Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/f2GrYgXPbjaQNudrT-MNGlRbPPM.roa
File: f2GrYgXPbjaQNudrT-MNGlRbPPM.roa (raw, json)
Hash identifier: 100HwL5kWrmYXNtjCkrw/zTYP59nUyixrgictYn8AhM=
Subject key identifier: 7F:61:AB:62:05:CF:6E:36:90:36:E7:6B:4F:E3:0D:1A:54:5B:3C:F3
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019CD3D312926D30B2303AC9F7617AFEC971
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/f2GrYgXPbjaQNudrT-MNGlRbPPM.roa
Signing time: Mon 09 Mar 2026 18:19:11 +0000
ROA not before: Mon 09 Mar 2026 18:19:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215590
IP address blocks: 64.188.118.0/23 maxlen: 24
77.239.108.0/22 maxlen: 24
144.31.52.0/24 maxlen: 24
144.31.126.0/24 maxlen: 24
144.31.127.0/24 maxlen: 24
144.31.140.0/22 maxlen: 24
144.31.152.0/23 maxlen: 24
144.31.186.0/23 maxlen: 24
150.241.88.0/23 maxlen: 24
150.241.96.0/22 maxlen: 24
150.241.106.0/23 maxlen: 24
150.241.115.0/24 maxlen: 24
150.241.116.0/24 maxlen: 24
150.241.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d3:d3:12:92:6d:30:b2:30:3a:c9:f7:61:7a:fe:c9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 9 18:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f61ab6205cf6e369036e76b4fe30d1a545b3cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:23:14:ab:30:a9:14:8d:04:2a:e9:a4:b3:bd:
56:34:b6:0c:9c:53:8b:4b:b4:7c:0f:b7:9f:fc:c6:
d0:8c:4e:56:1a:64:3d:ae:3f:80:fc:f6:05:c3:48:
a3:26:65:c0:e8:d6:8c:ea:87:26:4c:28:77:8d:9a:
c1:3d:2d:f8:dd:c0:81:20:d2:00:20:19:1c:c9:3e:
e8:5d:ed:b5:47:6a:21:c2:eb:e3:88:7b:1e:5d:aa:
49:38:87:bc:21:90:1a:27:e1:b2:03:a8:cb:fa:4f:
91:02:51:36:3c:86:6e:de:a0:bd:59:94:e4:dd:2e:
36:12:cf:e9:fe:cf:8f:55:32:39:35:1b:0c:a1:ba:
98:e4:64:b2:e0:fa:de:ed:c1:a6:53:fe:e7:48:e2:
50:83:fd:44:f6:8e:fb:57:e6:c5:07:88:4b:c4:5a:
71:eb:13:64:b8:9d:ec:f9:6c:b8:f6:4e:cc:01:10:
75:c1:e9:46:2f:2a:12:d2:4b:9d:c1:93:0f:f4:c6:
38:4b:18:ac:9d:e4:94:72:78:8d:4f:02:7a:f1:0a:
36:76:71:3f:c2:2f:90:ba:4e:a1:83:a9:ee:35:6b:
ec:80:48:3e:de:01:7f:52:5f:12:b1:82:f1:d4:8e:
37:5c:97:58:92:61:0d:78:3d:c1:37:3c:a7:12:cd:
ba:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:61:AB:62:05:CF:6E:36:90:36:E7:6B:4F:E3:0D:1A:54:5B:3C:F3
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/f2GrYgXPbjaQNudrT-MNGlRbPPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.118.0/23
77.239.108.0/22
144.31.52.0/24
144.31.126.0/23
144.31.140.0/22
144.31.152.0/23
144.31.186.0/23
150.241.88.0/23
150.241.96.0/22
150.241.106.0/23
150.241.115.0-150.241.116.255
150.241.123.0/24
Signature Algorithm: sha256WithRSAEncryption
89:15:87:36:d6:a5:cb:ea:c2:d2:02:73:76:56:94:0a:71:8c:
f9:dc:86:bf:77:a3:81:53:18:3c:44:a2:b4:8f:07:14:e3:04:
60:69:e9:d4:0a:8b:15:0e:4c:4c:fd:00:da:a5:ee:d5:cf:23:
fa:ba:33:69:8a:f2:b5:36:f2:f3:81:d6:d2:cf:a2:64:36:27:
62:46:e0:b0:3e:b4:57:9f:c8:18:42:e7:7a:12:22:d3:fb:ce:
c7:50:9c:65:02:5e:b2:3f:a9:33:60:ae:8a:54:6c:47:24:61:
28:16:e1:50:dd:df:72:e6:94:ec:bb:5a:d0:71:90:5c:79:e8:
0d:08:73:06:c3:ab:e4:14:c5:8c:60:bd:00:72:08:55:8e:fd:
e5:a3:54:e0:84:0b:f2:53:70:a8:bc:85:99:f5:64:6c:81:e0:
6a:9b:1b:56:41:57:e6:9f:5e:3f:86:5c:5e:24:4c:b8:0b:6e:
5f:5f:7c:c3:60:dc:4c:e9:45:9b:12:94:a7:9c:d9:3f:cd:dd:
cc:15:48:50:44:6f:a2:34:68:07:f1:b3:0a:c7:3f:48:96:bd:
15:59:3d:76:1c:16:fe:dc:b6:7e:1e:c6:5e:aa:3f:87:95:c8:
48:d3:54:72:3f:96:f0:97:f5:15:b6:ac:e5:a0:10:a9:44:05:
d4:94:2c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 21:36:34 2026 by rpki-client