Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/tnc57AA8KKIv1aKa8VyxBJkf_mw.roa
File: tnc57AA8KKIv1aKa8VyxBJkf_mw.roa (raw, json)
Hash identifier: UGhFLQDvdPUk/5XPK+BynGcIuyMHe6gPcSLGjy+e8ZA=
Subject key identifier: B6:77:39:EC:00:3C:28:A2:2F:D5:A2:9A:F1:5C:B1:04:99:1F:FE:6C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0348F1A6EE8F72E1C8AA3E5AA266657A9
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/tnc57AA8KKIv1aKa8VyxBJkf_mw.roa
Signing time: Mon 24 Aug 2026 16:16:28 +0000
ROA not before: Mon 24 Aug 2026 16:16:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213877
IP address blocks: 2.26.112.0/22 maxlen: 24
2.27.8.0/22 maxlen: 24
2.27.44.0/23 maxlen: 24
2.27.46.0/23 maxlen: 24
31.76.88.0/23 maxlen: 24
64.188.73.0/24 maxlen: 24
64.188.75.0/24 maxlen: 24
64.188.92.0/22 maxlen: 24
64.188.96.0/24 maxlen: 24
64.188.97.0/24 maxlen: 24
64.188.112.0/23 maxlen: 24
64.188.116.0/23 maxlen: 24
64.188.124.0/24 maxlen: 24
64.188.125.0/24 maxlen: 24
64.188.126.0/24 maxlen: 24
77.239.100.0/22 maxlen: 24
77.239.104.0/24 maxlen: 24
77.239.105.0/24 maxlen: 24
77.239.122.0/24 maxlen: 24
77.239.123.0/24 maxlen: 24
144.31.26.0/23 maxlen: 24
144.31.64.0/22 maxlen: 24
144.31.68.0/22 maxlen: 24
144.31.72.0/22 maxlen: 24
144.31.76.0/22 maxlen: 24
144.31.86.0/23 maxlen: 24
144.31.89.0/24 maxlen: 24
144.31.104.0/23 maxlen: 24
144.31.114.0/23 maxlen: 24
144.31.120.0/23 maxlen: 24
144.31.137.0/24 maxlen: 24
144.31.192.0/23 maxlen: 24
144.31.198.0/23 maxlen: 24
144.31.226.0/23 maxlen: 24
144.31.228.0/23 maxlen: 24
144.31.244.0/23 maxlen: 24
144.31.246.0/23 maxlen: 24
144.31.252.0/23 maxlen: 24
144.31.254.0/23 maxlen: 24
150.241.86.0/24 maxlen: 24
150.241.105.0/24 maxlen: 24
150.241.108.0/24 maxlen: 24
150.241.123.0/24 maxlen: 24
179.198.50.0/23 maxlen: 24
185.184.122.0/24 maxlen: 24
185.184.123.0/24 maxlen: 24
185.207.133.0/24 maxlen: 24
201.10.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:8f:1a:6e:e8:f7:2e:1c:8a:a3:e5:aa:26:66:57:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 24 16:16:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b67739ec003c28a22fd5a29af15cb104991ffe6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:79:6f:b1:14:73:3d:46:87:d0:50:ac:b7:f7:
b5:26:25:38:13:6c:ab:5b:83:66:84:87:96:6e:c7:
53:f6:b3:b3:10:ad:c7:c8:6b:ad:98:72:c3:70:d5:
6d:eb:a0:0e:db:5b:79:6b:31:e7:01:f5:b3:29:a3:
81:08:64:0f:be:c4:1c:ec:d2:20:a0:f1:25:03:6b:
d2:20:0d:a2:d3:d7:58:ab:2f:e0:58:a5:e0:f0:aa:
c1:96:0e:c3:8d:a8:c8:f1:96:60:f1:b6:27:e9:0f:
07:f5:97:63:29:81:05:e5:84:aa:e0:64:82:fd:ea:
d1:bb:70:06:de:08:d3:af:b8:cd:0e:34:d9:32:48:
57:e3:8b:f2:75:d0:45:80:54:72:07:0d:59:7e:84:
af:35:e9:96:84:44:89:55:69:7f:1e:95:ee:f9:2f:
25:1c:46:f9:02:0d:48:90:86:8a:dc:44:56:f4:7c:
0d:6b:f1:01:66:b6:a9:39:16:39:4b:89:82:8a:cc:
07:a2:89:31:dc:00:33:bc:91:db:bd:d5:6f:06:2a:
a8:17:01:fc:bc:54:b3:3b:51:e7:d4:16:cb:70:22:
a4:5f:cd:4f:42:54:41:d8:47:3e:6a:1c:22:81:57:
c9:d5:c1:a3:0a:f3:57:4f:07:07:57:93:38:03:76:
f3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:77:39:EC:00:3C:28:A2:2F:D5:A2:9A:F1:5C:B1:04:99:1F:FE:6C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/tnc57AA8KKIv1aKa8VyxBJkf_mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.112.0/22
2.27.8.0/22
2.27.44.0/22
31.76.88.0/23
64.188.73.0/24
64.188.75.0/24
64.188.92.0-64.188.97.255
64.188.112.0/23
64.188.116.0/23
64.188.124.0-64.188.126.255
77.239.100.0-77.239.105.255
77.239.122.0/23
144.31.26.0/23
144.31.64.0/20
144.31.86.0/23
144.31.89.0/24
144.31.104.0/23
144.31.114.0/23
144.31.120.0/23
144.31.137.0/24
144.31.192.0/23
144.31.198.0/23
144.31.226.0-144.31.229.255
144.31.244.0/22
144.31.252.0/22
150.241.86.0/24
150.241.105.0/24
150.241.108.0/24
150.241.123.0/24
179.198.50.0/23
185.184.122.0/23
185.207.133.0/24
201.10.72.0/22
Signature Algorithm: sha256WithRSAEncryption
62:2a:37:ce:d8:e1:10:2f:98:dd:e1:f5:7b:18:7f:7e:72:c0:
4d:03:68:9b:93:ad:ac:7e:a4:44:87:fc:50:0a:c3:42:d7:c6:
c2:1f:36:fd:0f:d0:03:86:be:09:4f:c3:54:f2:ac:7a:d0:57:
b8:61:2a:71:97:95:94:40:52:5a:a2:7e:97:e7:19:b2:b3:df:
ff:64:67:35:f9:d3:59:3d:e4:06:38:65:a7:ff:11:bc:2d:71:
4c:c5:de:ca:09:cf:4b:eb:c4:a1:3b:01:9d:27:16:ba:97:c4:
8a:5e:af:fe:82:fd:b1:41:ad:c7:e4:cb:84:e9:99:e9:77:64:
c9:51:ff:4c:ef:39:7e:a9:97:15:56:51:50:27:01:3e:0d:5b:
01:76:0b:72:5c:9c:f8:be:10:e7:e3:45:fd:c0:1b:47:77:62:
38:e3:72:9a:59:83:36:c3:f3:d6:1e:7e:fc:8f:b9:bf:a7:e5:
fe:f3:02:6a:28:42:64:24:2d:8b:b0:81:35:9a:d0:f6:e7:14:
fc:cd:e9:c3:8d:bb:9a:6c:8b:ee:f4:25:18:2e:82:72:c5:1b:
e1:d0:4b:2a:f8:68:e9:dd:4c:46:55:00:8a:80:47:1b:5d:88:
ed:1b:c3:bb:a2:e1:da:82:64:fb:f1:fb:dd:c1:a8:f7:1d:e4:
53:a3:79:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:43 2026 by rpki-client