Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/iqUnl8yRckT34rG_VnsyXdVH-4A.roa
File: iqUnl8yRckT34rG_VnsyXdVH-4A.roa (raw, json)
Hash identifier: kPbnaOimQjzOD/s3DRxn+f2gb0y9aU6FkHTRI83qs4A=
Subject key identifier: 8A:A5:27:97:CC:91:72:44:F7:E2:B1:BF:56:7B:32:5D:D5:47:FB:80
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A19D18196082E3023ECC0D6CD772BA4AF1
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/iqUnl8yRckT34rG_VnsyXdVH-4A.roa
Signing time: Mon 02 Nov 2026 16:29:24 +0000
ROA not before: Mon 02 Nov 2026 16:29:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213877
IP address blocks: 2.26.112.0/22 maxlen: 24
2.27.8.0/22 maxlen: 24
2.27.44.0/23 maxlen: 24
2.27.46.0/23 maxlen: 24
31.76.88.0/23 maxlen: 24
64.188.73.0/24 maxlen: 24
64.188.75.0/24 maxlen: 24
64.188.92.0/22 maxlen: 24
64.188.96.0/24 maxlen: 24
64.188.97.0/24 maxlen: 24
64.188.112.0/23 maxlen: 24
64.188.116.0/23 maxlen: 24
64.188.124.0/24 maxlen: 24
64.188.125.0/24 maxlen: 24
64.188.126.0/24 maxlen: 24
77.239.100.0/22 maxlen: 24
77.239.104.0/24 maxlen: 24
77.239.105.0/24 maxlen: 24
77.239.122.0/24 maxlen: 24
77.239.123.0/24 maxlen: 24
144.31.26.0/23 maxlen: 24
144.31.64.0/22 maxlen: 24
144.31.68.0/22 maxlen: 24
144.31.72.0/22 maxlen: 24
144.31.76.0/22 maxlen: 24
144.31.86.0/23 maxlen: 24
144.31.89.0/24 maxlen: 24
144.31.104.0/23 maxlen: 24
144.31.114.0/23 maxlen: 24
144.31.120.0/23 maxlen: 24
144.31.137.0/24 maxlen: 24
144.31.192.0/23 maxlen: 24
144.31.198.0/23 maxlen: 24
144.31.226.0/23 maxlen: 24
144.31.228.0/23 maxlen: 24
144.31.244.0/23 maxlen: 24
144.31.246.0/23 maxlen: 24
144.31.252.0/23 maxlen: 24
144.31.254.0/23 maxlen: 24
150.241.86.0/24 maxlen: 24
150.241.105.0/24 maxlen: 24
150.241.108.0/24 maxlen: 24
150.241.123.0/24 maxlen: 24
179.198.50.0/23 maxlen: 24
179.253.72.0/21 maxlen: 24
179.254.162.0/23 maxlen: 24
185.184.122.0/24 maxlen: 24
185.184.123.0/24 maxlen: 24
185.207.133.0/24 maxlen: 24
191.217.224.0/23 maxlen: 24
201.10.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:18:19:60:82:e3:02:3e:cc:0d:6c:d7:72:ba:4a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 2 16:29:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8aa52797cc917244f7e2b1bf567b325dd547fb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a7:82:18:ca:65:e8:c7:64:62:ba:f3:dd:36:
a4:dd:7c:3c:a7:0c:86:10:3a:b4:94:d3:aa:d6:16:
4f:72:33:4f:e8:f6:13:64:9d:15:ff:90:61:d8:94:
22:fa:9e:c4:b4:fd:d2:46:a8:9f:b6:3c:10:5a:e2:
55:f9:3f:5d:2a:20:8e:96:d0:22:03:bd:fb:eb:04:
a2:4f:3c:75:8c:6a:7b:ed:c1:0b:0f:3c:d0:2a:91:
33:f6:ea:72:94:cb:6a:d0:98:c3:97:cf:50:3b:98:
d8:66:ed:a6:1c:3b:5b:f8:20:a9:5b:ec:76:9d:69:
b7:37:f1:b4:3c:53:c9:53:24:45:80:46:ae:b1:95:
64:52:05:3a:51:cd:a8:71:a6:c4:41:65:2c:a8:8a:
a8:20:fd:37:96:9d:6b:62:7a:14:c3:6d:67:bb:bf:
f0:20:ca:20:40:d8:6f:07:cd:08:62:ba:f0:ff:b0:
ce:bf:58:fe:0a:ed:e5:0a:1d:02:55:89:55:b9:b0:
6f:4f:94:5e:10:e1:58:f9:90:15:db:44:df:5d:e6:
f0:22:3b:02:39:e2:21:39:63:4e:87:b7:5a:40:c6:
68:c1:03:4e:f3:5d:b9:c3:50:2d:f0:29:8a:ed:1a:
11:58:33:bb:83:03:2f:6a:bb:38:23:ce:38:8c:44:
e0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A5:27:97:CC:91:72:44:F7:E2:B1:BF:56:7B:32:5D:D5:47:FB:80
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/iqUnl8yRckT34rG_VnsyXdVH-4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.112.0/22
2.27.8.0/22
2.27.44.0/22
31.76.88.0/23
64.188.73.0/24
64.188.75.0/24
64.188.92.0-64.188.97.255
64.188.112.0/23
64.188.116.0/23
64.188.124.0-64.188.126.255
77.239.100.0-77.239.105.255
77.239.122.0/23
144.31.26.0/23
144.31.64.0/20
144.31.86.0/23
144.31.89.0/24
144.31.104.0/23
144.31.114.0/23
144.31.120.0/23
144.31.137.0/24
144.31.192.0/23
144.31.198.0/23
144.31.226.0-144.31.229.255
144.31.244.0/22
144.31.252.0/22
150.241.86.0/24
150.241.105.0/24
150.241.108.0/24
150.241.123.0/24
179.198.50.0/23
179.253.72.0/21
179.254.162.0/23
185.184.122.0/23
185.207.133.0/24
191.217.224.0/23
201.10.72.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:c3:a0:b3:bb:a1:c0:be:04:4e:43:1e:b7:02:23:65:42:d6:
f9:47:ef:19:e0:40:6c:b1:04:38:38:f6:b4:4f:16:e0:2a:bf:
e1:f4:68:0b:c9:0f:d1:3c:c0:42:c2:0f:be:6c:0a:98:fc:34:
17:fa:17:60:05:64:de:59:ed:be:00:15:49:8f:3b:4f:3d:1e:
e5:a6:7e:c1:46:33:f2:99:69:8c:27:ef:47:6e:0c:f1:de:30:
6c:70:19:e1:3f:91:84:91:8d:03:01:16:0b:34:d9:58:b2:9c:
69:80:93:01:5e:65:08:57:6f:3f:76:45:5d:23:8c:81:85:d4:
9e:bf:96:9b:63:36:f9:60:1a:f0:2e:99:3d:13:17:83:3f:5a:
68:89:73:dd:02:86:28:70:f2:14:58:59:90:55:0a:91:8b:30:
37:ac:6d:b7:33:df:a0:a7:26:b8:02:cb:05:c5:0c:85:26:79:
0a:01:26:55:21:f6:5d:ac:c1:6b:d6:21:09:b3:11:38:89:c6:
ec:7e:d0:48:bc:f2:d9:69:9d:86:6f:d5:79:82:1b:5e:dc:74:
c2:33:ce:01:29:d2:4d:7b:4c:ce:12:25:73:36:16:b7:92:98:
b7:6d:dd:5a:30:a7:6e:e1:a4:a0:c9:e9:65:c5:38:8a:4e:2d:
f6:a3:c0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:38:35 2026 by rpki-client