Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/iT_xKSEdMapuYu30BL0LfRObiMY.roa
File: iT_xKSEdMapuYu30BL0LfRObiMY.roa (raw, json)
Hash identifier: w/WKpdtHmhCtA4RG/fIC5U5UXFXCGQs+jddh++0dlVE=
Subject key identifier: 89:3F:F1:29:21:1D:31:AA:6E:62:ED:F4:04:BD:0B:7D:13:9B:88:C6
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DE4ADD15977419801D79BE1C772380350
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/iT_xKSEdMapuYu30BL0LfRObiMY.roa
Signing time: Fri 01 May 2026 17:54:49 +0000
ROA not before: Fri 01 May 2026 17:54:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215590
IP address blocks: 2.26.20.0/22 maxlen: 24
2.26.60.0/22 maxlen: 24
2.26.68.0/22 maxlen: 24
2.26.104.0/21 maxlen: 24
2.27.32.0/21 maxlen: 24
2.27.52.0/23 maxlen: 24
2.27.54.0/23 maxlen: 24
31.76.230.0/23 maxlen: 24
64.188.118.0/23 maxlen: 24
77.239.108.0/22 maxlen: 24
144.31.52.0/24 maxlen: 24
144.31.126.0/24 maxlen: 24
144.31.127.0/24 maxlen: 24
144.31.140.0/22 maxlen: 24
144.31.152.0/23 maxlen: 24
144.31.186.0/23 maxlen: 24
150.241.88.0/23 maxlen: 24
150.241.96.0/22 maxlen: 24
150.241.106.0/23 maxlen: 24
150.241.115.0/24 maxlen: 24
150.241.116.0/24 maxlen: 24
150.241.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e4:ad:d1:59:77:41:98:01:d7:9b:e1:c7:72:38:03:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 1 17:54:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=893ff129211d31aa6e62edf404bd0b7d139b88c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d7:ab:9e:09:b7:c4:28:34:80:65:20:25:64:
1b:e3:71:a3:e5:7b:be:ea:fc:ac:09:a9:59:1f:30:
3a:42:d2:3d:18:b9:6e:de:03:05:1d:15:ba:dc:36:
32:5d:15:52:12:08:26:80:8e:6e:13:51:dc:b4:3d:
cf:d1:df:9a:83:8d:f0:62:44:9f:2a:a3:40:40:a1:
ff:ae:0f:dd:58:e9:63:54:85:ab:a5:96:9f:36:17:
a1:95:b6:68:4a:75:b0:f3:7e:8b:82:1a:98:ae:f9:
f1:db:da:f4:36:53:5e:78:98:63:03:11:6f:2e:df:
e3:12:cc:31:59:f9:bc:0d:6b:5e:44:44:0f:6a:ce:
7c:c6:6a:82:e4:67:39:d9:fb:96:41:95:bb:01:56:
2b:ba:ea:90:ee:ab:bc:58:3d:dd:d4:47:b1:1c:35:
75:2a:59:17:c6:04:55:8a:5a:78:80:f8:c5:fe:96:
bc:ce:5f:b9:5d:11:cc:85:57:83:94:ad:12:67:42:
7e:08:9a:de:28:c5:3d:c7:bf:26:ff:73:4f:bb:59:
89:e1:db:60:84:c4:dd:3a:ab:78:4f:9e:0a:31:0d:
2b:db:80:69:57:3c:08:3f:35:25:b2:cb:87:f4:06:
29:ee:eb:43:03:e2:50:d8:c0:98:3e:05:23:6a:3b:
95:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3F:F1:29:21:1D:31:AA:6E:62:ED:F4:04:BD:0B:7D:13:9B:88:C6
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/iT_xKSEdMapuYu30BL0LfRObiMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.20.0/22
2.26.60.0/22
2.26.68.0/22
2.26.104.0/21
2.27.32.0/21
2.27.52.0/22
31.76.230.0/23
64.188.118.0/23
77.239.108.0/22
144.31.52.0/24
144.31.126.0/23
144.31.140.0/22
144.31.152.0/23
144.31.186.0/23
150.241.88.0/23
150.241.96.0/22
150.241.106.0/23
150.241.115.0-150.241.116.255
150.241.123.0/24
Signature Algorithm: sha256WithRSAEncryption
59:74:05:12:8f:be:fc:77:f8:de:dd:e9:37:4b:b7:b0:e9:1c:
72:59:83:13:cb:b9:ed:ce:31:e8:d0:2a:fc:4f:72:4a:3d:a8:
4b:6e:15:61:17:f6:7f:8c:a2:98:a6:cf:b8:a5:4a:d6:91:6c:
8a:ab:4e:40:d8:26:d9:42:09:e2:db:be:2d:b7:57:01:d1:37:
29:d0:cd:86:c4:7b:82:40:36:7e:fd:34:06:33:ea:4e:b3:c1:
6c:0e:4c:6c:cc:ec:8a:ca:31:a1:bf:08:a0:aa:77:2a:45:af:
d5:94:6b:eb:83:e5:5b:b2:99:30:1f:ad:20:ca:d1:e0:89:79:
88:73:7e:cc:28:ee:de:1a:ab:06:8e:1b:01:89:3b:14:01:96:
20:4c:54:3a:a2:e5:3e:32:58:5e:96:c0:29:6f:65:16:6b:10:
6b:ca:e2:bd:8b:69:1b:95:e3:29:2d:06:77:c7:b8:9c:7d:16:
12:8b:eb:01:be:a5:8f:d5:7c:6b:b7:c4:19:e2:5a:65:8b:de:
85:73:8b:d8:90:7a:11:1b:51:e3:54:b7:9e:2c:3e:58:96:30:
9d:3c:76:a0:a9:cb:82:80:95:09:d6:20:32:5b:d2:36:5a:3d:
e1:1b:49:47:ff:3e:15:df:25:ff:73:8f:5f:65:45:24:8d:fc:
63:ea:ac:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:48:29 2026 by rpki-client