A4:21:68:34:26:48:3A:4F
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/e-7KwmsvGOdBK54SpCFoNCZIOk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.76.0/23
2.27.80.0/23
13.143.219.0/24
13.143.247.0/24
31.77.252.0/24
177.202.97.0-177.202.110.255
179.236.139.0-179.236.141.255
179.236.143.0/24
179.253.112.0/20
179.253.171.0/24
179.253.173.0-179.253.174.255
179.253.181.0/24
179.253.184.0/23
179.254.72.0/24
179.254.74.0/24
179.254.77.0/24
179.254.79.0/24
179.254.107.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:56:43:18:d9:2f:38:80:b3:84:bd:4c:16:19:4e:47:03:56:
a8:2f:ef:fe:a2:64:2c:93:01:5e:fb:2f:4b:42:6d:b9:af:f4:
91:c6:aa:e6:74:c1:2f:ec:81:45:1c:04:8f:48:55:c7:13:b9:
3d:9a:5d:3b:24:bb:ad:16:d0:df:4c:98:b6:a5:41:20:2a:a3:
ae:97:8c:8a:0f:8d:18:67:e7:37:19:f5:64:d4:f4:03:79:4a:
ca:42:50:7c:1d:9b:1d:c8:c3:a4:d8:95:cb:ac:c4:5d:e3:3f:
4a:fd:36:be:01:6e:34:48:99:e7:b7:5d:30:d4:cf:82:cd:42:
eb:65:58:36:85:25:ca:05:5d:15:ff:32:b5:19:6b:0f:e0:51:
18:e9:25:15:70:9d:5f:5b:c9:5b:ce:c9:2f:88:18:38:96:a8:
f3:c7:a4:7c:7f:51:f5:50:a5:a5:69:5a:f4:0a:d5:c0:0e:22:
7e:4d:9b:b8:8a:17:3d:98:8a:21:6b:37:71:89:58:b5:7c:39:
2b:f9:1f:cb:6d:14:6f:fd:94:1b:98:32:a7:20:61:36:22:14:
7e:f8:59:99:03:b3:d3:8c:19:d5:ac:1b:b9:e6:00:dc:1c:97:
ce:57:3e:f0:17:9f:23:38:2e:a8:c4:f5:68:bd:65:53:93:5e:
3d:e4:c9:d4
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgISAaFFv2nDjB1/m7KXj+RjFPI4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYxMDE2MTcyNTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmVlY2FjMjZiMmYxOGU3NDEyYjllMTJhNDIxNjgzNDI2NDgzYTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnowghk9zU3KG18rC5N6MqoufALpD
L3jQi127tQarHHpZs7gl/rQ8YEg97GJbcWAP8Wq2AwZIwDZ2nYwMauMoNx7lZOg8
+oUWD9c7oQnr/jdlz25KLguycLENs3PJd9PpdxV+Bm6EONI7Hs8Z/DDk5gPppqCL
SdM3Eb9U/R4LhSBRnayoiTgld+nCc/DrJ3981UoHe8npOM+EOab7IB4k5apDI6LU
TwETEGsknuqDnuN+Oo0ov2khekWc7d82K+fdWPOwytts3isSG6EYb/kuwUYs6WYp
DhB77hLFtMzbHK1d/z6AkuKqjOltwBgyZuI3+PGTRSgyyFjXSQ3ioE4BSwIDAQAB
o4ICjDCCAogwHQYDVR0OBBYEFHvuysJrLxjnQSueEqQhaDQmSDpPMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvZS03S3dtc3ZHT2RCSzU0U3BDRm9OQ1pJT2s4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGhBggrBgEFBQcBBwEB/wSBkTCBjjCBiwQCAAEwgYQDBAEC
G0wDBAECG1ADBAANj9sDBAANj/cDBAAfTfwwDAMEALHKYQMEALHKbjAMAwQAs+yL
AwQBs+yMAwQAs+yPAwQEs/1wAwQAs/2rMAwDBACz/a0DBACz/a4DBACz/bUDBAGz
/bgDBACz/kgDBACz/koDBACz/k0DBACz/k8DBACz/mswDQYJKoZIhvcNAQELBQAD
ggEBAI9WQxjZLziAs4S9TBYZTkcDVqgv7/6iZCyTAV77L0tCbbmv9JHGquZ0wS/s
gUUcBI9IVccTuT2aXTsku60W0N9MmLalQSAqo66XjIoPjRhn5zcZ9WTU9AN5SspC
UHwdmx3Iw6TYlcusxF3jP0r9Nr4BbjRImee3XTDUz4LNQutlWDaFJcoFXRX/MrUZ
aw/gURjpJRVwnV9byVvOyS+IGDiWqPPHpHx/UfVQpaVpWvQK1cAOIn5Nm7iKFz2Y
iiFrN3GJWLV8OSv5H8ttFG/9lBuYMqcgYTYiFH74WZkDs9OMGdWsG7nmANwcl85X
PvAXnyM4LqjE9Wi9ZVOTXj3kydQ=
-----END CERTIFICATE-----
Generated at Sun Oct 25 18:42:21 2026 by rpki-client