Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/s2dCjPzIVW7Vn-k-44WbC2bQOmQ.roa
File: s2dCjPzIVW7Vn-k-44WbC2bQOmQ.roa (raw, json)
Hash identifier: FNgqDl6NkjH0pjBSJbK2usV4fjFgxqmhAatYt6lyRJE=
Subject key identifier: B3:67:42:8C:FC:C8:55:6E:D5:9F:E9:3E:E3:85:9B:0B:66:D0:3A:64
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A034F5A46DF01673492B5EA3F8F31A3200
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/s2dCjPzIVW7Vn-k-44WbC2bQOmQ.roa
Signing time: Mon 24 Aug 2026 18:08:28 +0000
ROA not before: Mon 24 Aug 2026 18:08:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210546
IP address blocks: 2.26.64.0/22 maxlen: 24
2.26.64.0/24 maxlen: 24
2.26.65.0/24 maxlen: 24
2.26.72.0/23 maxlen: 24
2.26.73.0/24 maxlen: 24
2.26.121.0/24 maxlen: 24
2.27.1.0/24 maxlen: 24
2.27.48.0/23 maxlen: 24
2.27.49.0/24 maxlen: 24
2.27.50.0/23 maxlen: 24
2.27.192.0/22 maxlen: 24
31.76.40.0/22 maxlen: 24
31.76.56.0/22 maxlen: 24
31.77.182.0/23 maxlen: 24
31.77.192.0/22 maxlen: 24
37.46.16.0/24 maxlen: 24
37.46.17.0/24 maxlen: 24
37.46.18.0/24 maxlen: 24
37.46.19.0/24 maxlen: 24
64.188.72.0/24 maxlen: 24
64.188.99.0/24 maxlen: 24
77.239.106.0/24 maxlen: 24
144.31.80.0/24 maxlen: 24
144.31.81.0/24 maxlen: 24
144.31.132.0/24 maxlen: 24
144.31.133.0/24 maxlen: 24
144.31.184.0/24 maxlen: 24
144.31.185.0/24 maxlen: 24
144.31.194.0/24 maxlen: 24
144.31.195.0/24 maxlen: 24
150.241.76.0/24 maxlen: 24
150.241.77.0/24 maxlen: 24
150.241.113.0/24 maxlen: 24
150.241.114.0/24 maxlen: 24
177.1.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:f5:a4:6d:f0:16:73:49:2b:5e:a3:f8:f3:1a:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 24 18:08:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b367428cfcc8556ed59fe93ee3859b0b66d03a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:86:2b:40:92:10:a5:47:1c:3e:d8:14:96:4e:
e6:40:db:4d:03:92:60:64:2d:f9:49:40:93:da:98:
c0:5a:87:c6:e7:5f:16:94:26:37:39:1c:24:9f:ed:
c4:91:d9:07:04:50:5d:83:53:2f:ac:97:05:88:19:
1e:a5:ca:67:8e:4d:a3:4e:89:57:f5:47:bb:20:2a:
d9:35:e9:33:3d:7a:3f:34:53:bf:cf:3e:15:7d:c8:
fd:b1:73:e4:cf:ea:8f:4a:0d:9d:4e:18:f5:30:44:
66:25:55:1d:b7:3a:24:90:6d:ee:72:39:ec:3b:55:
46:d1:1f:f1:d8:e2:d3:6d:99:5b:29:a3:57:f9:a8:
97:da:cd:c9:75:9f:3d:6d:3c:b3:13:94:08:9c:c1:
9e:60:69:80:8a:2f:ae:14:40:c2:16:d8:cc:10:b9:
52:55:1b:96:c6:e7:2a:7d:9f:2d:06:fe:ec:9f:c3:
2b:00:50:27:d0:f9:8f:64:28:da:de:63:19:d3:d3:
d1:fc:70:95:ea:a8:2e:5e:41:d1:be:b4:b0:96:77:
27:21:d9:44:78:fe:b2:41:17:48:f8:77:f5:c3:bd:
19:26:e4:c9:69:92:b4:88:d5:3d:c9:36:9a:4e:80:
e5:93:67:5f:4b:49:4a:97:ba:02:9e:9b:ec:1f:e3:
3e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:67:42:8C:FC:C8:55:6E:D5:9F:E9:3E:E3:85:9B:0B:66:D0:3A:64
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/s2dCjPzIVW7Vn-k-44WbC2bQOmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.64.0/22
2.26.72.0/23
2.26.121.0/24
2.27.1.0/24
2.27.48.0/22
2.27.192.0/22
31.76.40.0/22
31.76.56.0/22
31.77.182.0/23
31.77.192.0/22
37.46.16.0/22
64.188.72.0/24
64.188.99.0/24
77.239.106.0/24
144.31.80.0/23
144.31.132.0/23
144.31.184.0/23
144.31.194.0/23
150.241.76.0/23
150.241.113.0-150.241.114.255
177.1.184.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:fa:61:c3:7c:4e:19:4e:d8:8e:1e:2a:d1:88:d0:46:2e:d5:
19:36:dd:e4:ca:e9:b5:60:1e:8b:22:ca:61:5c:dc:94:74:fc:
55:56:5e:b8:63:0e:aa:94:19:b5:f2:91:b8:79:8f:50:46:83:
24:26:ea:2a:8e:4a:c4:12:34:5b:c7:5a:3d:ee:70:44:ef:3c:
c1:d0:99:54:a1:ce:91:59:82:da:3f:f3:4c:10:93:24:9c:40:
9f:93:62:ff:3e:05:2c:1e:06:7e:76:8c:7a:5c:74:7b:df:19:
56:8c:d0:81:ed:90:c2:ad:b9:da:c8:a6:72:6f:66:c5:d0:32:
da:04:a0:52:5c:04:35:d1:8a:6d:17:ed:0c:8f:6e:89:92:d4:
49:e7:5a:a4:c6:21:0a:25:a3:9f:e8:3e:57:30:ea:f3:d9:ca:
6e:24:9b:e0:21:77:a6:f3:6b:e6:da:1e:b9:fd:98:dc:4d:9d:
02:62:cd:ae:12:6e:a0:d8:47:bd:5f:dd:43:82:cd:0e:6d:ad:
8b:1d:2c:6e:c8:cd:ef:35:5c:6b:c5:db:7d:10:82:0e:ef:95:
0c:31:4c:8f:b0:9a:79:94:ee:f2:cc:8d:ae:69:77:44:d2:24:
8d:dd:28:6c:23:b6:47:46:f3:c9:1c:e7:05:0a:6d:24:c6:41:
38:6b:cc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:18 2026 by rpki-client