Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ioIHKsOJHQtFUFMnMPRxQ00q40Q.roa
File: ioIHKsOJHQtFUFMnMPRxQ00q40Q.roa (raw, json)
Hash identifier: 4I5QmkmRkQ0+nH/ZfZPUVroge8XEMVMdnerBBjeXvYs=
Subject key identifier: 8A:82:07:2A:C3:89:1D:0B:45:50:53:27:30:F4:71:43:4D:2A:E3:44
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0A60E45A2CC81EE1709AC6E6950CCDDB3
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ioIHKsOJHQtFUFMnMPRxQ00q40Q.roa
Signing time: Tue 15 Sep 2026 17:12:28 +0000
ROA not before: Tue 15 Sep 2026 17:12:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11798
IP address blocks: 2.26.155.0/24 maxlen: 24
2.26.166.0/24 maxlen: 24
13.143.16.0/20 maxlen: 20
13.143.56.0/21 maxlen: 21
13.143.106.0/23 maxlen: 23
13.143.124.0/24 maxlen: 24
13.143.135.0/24 maxlen: 24
31.76.136.0/21 maxlen: 24
31.76.144.0/21 maxlen: 24
31.76.152.0/21 maxlen: 24
31.76.160.0/21 maxlen: 24
31.77.180.0/23 maxlen: 23
31.77.200.0/24 maxlen: 24
31.77.221.0/24 maxlen: 24
185.207.135.0/24 maxlen: 24
185.216.104.0/22 maxlen: 24
201.14.227.0/24 maxlen: 24
201.14.239.0/24 maxlen: 24
201.14.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a6:0e:45:a2:cc:81:ee:17:09:ac:6e:69:50:cc:dd:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 15 17:12:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a82072ac3891d0b4550532730f471434d2ae344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f5:44:c1:84:79:cc:ba:8b:2f:88:d9:ee:32:
b1:00:aa:10:38:af:4a:74:33:f3:46:cf:bc:c9:c6:
12:6e:55:87:1c:f5:91:c7:7b:6b:68:a4:1b:bf:5f:
bb:23:59:30:30:95:fe:14:1c:d4:4c:c6:3e:d2:ba:
9f:50:99:43:e4:e2:54:01:45:e3:8f:0c:d6:c8:58:
f0:5a:d1:aa:27:52:cb:fd:f9:6c:56:6c:55:81:5d:
17:58:5f:1a:1e:25:d7:75:3c:23:c8:40:00:d1:33:
98:f4:b1:1c:5d:a0:c7:04:bc:cf:cf:f0:cf:e6:6a:
b8:8b:65:69:ff:da:f2:c5:4f:8c:9a:ab:42:de:91:
32:0f:9f:76:48:dc:09:ef:e8:8c:de:05:9a:1f:12:
45:07:7a:f6:eb:94:c7:93:d9:a3:2c:25:b6:60:6f:
85:3f:a4:53:42:bd:40:6c:84:43:d2:71:ee:14:92:
83:eb:69:d1:01:1a:ad:5e:e1:02:35:df:c6:04:b6:
f1:24:64:66:cf:fb:54:41:c6:9e:9f:18:72:c4:9b:
02:f8:54:e5:5e:23:e7:09:78:19:13:71:6c:db:82:
ab:97:57:a1:48:ba:33:52:ef:db:00:ec:9b:82:f5:
ba:c8:da:c9:1e:ba:02:da:b5:69:37:03:9c:55:25:
65:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:82:07:2A:C3:89:1D:0B:45:50:53:27:30:F4:71:43:4D:2A:E3:44
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ioIHKsOJHQtFUFMnMPRxQ00q40Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.155.0/24
2.26.166.0/24
13.143.16.0/20
13.143.56.0/21
13.143.106.0/23
13.143.124.0/24
13.143.135.0/24
31.76.136.0-31.76.167.255
31.77.180.0/23
31.77.200.0/24
31.77.221.0/24
185.207.135.0/24
185.216.104.0/22
201.14.227.0/24
201.14.239.0/24
201.14.250.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:b5:75:3f:90:fd:c5:8e:84:1b:9e:da:94:5a:8e:b3:ba:dd:
4e:c3:1d:dd:5e:f7:62:a8:65:a3:20:b3:e7:53:aa:39:1d:ff:
64:17:5a:fc:84:5d:05:04:6d:c7:a3:22:9a:ca:cc:e5:d5:07:
fc:de:06:8e:20:22:bb:3f:df:a8:fa:c3:99:ba:61:ba:d8:a9:
32:16:42:4e:3b:56:63:83:22:ff:2f:4d:6c:7f:46:73:9d:75:
37:12:9c:ae:f3:54:cf:82:5c:82:49:de:f2:2c:83:e6:7b:3a:
2c:af:f2:30:6f:34:2c:e6:7a:48:8e:04:08:15:08:f5:28:0b:
25:c4:23:d9:5f:c0:a9:be:13:b6:18:13:c6:55:09:57:5c:7d:
e9:c9:44:dc:9d:19:67:c3:d4:06:94:c3:95:17:67:41:91:9f:
25:a7:50:ec:f7:1c:07:31:47:f3:cd:6d:6b:0e:20:58:68:f2:
ca:74:20:7a:0c:0f:e8:35:7f:48:de:0f:45:85:8a:83:e1:c7:
3d:cb:28:19:fe:3f:0c:b1:73:6d:df:cb:44:4c:98:15:93:b0:
66:fb:4c:1f:c0:54:a5:54:30:16:72:9e:ff:9e:5b:d1:3c:ac:
28:47:ce:d0:a0:b5:4b:61:46:92:53:78:de:9e:51:39:49:6b:
ca:5f:e0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:42 2026 by rpki-client