Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/uE9eB1ba2qEKocaxOimjHifeBxQ.roa
File: uE9eB1ba2qEKocaxOimjHifeBxQ.roa (raw, json)
Hash identifier: eLRFvnVT9zyVkTUQ+HXtDH1l8lxSq5t9dHkUd5Bqyvg=
Subject key identifier: B8:4F:5E:07:56:DA:DA:A1:0A:A1:C6:B1:3A:29:A3:1E:27:DE:07:14
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A058A0E1E63AE927EA9A71666F0F1F057F
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/uE9eB1ba2qEKocaxOimjHifeBxQ.roa
Signing time: Mon 31 Aug 2026 16:22:13 +0000
ROA not before: Mon 31 Aug 2026 16:22:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 2.26.180.0/24 maxlen: 24
2.26.184.0/24 maxlen: 24
2.26.220.0/23 maxlen: 24
2.26.240.0/22 maxlen: 24
2.26.244.0/22 maxlen: 24
2.27.172.0/24 maxlen: 24
2.27.218.0/23 maxlen: 24
2.27.220.0/23 maxlen: 24
2.27.222.0/23 maxlen: 24
2.27.232.0/24 maxlen: 24
2.27.235.0/24 maxlen: 24
2.27.238.0/24 maxlen: 24
2.27.247.0/24 maxlen: 24
13.143.152.0/21 maxlen: 24
13.143.177.0/24 maxlen: 24
31.77.20.0/22 maxlen: 24
31.77.24.0/22 maxlen: 24
31.77.215.0/24 maxlen: 24
31.77.224.0/23 maxlen: 24
31.77.242.0/23 maxlen: 24
31.77.250.0/24 maxlen: 24
144.31.8.0/23 maxlen: 24
177.1.204.0/22 maxlen: 24
179.198.8.0/22 maxlen: 24
179.198.28.0/22 maxlen: 24
179.198.52.0/23 maxlen: 24
179.198.54.0/23 maxlen: 24
179.254.100.0/23 maxlen: 24
179.254.102.0/23 maxlen: 24
201.10.64.0/22 maxlen: 24
201.14.226.0/24 maxlen: 24
201.14.229.0/24 maxlen: 24
201.14.233.0/24 maxlen: 24
201.14.235.0/24 maxlen: 24
201.14.238.0/24 maxlen: 24
201.14.240.0/24 maxlen: 24
201.14.243.0/24 maxlen: 24
201.14.244.0/24 maxlen: 24
201.14.245.0/24 maxlen: 24
201.14.249.0/24 maxlen: 24
201.14.251.0/24 maxlen: 24
201.14.252.0/24 maxlen: 24
201.14.253.0/24 maxlen: 24
201.14.254.0/24 maxlen: 24
201.14.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 20:49:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:a0:e1:e6:3a:e9:27:ea:9a:71:66:6f:0f:1f:05:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 31 16:22:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b84f5e0756dadaa10aa1c6b13a29a31e27de0714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8d:66:6e:98:3a:1a:06:26:74:90:56:a3:b6:
3a:30:c3:2f:9c:39:76:6a:d4:9c:c9:00:85:6b:8c:
20:f4:7f:91:9a:c4:6f:84:71:8c:b2:06:92:6b:01:
4f:5d:49:57:a0:16:ff:28:00:5a:43:7f:c5:ee:25:
b9:ca:96:c5:c8:b1:f6:4b:7a:87:ac:78:19:05:e8:
69:53:c6:ac:36:66:b3:77:25:12:fb:a2:d2:09:f2:
29:60:2f:94:bc:33:d3:a4:1a:02:b2:bc:ed:69:bf:
eb:fc:5a:a6:fd:f8:89:09:0f:6e:89:ac:93:3f:c9:
bc:6a:ca:e3:10:b2:20:fc:a9:58:2c:2f:13:6b:71:
e0:22:c3:8c:61:e5:44:b0:22:31:60:b8:81:f7:88:
07:e6:60:a7:7a:0a:00:55:79:11:20:07:1d:0f:1e:
16:47:a0:e3:5a:94:6a:04:79:2c:05:99:6f:88:69:
60:41:98:fb:18:7c:89:40:f7:4e:f5:dc:78:b4:14:
3b:79:31:b8:c7:70:6c:a5:5d:7b:f4:e9:8d:68:c8:
b9:03:c3:f9:a0:6b:70:f4:35:ff:4d:9d:fb:88:3b:
91:bd:be:c2:78:37:68:03:33:11:4f:78:44:d7:7f:
82:26:8d:7e:5a:0c:00:ad:74:64:56:28:c4:ab:00:
c5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4F:5E:07:56:DA:DA:A1:0A:A1:C6:B1:3A:29:A3:1E:27:DE:07:14
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/uE9eB1ba2qEKocaxOimjHifeBxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.180.0/24
2.26.184.0/24
2.26.220.0/23
2.26.240.0/21
2.27.172.0/24
2.27.218.0-2.27.223.255
2.27.232.0/24
2.27.235.0/24
2.27.238.0/24
2.27.247.0/24
13.143.152.0/21
13.143.177.0/24
31.77.20.0-31.77.27.255
31.77.215.0/24
31.77.224.0/23
31.77.242.0/23
31.77.250.0/24
144.31.8.0/23
177.1.204.0/22
179.198.8.0/22
179.198.28.0/22
179.198.52.0/22
179.254.100.0/22
201.10.64.0/22
201.14.226.0/24
201.14.229.0/24
201.14.233.0/24
201.14.235.0/24
201.14.238.0/24
201.14.240.0/24
201.14.243.0-201.14.245.255
201.14.249.0/24
201.14.251.0-201.14.255.255
Signature Algorithm: sha256WithRSAEncryption
7f:c0:3b:d7:9e:74:b2:5b:bd:93:52:af:b4:5f:f9:48:8c:b0:
a3:a4:25:66:76:e1:2e:38:58:f5:ba:b7:96:f5:90:8e:1d:7f:
75:57:e6:d4:3c:b4:c6:f2:7c:37:9f:d1:50:8d:87:4f:fb:1a:
4e:d6:3e:f7:63:8c:40:68:77:9f:f2:24:66:95:c1:18:45:32:
0d:fe:82:61:64:27:f7:c9:a2:e7:40:2a:77:fb:dd:8e:de:fe:
32:6c:5d:35:69:b1:c0:9b:bc:70:39:8e:3c:d6:b8:f9:77:17:
1a:3c:57:b9:eb:05:50:2a:70:7a:31:08:c3:21:bc:27:f2:99:
d2:16:19:80:1e:4c:3d:ec:31:c3:cc:4a:d0:58:f4:a6:1c:1d:
be:47:c6:d3:d4:56:52:f7:aa:0f:d3:ec:68:ac:5d:12:07:2b:
ab:79:8b:75:ff:27:49:32:d6:ad:58:9f:5a:c7:9f:ea:1a:8b:
e5:63:10:9d:fa:21:6a:fd:99:6f:70:6c:0f:ef:7a:72:84:90:
dc:53:32:b9:98:cd:53:38:39:7d:85:c7:4d:23:3c:1f:fe:64:
a6:dc:f2:02:83:34:7b:6e:46:f3:34:a7:d3:5c:f2:9c:7f:c2:
ca:09:fe:de:70:64:08:8b:ad:85:98:dd:5f:d6:86:9b:ff:32:
21:df:2c:61
-----BEGIN CERTIFICATE-----
MIIF4jCCBMqgAwIBAgISAaBYoOHmOukn6ppxZm8PHwV/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwODMxMTYyMjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODRmNWUwNzU2ZGFkYWExMGFhMWM2YjEzYTI5YTMxZTI3ZGUwNzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY1mbpg6GgYmdJBWo7Y6MMMvnDl2
atScyQCFa4wg9H+RmsRvhHGMsgaSawFPXUlXoBb/KABaQ3/F7iW5ypbFyLH2S3qH
rHgZBehpU8asNmazdyUS+6LSCfIpYC+UvDPTpBoCsrztab/r/Fqm/fiJCQ9uiayT
P8m8asrjELIg/KlYLC8Ta3HgIsOMYeVEsCIxYLiB94gH5mCnegoAVXkRIAcdDx4W
R6DjWpRqBHksBZlviGlgQZj7GHyJQPdO9dx4tBQ7eTG4x3BspV179OmNaMi5A8P5
oGtw9DX/TZ37iDuRvb7CeDdoAzMRT3hE13+CJo1+WgwArXRkVijEqwDFYwIDAQAB
o4IC7jCCAuowHQYDVR0OBBYEFLhPXgdW2tqhCqHGsTopox4n3gcUMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvdUU5ZUIxYmEycUVLb2NheE9pbWpIaWZlQnhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBAgYIKwYBBQUHAQcBAf8EgfIwge8wgewEAgABMIHlAwQA
Ahq0AwQAAhq4AwQBAhrcAwQDAhrwAwQAAhusMAwDBAECG9oDBAUCG8ADBAACG+gD
BAACG+sDBAACG+4DBAACG/cDBAMNj5gDBAANj7EwDAMEAh9NFAMEAh9NGAMEAB9N
1wMEAR9N4AMEAR9N8gMEAB9N+gMEAZAfCAMEArEBzAMEArPGCAMEArPGHAMEArPG
NAMEArP+ZAMEAskKQAMEAMkO4gMEAMkO5QMEAMkO6QMEAMkO6wMEAMkO7gMEAMkO
8DAMAwQAyQ7zAwQByQ70AwQAyQ75MAsDBADJDvsDAwDJDjANBgkqhkiG9w0BAQsF
AAOCAQEAf8A71550slu9k1KvtF/5SIywo6QlZnbhLjhY9bq3lvWQjh1/dVfm1Dy0
xvJ8N5/RUI2HT/saTtY+92OMQGh3n/IkZpXBGEUyDf6CYWQn98mi50Aqd/vdjt7+
MmxdNWmxwJu8cDmOPNa4+XcXGjxXuesFUCpwejEIwyG8J/KZ0hYZgB5MPewxw8xK
0Fj0phwdvkfG09RWUveqD9PsaKxdEgcrq3mLdf8nSTLWrVifWsef6hqL5WMQnfoh
av2Zb3BsD+96coSQ3FMyuZjNUzg5fYXHTSM8H/5kptzyAoM0e25G8zSn01zynH/C
ygn+3nBkCIuthZjdX9aGm/8yId8sYQ==
-----END CERTIFICATE-----
Generated at Tue Sep 1 03:01:37 2026 by rpki-client