Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/gq6EBnXP2f7QcQEgxPu2kHfw5TQ.roa
File: gq6EBnXP2f7QcQEgxPu2kHfw5TQ.roa (raw, json)
Hash identifier: XuyTWzQMygPBLKM7shyawsoz6zpMvg+iv1UoN6ThVNs=
Subject key identifier: 82:AE:84:06:75:CF:D9:FE:D0:71:01:20:C4:FB:B6:90:77:F0:E5:34
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FBF2F03EF3297E13C2E86CE3454E79006
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/gq6EBnXP2f7QcQEgxPu2kHfw5TQ.roa
Signing time: Sat 01 Aug 2026 21:15:57 +0000
ROA not before: Sat 01 Aug 2026 21:15:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201988
IP address blocks: 2.26.122.0/24 maxlen: 24
2.26.123.0/24 maxlen: 24
2.26.224.0/24 maxlen: 24
2.26.225.0/24 maxlen: 24
2.26.226.0/24 maxlen: 24
2.26.227.0/24 maxlen: 24
13.143.132.0/24 maxlen: 24
13.143.133.0/24 maxlen: 24
31.76.30.0/24 maxlen: 24
31.76.94.0/24 maxlen: 24
31.76.100.0/23 maxlen: 24
31.76.102.0/23 maxlen: 24
31.76.244.0/24 maxlen: 24
31.76.245.0/24 maxlen: 24
31.76.251.0/24 maxlen: 24
31.76.252.0/24 maxlen: 24
144.31.53.0/24 maxlen: 24
144.31.148.0/24 maxlen: 24
144.31.169.0/24 maxlen: 24
144.31.223.0/24 maxlen: 24
144.31.238.0/24 maxlen: 24
179.198.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bf:2f:03:ef:32:97:e1:3c:2e:86:ce:34:54:e7:90:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 1 21:15:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82ae840675cfd9fed0710120c4fbb69077f0e534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:da:da:60:75:28:c6:ef:0d:c5:e8:da:73:b2:
07:e6:69:91:22:fb:2d:2c:15:25:28:ec:d6:81:db:
52:ac:6a:df:b7:3a:0d:28:c2:6b:ba:57:b0:69:6e:
25:3f:4e:a3:5e:52:e9:0f:9e:49:d4:30:06:43:47:
c8:a7:be:56:4a:b7:f3:33:de:ad:7a:77:e4:40:66:
6c:d2:57:2f:b0:8a:1c:05:a1:76:44:7f:25:70:a1:
49:33:66:00:2d:45:8b:17:7f:16:17:3d:bb:3c:b1:
6e:3f:60:17:86:eb:10:54:91:3c:49:1c:24:7c:ad:
aa:f1:2b:50:02:10:cc:a9:19:5a:1a:c4:e7:e3:eb:
51:e9:e2:27:2d:c2:a0:00:40:99:39:f4:b6:0e:6f:
cc:f8:73:c9:15:36:e8:2a:e7:8d:47:75:99:c9:3f:
26:61:19:e5:bf:49:64:70:dd:77:28:71:6d:41:8c:
06:a1:e4:94:7e:52:21:68:96:e1:f0:0d:d6:7d:c3:
19:08:d0:ec:6c:a8:ac:0a:02:94:f4:ef:50:d2:61:
33:11:01:d8:27:2b:76:cc:6c:c5:ee:88:e5:3e:0a:
3d:39:58:69:e6:7a:52:b6:3b:25:f8:6d:d4:26:f1:
cf:9e:8b:dc:cf:7e:d1:32:c7:a8:d7:6f:a2:3a:9c:
66:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AE:84:06:75:CF:D9:FE:D0:71:01:20:C4:FB:B6:90:77:F0:E5:34
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/gq6EBnXP2f7QcQEgxPu2kHfw5TQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.122.0/23
2.26.224.0/22
13.143.132.0/23
31.76.30.0/24
31.76.94.0/24
31.76.100.0/22
31.76.244.0/23
31.76.251.0-31.76.252.255
144.31.53.0/24
144.31.148.0/24
144.31.169.0/24
144.31.223.0/24
144.31.238.0/24
179.198.48.0/24
Signature Algorithm: sha256WithRSAEncryption
88:a5:56:09:d2:c3:96:ff:73:34:cf:64:2e:a0:ee:ee:64:f7:
8b:da:fd:46:04:05:e0:aa:e7:82:19:51:a3:bd:3c:b9:5b:5e:
15:21:a4:a6:b6:93:30:e7:41:ae:d9:59:31:7e:4c:89:44:57:
cb:27:3c:d7:02:9c:7c:5c:35:66:ec:ae:8f:89:c5:18:7e:1c:
a7:b7:45:bd:65:07:7f:24:81:79:d8:37:a1:4d:9f:74:34:b8:
05:af:bc:a1:98:3c:15:e7:bf:31:87:a5:07:be:a4:26:30:71:
99:6a:3d:77:d9:8d:2e:43:21:68:d6:58:29:12:dc:36:3b:43:
b4:86:cb:0d:24:bc:d9:2c:4a:9f:a9:35:0c:54:fd:e3:65:07:
52:81:d1:b9:c1:c0:10:7c:57:54:9a:1e:1b:e9:3b:66:a4:cb:
f1:6c:02:2d:70:37:e0:24:04:62:6a:02:8d:23:0e:dc:37:49:
f7:2b:cc:86:b9:56:39:5d:17:aa:f2:e2:a4:69:6c:30:60:68:
28:ea:1c:42:b4:a8:d4:9c:4a:57:39:3b:38:2d:89:05:22:be:
6a:33:e8:f1:96:1d:60:dd:ce:86:ad:2f:9c:a0:3f:ba:d9:a2:
56:ab:4e:4f:d3:be:b2:0f:60:9c:d2:4a:73:fd:30:6c:f0:24:
20:a0:5b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:52:08 2026 by rpki-client