Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/mxONrriSprh9bFoyzOlvREcB-Ug.roa
File: mxONrriSprh9bFoyzOlvREcB-Ug.roa (raw, json)
Hash identifier: 6lo8Rw0cffXFmm1wxICauBmJYJ0W+Vb9WL53k4G0vwY=
Subject key identifier: 9B:13:8D:AE:B8:92:A6:B8:7D:6C:5A:32:CC:E9:6F:44:47:01:F9:48
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FAEE510E3E991F1A80D4B53DB1CC7DF55
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/mxONrriSprh9bFoyzOlvREcB-Ug.roa
Signing time: Wed 29 Jul 2026 17:21:15 +0000
ROA not before: Wed 29 Jul 2026 17:21:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207461
IP address blocks: 2.27.64.0/22 maxlen: 24
2.27.72.0/23 maxlen: 24
2.27.74.0/23 maxlen: 24
2.27.76.0/24 maxlen: 24
2.27.77.0/24 maxlen: 24
2.27.80.0/24 maxlen: 24
2.27.81.0/24 maxlen: 24
2.27.87.0/24 maxlen: 24
2.27.89.0/24 maxlen: 24
2.27.91.0/24 maxlen: 24
13.143.160.0/22 maxlen: 24
13.143.164.0/22 maxlen: 24
13.143.168.0/22 maxlen: 24
13.143.172.0/22 maxlen: 24
13.143.180.0/22 maxlen: 24
13.143.184.0/22 maxlen: 24
13.143.188.0/22 maxlen: 24
13.143.192.0/22 maxlen: 24
31.77.0.0/22 maxlen: 24
31.77.4.0/22 maxlen: 24
31.77.16.0/22 maxlen: 24
31.77.20.0/22 maxlen: 24
31.77.24.0/22 maxlen: 24
31.77.28.0/22 maxlen: 24
31.77.32.0/23 maxlen: 24
31.77.38.0/23 maxlen: 24
31.77.40.0/23 maxlen: 24
31.77.44.0/23 maxlen: 24
31.77.64.0/23 maxlen: 24
31.77.68.0/23 maxlen: 24
31.77.70.0/23 maxlen: 24
31.77.74.0/23 maxlen: 24
31.77.164.0/23 maxlen: 24
31.77.166.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:e5:10:e3:e9:91:f1:a8:0d:4b:53:db:1c:c7:df:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 29 17:21:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b138daeb892a6b87d6c5a32cce96f444701f948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:96:fa:0a:04:43:b8:d2:64:d8:50:e7:86:b3:
44:93:7c:fd:09:ee:5d:8e:f3:60:bc:ec:dc:6f:6e:
42:ce:58:50:e8:78:38:8e:50:46:f7:cc:df:0e:30:
9b:d4:0a:27:32:72:8a:1d:21:57:47:d2:f8:c7:63:
0b:0d:bc:d2:3d:9d:4b:6a:3b:42:5b:0d:f5:2a:15:
d1:45:33:a2:f4:78:f7:e3:1e:a4:a0:1e:e6:9b:dd:
4f:1d:48:47:97:65:64:f4:2b:27:bb:8b:b6:9b:05:
54:01:8a:f6:99:af:6c:d5:8f:15:1e:36:47:c4:e6:
8c:00:9a:3b:d6:57:de:b6:81:83:6a:ab:27:76:c0:
57:db:c2:77:a9:fd:f7:eb:24:fe:52:1e:66:50:e0:
b1:67:60:32:04:4e:b8:88:1b:46:7b:81:e8:12:bf:
05:7d:eb:f9:e8:92:2a:b7:f8:20:b7:d1:aa:13:57:
a3:8a:6d:9c:87:03:05:c4:8b:f1:36:67:f0:bd:0d:
cc:7f:eb:97:ae:8e:68:bd:43:0e:ff:39:07:84:1b:
60:7c:78:8e:48:18:c4:42:f8:63:ae:73:7a:4d:28:
de:3c:14:98:12:52:b3:68:a5:99:de:f2:55:ca:b4:
41:5f:90:39:8e:78:59:69:00:9e:6a:57:6c:25:8f:
06:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:13:8D:AE:B8:92:A6:B8:7D:6C:5A:32:CC:E9:6F:44:47:01:F9:48
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/mxONrriSprh9bFoyzOlvREcB-Ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.64.0/22
2.27.72.0-2.27.77.255
2.27.80.0/23
2.27.87.0/24
2.27.89.0/24
2.27.91.0/24
13.143.160.0/20
13.143.180.0-13.143.195.255
31.77.0.0/21
31.77.16.0-31.77.33.255
31.77.38.0-31.77.41.255
31.77.44.0/23
31.77.64.0/23
31.77.68.0/22
31.77.74.0/23
31.77.164.0/22
Signature Algorithm: sha256WithRSAEncryption
39:d4:1a:56:ad:2d:32:d4:ab:32:e4:92:a7:f9:54:9a:44:04:
c6:2c:7f:93:ec:dd:c7:77:00:48:c5:1c:fd:8f:ab:60:9c:68:
e8:14:db:bd:0b:99:36:51:c4:c3:dd:9a:82:ac:91:95:50:4c:
71:c8:02:54:b1:39:c0:9d:8f:cf:11:52:25:57:36:0d:89:63:
57:82:aa:77:c5:c6:83:fd:9e:ee:63:7d:9d:56:2c:b5:9f:c0:
17:8a:b2:20:23:dd:a0:f0:c0:d6:46:9d:5a:ed:eb:5f:7d:8c:
48:a5:41:38:c4:c4:60:13:7b:dd:78:1c:75:e9:a6:21:cf:b9:
44:9d:8a:92:52:0f:e5:fc:58:2b:2b:7a:fc:59:5c:95:ea:18:
6d:46:6a:59:5f:45:a6:fc:0a:20:1c:a0:f0:84:18:5b:84:e2:
40:6a:e0:df:43:71:fd:22:0b:0f:fc:73:9e:a1:a5:db:20:df:
35:dc:8c:3c:d7:ab:6b:48:16:d1:73:78:42:24:e2:04:68:ad:
75:37:ce:2c:cb:c2:a2:e1:fb:01:87:ab:50:2f:92:f7:f5:dd:
fc:22:21:6f:dd:f8:49:c9:b7:28:af:35:70:de:c6:56:8b:bd:
92:48:bb:d5:dd:a8:cd:72:6b:bb:5f:7c:76:be:9e:9e:c4:14:
fe:9a:80:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:52:09 2026 by rpki-client