Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/p2ukMXFHrO9UxlMzZKPbSftdaAk.roa
File: p2ukMXFHrO9UxlMzZKPbSftdaAk.roa (raw, json)
Hash identifier: w3ol4qIf6TStuvyTOyc66lrbVfSHLcNZoQwgJQX0xw4=
Subject key identifier: A7:6B:A4:31:71:47:AC:EF:54:C6:53:33:64:A3:DB:49:FB:5D:68:09
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0F91CF6DE555C34EC5ED9CFDEC46D3F33
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/p2ukMXFHrO9UxlMzZKPbSftdaAk.roa
Signing time: Thu 01 Oct 2026 20:17:00 +0000
ROA not before: Thu 01 Oct 2026 20:17:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207513
IP address blocks: 2.26.173.0/24 maxlen: 24
2.27.57.0/24 maxlen: 24
13.143.139.0/24 maxlen: 24
13.143.143.0/24 maxlen: 24
144.31.13.0/24 maxlen: 24
144.31.29.0/24 maxlen: 24
144.31.91.0/24 maxlen: 24
144.31.92.0/24 maxlen: 24
144.31.100.0/24 maxlen: 24
144.31.101.0/24 maxlen: 24
144.31.102.0/24 maxlen: 24
144.31.111.0/24 maxlen: 24
144.31.112.0/24 maxlen: 24
144.31.113.0/24 maxlen: 24
144.31.144.0/24 maxlen: 24
144.31.248.0/24 maxlen: 24
150.241.80.0/24 maxlen: 24
177.1.202.0/24 maxlen: 24
177.1.203.0/24 maxlen: 24
179.254.82.0/24 maxlen: 24
191.217.241.0/24 maxlen: 24
191.217.244.0/24 maxlen: 24
191.217.254.0/24 maxlen: 24
191.217.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:1c:f6:de:55:5c:34:ec:5e:d9:cf:de:c4:6d:3f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 1 20:17:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a76ba4317147acef54c6533364a3db49fb5d6809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:c5:49:c2:d0:79:0c:eb:5a:e1:76:d4:78:
b5:a7:5d:58:57:eb:a4:16:8e:ab:25:15:a4:e4:48:
8c:08:26:ab:a0:64:51:a9:88:cb:84:f7:61:98:49:
30:69:59:de:f4:9a:7c:4e:03:35:9a:6f:0a:5a:b0:
2b:1b:a5:ac:5f:d0:68:2f:34:64:fb:d3:4f:f0:e9:
4f:b5:96:7b:37:19:8e:08:c8:6a:53:00:b5:b0:ae:
1e:9c:fc:92:4c:d0:d1:2c:62:95:3c:cd:74:6f:3f:
3a:67:38:d7:f4:c6:82:ae:6b:4f:a8:0d:c5:b4:a7:
71:b0:19:b7:17:1a:2d:b3:9e:9a:d0:32:0b:d2:6c:
cb:a8:33:5d:fa:74:eb:63:2c:26:89:22:63:0a:30:
02:26:0e:31:0a:00:2f:ac:5a:f2:0e:d5:54:d6:75:
9c:87:5e:9d:21:28:83:24:69:3a:1c:58:f4:bd:87:
a2:d2:4e:2c:21:86:c7:ce:f4:08:56:1d:8f:cb:05:
11:a2:4b:57:eb:f9:3c:3e:01:88:62:3e:9f:01:c7:
30:5f:6a:01:7e:79:84:1f:d8:f4:16:17:d4:56:86:
f0:50:99:40:18:36:72:2f:f5:07:04:72:9f:7f:47:
b5:c6:e2:32:de:42:2a:6c:7c:f5:7f:b8:1f:34:0b:
1a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6B:A4:31:71:47:AC:EF:54:C6:53:33:64:A3:DB:49:FB:5D:68:09
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/p2ukMXFHrO9UxlMzZKPbSftdaAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.173.0/24
2.27.57.0/24
13.143.139.0/24
13.143.143.0/24
144.31.13.0/24
144.31.29.0/24
144.31.91.0-144.31.92.255
144.31.100.0-144.31.102.255
144.31.111.0-144.31.113.255
144.31.144.0/24
144.31.248.0/24
150.241.80.0/24
177.1.202.0/23
179.254.82.0/24
191.217.241.0/24
191.217.244.0/24
191.217.254.0/23
Signature Algorithm: sha256WithRSAEncryption
11:ee:85:a8:88:31:5e:c3:2c:9d:77:46:44:1e:65:b2:e2:9b:
d1:3f:0f:3e:91:28:61:60:b0:50:e0:0c:ce:d1:85:65:e7:3c:
49:03:7c:61:f4:72:98:35:2d:f6:7d:27:22:49:ac:81:68:8e:
6a:05:24:ad:92:53:79:9f:97:bb:f2:9f:0c:7c:cf:58:ca:86:
87:93:5f:8a:94:3a:47:91:a8:71:60:d8:b2:90:71:1e:71:98:
14:42:61:fa:1d:31:34:ea:c4:86:c4:fe:bc:4e:a1:36:0e:14:
84:ae:80:0d:80:b3:bc:a9:1b:5a:92:54:ce:c0:fd:c8:99:77:
ff:9f:b2:04:00:91:30:40:ec:1f:1f:f5:4e:b4:70:b4:f2:8c:
45:1f:18:f0:8b:12:29:d1:63:b7:1f:84:6e:81:52:64:8b:67:
cf:81:b2:08:05:75:b1:a5:80:9e:c7:f5:11:db:ae:1e:6d:c6:
d6:b3:73:80:74:59:54:6e:ea:f9:68:d1:bb:1f:27:e9:00:28:
df:5b:55:ac:3c:32:e4:48:1b:f0:59:ce:84:73:22:97:73:41:
ab:73:8e:b1:17:76:c0:38:ac:df:ec:5f:6e:e7:44:1f:16:02:
3c:3e:61:b1:42:89:a8:35:87:ed:21:2e:09:37:1e:97:b2:09:
aa:8c:69:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 13:44:41 2026 by rpki-client