Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/pLQ8xfWo9_Hnyle3a25_VvT4p4I.roa
File: pLQ8xfWo9_Hnyle3a25_VvT4p4I.roa (raw, json)
Hash identifier: LCIo+GDSBhDhrMwUEEQY7qKfhvkq0nB/bV993Bjfzsk=
Subject key identifier: A4:B4:3C:C5:F5:A8:F7:F1:E7:CA:57:B7:6B:6E:7F:56:F4:F8:A7:82
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0B12D40D4850CFE9908ABAF0D253EE18D
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/pLQ8xfWo9_Hnyle3a25_VvT4p4I.roa
Signing time: Thu 17 Sep 2026 21:02:07 +0000
ROA not before: Thu 17 Sep 2026 21:02:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401152
IP address blocks: 2.26.126.0/24 maxlen: 24
2.26.146.0/24 maxlen: 24
2.26.159.0/24 maxlen: 24
2.26.191.0/24 maxlen: 24
2.26.208.0/21 maxlen: 24
2.27.103.0/24 maxlen: 24
2.27.162.0/23 maxlen: 24
2.27.167.0/24 maxlen: 24
2.27.228.0/22 maxlen: 24
2.27.239.0/24 maxlen: 24
13.143.48.0/22 maxlen: 22
13.143.72.0/22 maxlen: 24
13.143.76.0/22 maxlen: 22
13.143.130.0/23 maxlen: 24
13.143.136.0/24 maxlen: 24
13.143.144.0/23 maxlen: 24
13.143.146.0/23 maxlen: 24
13.143.148.0/23 maxlen: 24
13.143.150.0/23 maxlen: 24
13.143.168.0/24 maxlen: 24
13.143.169.0/24 maxlen: 24
13.143.170.0/24 maxlen: 24
13.143.171.0/24 maxlen: 24
13.143.172.0/22 maxlen: 24
31.76.37.0/24 maxlen: 24
31.76.123.0/24 maxlen: 24
31.76.192.0/22 maxlen: 24
31.76.208.0/22 maxlen: 24
31.76.228.0/23 maxlen: 24
31.76.232.0/23 maxlen: 24
31.76.236.0/23 maxlen: 24
31.76.242.0/23 maxlen: 24
31.77.46.0/23 maxlen: 24
31.77.101.0/24 maxlen: 24
31.77.119.0/24 maxlen: 24
31.77.209.0/24 maxlen: 24
144.31.110.0/24 maxlen: 24
144.31.160.0/22 maxlen: 24
144.31.235.0/24 maxlen: 24
150.241.69.0/24 maxlen: 24
177.1.176.0/22 maxlen: 24
177.1.201.0/24 maxlen: 24
179.254.80.0/24 maxlen: 24
179.254.81.0/24 maxlen: 24
185.207.135.0/24 maxlen: 24
185.216.104.0/22 maxlen: 24
193.23.192.0/24 maxlen: 24
193.23.198.0/24 maxlen: 24
193.23.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b1:2d:40:d4:85:0c:fe:99:08:ab:af:0d:25:3e:e1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 17 21:02:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4b43cc5f5a8f7f1e7ca57b76b6e7f56f4f8a782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ca:40:f2:44:67:5c:fd:59:ac:65:aa:60:f1:
cb:54:1e:0b:8a:bb:ef:fd:c6:1d:78:20:bd:69:cd:
09:8f:3e:ee:b7:be:a6:af:4a:9c:9e:47:e9:58:6d:
91:1f:61:4f:cc:f8:66:7d:66:0a:74:b8:e3:6f:66:
23:05:05:69:f8:73:ec:bf:3c:c9:d1:da:e8:2a:24:
c7:8c:c7:ca:7d:b9:ac:36:1a:4d:6e:ce:78:a6:6c:
06:f8:60:73:32:24:6b:05:8c:a8:8d:94:af:d1:46:
2e:f0:a8:3d:1f:40:79:ff:51:a3:dc:ad:72:8d:2e:
99:b6:99:7a:35:8b:f0:bf:46:90:d4:3d:8b:21:48:
a2:14:14:ce:24:bc:e8:ef:cc:28:bc:f9:1b:c4:92:
d8:6c:3b:cb:bd:84:76:77:a8:89:c6:9c:81:fb:da:
c5:df:df:17:9a:f4:e8:3b:e1:dd:65:b8:70:e7:76:
d1:13:20:06:97:b9:9e:fd:cb:2e:f2:12:52:0b:cc:
d8:e5:1a:4d:76:aa:a9:ec:5b:21:ba:83:00:24:72:
f0:3f:1a:c7:5f:cb:80:24:a8:8a:e7:24:62:85:d1:
d9:de:43:ed:9e:4a:a0:40:f2:3b:51:5b:8a:8e:ec:
7d:2f:dd:05:46:fc:8e:27:cb:3e:78:32:0b:30:71:
af:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B4:3C:C5:F5:A8:F7:F1:E7:CA:57:B7:6B:6E:7F:56:F4:F8:A7:82
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/pLQ8xfWo9_Hnyle3a25_VvT4p4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.126.0/24
2.26.146.0/24
2.26.159.0/24
2.26.191.0/24
2.26.208.0/21
2.27.103.0/24
2.27.162.0/23
2.27.167.0/24
2.27.228.0/22
2.27.239.0/24
13.143.48.0/22
13.143.72.0/21
13.143.130.0/23
13.143.136.0/24
13.143.144.0/21
13.143.168.0/21
31.76.37.0/24
31.76.123.0/24
31.76.192.0/22
31.76.208.0/22
31.76.228.0/23
31.76.232.0/23
31.76.236.0/23
31.76.242.0/23
31.77.46.0/23
31.77.101.0/24
31.77.119.0/24
31.77.209.0/24
144.31.110.0/24
144.31.160.0/22
144.31.235.0/24
150.241.69.0/24
177.1.176.0/22
177.1.201.0/24
179.254.80.0/23
185.207.135.0/24
185.216.104.0/22
193.23.192.0/24
193.23.198.0/24
193.23.204.0/22
Signature Algorithm: sha256WithRSAEncryption
29:c5:97:4d:5a:0a:73:b4:4e:e9:21:89:39:8f:1f:3a:4b:d9:
ce:3b:96:0d:69:8f:14:aa:be:63:88:17:3c:e7:22:92:6d:42:
14:51:ba:64:9c:16:d3:ce:49:ea:f4:29:8c:90:bf:87:53:5b:
67:fd:7d:a9:c4:3e:c4:ef:09:af:37:a2:e9:81:38:dd:f6:e9:
55:10:c9:19:6f:4f:29:2d:4d:da:00:ad:32:ed:f6:be:cb:c3:
27:5c:0e:1e:a0:6d:c9:04:6c:b5:b5:8b:61:b8:50:d5:ae:e1:
a1:13:50:63:48:0c:32:4c:0d:ba:69:70:e8:0c:c2:0c:c2:33:
13:4b:13:2b:d2:24:cb:de:c0:30:51:32:59:fc:31:4b:66:79:
d8:2f:34:c9:37:2c:41:2d:3e:fd:2d:1b:2a:f2:d0:14:d1:95:
fe:2f:13:b1:06:37:df:9d:09:1b:f0:1a:3c:42:ba:9d:9a:78:
e3:bc:97:48:89:23:b2:ea:61:a1:32:37:09:7b:65:47:22:10:
1e:2a:7e:4e:35:f0:33:0b:bb:c0:0e:b0:3a:bc:fb:db:8a:5a:
c6:47:de:03:83:b6:b8:65:b0:93:60:e5:a3:fc:28:2f:a5:0c:
3a:ef:28:a4:93:5b:c4:68:9b:f2:e9:0e:d2:d9:49:90:3d:2d:
7b:3a:d1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:26 2026 by rpki-client