Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/x2h920UMSiO0pWBJZDMXlybCcNM.roa
File: x2h920UMSiO0pWBJZDMXlybCcNM.roa (raw, json)
Hash identifier: /XNBCNQqR8TD6WsKDqoQk/FlUbhVSBkeNH/aXZxUR/M=
Subject key identifier: C7:68:7D:DB:45:0C:4A:23:B4:A5:60:49:64:33:17:97:26:C2:70:D3
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019EE1FBB1EA8143AE558336714D05B66F8B
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/x2h920UMSiO0pWBJZDMXlybCcNM.roa
Signing time: Fri 19 Jun 2026 22:23:49 +0000
ROA not before: Fri 19 Jun 2026 22:23:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215439
IP address blocks: 2.26.0.0/21 maxlen: 24
2.26.48.0/21 maxlen: 24
2.26.80.0/21 maxlen: 24
2.26.96.0/21 maxlen: 24
2.26.228.0/24 maxlen: 24
2.26.229.0/24 maxlen: 24
2.26.230.0/24 maxlen: 24
2.26.231.0/24 maxlen: 24
2.27.20.0/22 maxlen: 24
2.27.40.0/24 maxlen: 24
2.27.41.0/24 maxlen: 24
2.27.42.0/24 maxlen: 24
2.27.43.0/24 maxlen: 24
31.76.8.0/22 maxlen: 24
31.76.20.0/24 maxlen: 24
31.76.21.0/24 maxlen: 24
31.76.24.0/24 maxlen: 24
31.76.27.0/24 maxlen: 24
31.76.28.0/24 maxlen: 24
31.76.29.0/24 maxlen: 24
31.76.76.0/24 maxlen: 24
31.76.77.0/24 maxlen: 24
31.76.78.0/24 maxlen: 24
31.76.79.0/24 maxlen: 24
31.76.80.0/24 maxlen: 24
31.76.81.0/24 maxlen: 24
31.77.128.0/24 maxlen: 24
31.77.129.0/24 maxlen: 24
31.77.130.0/24 maxlen: 24
31.77.131.0/24 maxlen: 24
31.77.144.0/24 maxlen: 24
31.77.145.0/24 maxlen: 24
31.77.146.0/24 maxlen: 24
31.77.147.0/24 maxlen: 24
31.77.148.0/24 maxlen: 24
31.77.149.0/24 maxlen: 24
31.77.150.0/24 maxlen: 24
31.77.151.0/24 maxlen: 24
31.77.156.0/22 maxlen: 24
64.188.64.0/22 maxlen: 24
77.239.125.0/24 maxlen: 24
144.31.14.0/24 maxlen: 24
144.31.30.0/24 maxlen: 24
144.31.47.0/24 maxlen: 24
144.31.54.0/24 maxlen: 24
144.31.95.0/24 maxlen: 24
144.31.147.0/24 maxlen: 24
144.31.156.0/24 maxlen: 24
144.31.157.0/24 maxlen: 24
144.31.158.0/24 maxlen: 24
144.31.164.0/22 maxlen: 24
144.31.203.0/24 maxlen: 24
144.31.207.0/24 maxlen: 24
144.31.212.0/24 maxlen: 24
144.31.224.0/24 maxlen: 24
144.31.230.0/24 maxlen: 24
144.31.234.0/23 maxlen: 24
150.241.70.0/24 maxlen: 24
150.241.71.0/24 maxlen: 24
150.241.94.0/24 maxlen: 24
193.23.194.0/24 maxlen: 24
193.23.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e1:fb:b1:ea:81:43:ae:55:83:36:71:4d:05:b6:6f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 19 22:23:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7687ddb450c4a23b4a560496433179726c270d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:97:27:2e:d8:89:7a:cf:6d:9f:8f:ac:43:1f:
dd:2b:1f:a2:6d:a3:61:d9:e9:ad:c4:86:76:82:ae:
1a:21:1b:8d:64:07:18:e6:ee:62:19:a1:17:0a:90:
7b:d6:21:a9:8c:55:40:e7:18:04:32:6b:74:81:9a:
4a:a2:71:0c:e7:56:14:7e:64:2a:59:1c:b6:f8:b4:
93:82:9e:aa:4e:ce:9d:55:c6:c0:09:09:2c:3c:82:
f0:aa:b6:5c:c7:8d:2b:25:cb:f0:d9:b4:99:61:0e:
2e:d9:38:26:06:18:78:d0:a1:c8:05:60:30:d4:31:
c7:aa:20:76:ec:7b:96:9a:03:fe:80:62:d7:36:bf:
62:86:ac:81:a8:0c:fb:7b:5e:42:25:34:a8:82:96:
28:2d:08:bd:45:84:5e:99:6a:72:01:81:3b:66:ef:
e3:b7:80:72:8c:13:a8:16:8e:a8:07:41:d6:0a:d3:
0c:1b:50:e9:48:e9:00:9b:2b:ed:c5:8b:b5:9e:e9:
63:5b:fe:3c:08:d5:2f:9b:21:22:2b:88:d8:d2:9d:
65:9c:84:ce:ce:09:1d:eb:5b:17:92:cc:03:8c:b8:
48:99:b5:67:2c:c0:ad:d5:22:df:2b:65:02:d8:97:
a9:c2:ec:7e:18:ed:c7:82:24:d8:ad:6c:77:1f:b6:
c1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:68:7D:DB:45:0C:4A:23:B4:A5:60:49:64:33:17:97:26:C2:70:D3
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/x2h920UMSiO0pWBJZDMXlybCcNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.0.0/21
2.26.48.0/21
2.26.80.0/21
2.26.96.0/21
2.26.228.0/22
2.27.20.0/22
2.27.40.0/22
31.76.8.0/22
31.76.20.0/23
31.76.24.0/24
31.76.27.0-31.76.29.255
31.76.76.0-31.76.81.255
31.77.128.0/22
31.77.144.0/21
31.77.156.0/22
64.188.64.0/22
77.239.125.0/24
144.31.14.0/24
144.31.30.0/24
144.31.47.0/24
144.31.54.0/24
144.31.95.0/24
144.31.147.0/24
144.31.156.0-144.31.158.255
144.31.164.0/22
144.31.203.0/24
144.31.207.0/24
144.31.212.0/24
144.31.224.0/24
144.31.230.0/24
144.31.234.0/23
150.241.70.0/23
150.241.94.0/24
193.23.194.0/24
193.23.201.0/24
Signature Algorithm: sha256WithRSAEncryption
93:45:bb:b3:ab:9d:6e:2e:a5:03:44:ba:7c:c4:90:00:5c:ef:
a7:3b:dd:89:cd:b5:2b:49:b4:bb:7b:e5:81:ed:d8:76:52:90:
cd:68:0a:6f:39:fe:5a:16:5f:39:4d:55:b9:08:2c:e9:62:12:
ca:3c:07:5d:03:de:f1:b0:ae:1d:ca:98:2c:52:19:72:a7:08:
f6:ac:68:4d:58:c7:2e:e1:75:18:44:2e:a8:a8:fa:53:ba:2e:
4e:cf:f4:7e:ea:18:83:3e:71:84:b6:57:f3:97:79:c2:47:bd:
bb:e7:a2:0b:67:d2:48:69:4a:d6:2e:02:19:22:b3:ef:8d:e0:
39:24:f0:f2:1c:fe:2a:35:29:23:6e:29:c7:c5:9c:fa:bb:68:
f8:4a:a7:e6:24:44:c7:14:81:4d:a6:9f:78:47:49:97:cc:87:
f4:58:e3:d2:1d:3f:88:c9:29:b2:22:0e:ec:42:23:df:ba:56:
61:94:17:18:77:d0:b3:3e:9f:31:1c:6d:12:61:67:0b:ad:96:
44:5a:35:c9:e5:fb:18:e2:f7:ad:74:e9:65:00:65:13:3f:f2:
a1:7a:54:7b:41:be:e7:f6:69:12:4b:7b:d1:3c:6d:e5:4a:10:
7c:73:50:81:73:d3:2e:86:97:e7:36:7e:b4:f1:80:10:bb:fa:
bd:78:e8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:04:11 2026 by rpki-client