Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/iL8SSZ5gV54S5fDymriubKZ4w6Y.roa
File: iL8SSZ5gV54S5fDymriubKZ4w6Y.roa (raw, json)
Hash identifier: 6LkJ9gt6dFGiTeXDSyypjzZpU8xQeZYzvtazmNNcUQk=
Subject key identifier: 88:BF:12:49:9E:60:57:9E:12:E5:F0:F2:9A:B8:AE:6C:A6:78:C3:A6
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F203E0D00294F9CE02A52BE9E3E79D742
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/iL8SSZ5gV54S5fDymriubKZ4w6Y.roa
Signing time: Thu 02 Jul 2026 00:32:45 +0000
ROA not before: Thu 02 Jul 2026 00:32:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401152
IP address blocks: 2.26.95.0/24 maxlen: 24
2.26.126.0/24 maxlen: 24
2.27.68.0/22 maxlen: 24
13.143.28.0/22 maxlen: 24
31.76.192.0/22 maxlen: 24
31.76.208.0/22 maxlen: 24
31.76.228.0/23 maxlen: 24
31.76.232.0/23 maxlen: 24
31.76.236.0/23 maxlen: 24
31.76.242.0/23 maxlen: 24
31.77.73.0/24 maxlen: 24
31.77.221.0/24 maxlen: 24
31.77.227.0/24 maxlen: 24
144.31.8.0/23 maxlen: 24
144.31.110.0/24 maxlen: 24
144.31.160.0/22 maxlen: 24
144.31.208.0/22 maxlen: 24
144.31.235.0/24 maxlen: 24
150.241.69.0/24 maxlen: 24
185.207.135.0/24 maxlen: 24
185.216.104.0/22 maxlen: 24
193.23.192.0/24 maxlen: 24
193.23.198.0/24 maxlen: 24
193.23.204.0/22 maxlen: 22
193.23.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:20:3e:0d:00:29:4f:9c:e0:2a:52:be:9e:3e:79:d7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 2 00:32:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88bf12499e60579e12e5f0f29ab8ae6ca678c3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f8:6f:55:01:c2:bb:14:32:44:ec:05:3f:9a:
7b:e9:a9:db:62:95:d1:3c:7e:d7:01:05:08:17:d8:
63:69:09:a1:76:fb:c8:48:89:95:fc:d3:f9:70:e7:
3c:f5:22:9d:59:ea:55:53:a3:e9:ad:ef:3f:f0:17:
5b:30:67:f5:cc:5b:d6:5f:7a:59:7b:7e:7e:de:c2:
21:5d:99:33:b3:06:6f:59:99:9a:d1:eb:2e:44:09:
43:53:db:bb:c0:a4:f5:73:23:5d:41:6c:00:07:6f:
aa:8c:bf:56:f2:4a:59:3b:a4:d5:a8:30:fb:6d:69:
71:49:be:8d:fb:15:a9:a0:af:16:95:b3:ca:82:42:
97:29:bf:12:77:d3:9c:84:18:5d:cd:fa:3c:ad:9d:
89:05:10:1d:8f:73:75:84:db:0d:f3:26:88:c4:d6:
37:18:59:42:86:2b:5a:84:ae:71:db:d7:35:16:35:
fa:c8:bf:47:52:00:4f:e7:35:ed:c6:25:e2:39:2f:
2e:fc:09:84:61:68:fe:23:7f:94:7e:2a:07:0e:a5:
5e:48:ac:ad:52:27:8e:d3:2f:d0:2f:51:fd:af:1f:
95:95:09:65:68:67:4c:9e:ea:6d:b4:ec:ea:e0:2d:
7a:2d:1b:72:1a:fb:00:c5:dd:68:74:e7:e2:63:a8:
d9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BF:12:49:9E:60:57:9E:12:E5:F0:F2:9A:B8:AE:6C:A6:78:C3:A6
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/iL8SSZ5gV54S5fDymriubKZ4w6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.95.0/24
2.26.126.0/24
2.27.68.0/22
13.143.28.0/22
31.76.192.0/22
31.76.208.0/22
31.76.228.0/23
31.76.232.0/23
31.76.236.0/23
31.76.242.0/23
31.77.73.0/24
31.77.221.0/24
31.77.227.0/24
144.31.8.0/23
144.31.110.0/24
144.31.160.0/22
144.31.208.0/22
144.31.235.0/24
150.241.69.0/24
185.207.135.0/24
185.216.104.0/22
193.23.192.0/24
193.23.198.0/24
193.23.204.0/22
193.23.212.0/22
Signature Algorithm: sha256WithRSAEncryption
98:1f:b9:ab:1a:46:a7:af:0f:b0:a8:0a:32:1b:b6:40:c3:7f:
ba:af:49:9c:2a:71:31:e3:fb:87:de:95:8a:fa:b3:86:a3:71:
39:6c:82:f7:de:4e:dd:fe:b4:b6:b4:6b:74:fa:70:9f:67:2f:
62:70:fa:6e:ae:0c:48:2d:3a:b7:27:ed:28:cd:47:62:11:b9:
8d:b5:6f:74:55:a9:74:50:89:08:3c:99:d5:16:7c:06:28:e1:
3f:fe:b9:f8:16:6e:c1:f0:27:6d:fc:02:24:eb:4c:2e:84:bb:
6d:99:f2:d1:11:aa:24:35:98:27:61:21:99:87:96:56:29:c2:
4e:76:28:b8:01:c6:a6:ad:68:5d:c8:83:6e:12:15:9e:b1:d6:
c9:ad:ba:17:75:2f:8a:a0:71:3f:db:29:d7:9a:1d:57:67:cd:
36:bc:13:4d:55:c8:06:c5:c7:df:58:50:2a:52:31:a8:8a:3e:
ab:a0:51:7f:00:ab:a3:c9:e3:a2:aa:78:50:8c:57:7b:92:65:
9e:f6:7a:4a:c2:6d:fd:1b:8e:78:96:3f:b3:fd:ba:46:55:ae:
04:f3:31:6f:f5:fe:e3:c8:1c:21:77:7d:a0:21:b0:db:f6:39:
7f:19:c0:fc:19:b5:2b:f2:ab:59:4a:1f:53:7e:83:9b:bc:6e:
ad:32:55:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 06:20:15 2026 by rpki-client