Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xwghGWCLkObM0IT1OrsJ0HwaaHc.roa
File: xwghGWCLkObM0IT1OrsJ0HwaaHc.roa (raw, json)
Hash identifier: Cag2mDgwkH3ckNs9nCbVFMof0Mn84NrkajkAtpRhCQ0=
Subject key identifier: C7:08:21:19:60:8B:90:E6:CC:D0:84:F5:3A:BB:09:D0:7C:1A:68:77
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A18E4E6B146255C1234C2E7228DD06B256
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xwghGWCLkObM0IT1OrsJ0HwaaHc.roa
Signing time: Fri 30 Oct 2026 19:34:26 +0000
ROA not before: Fri 30 Oct 2026 19:34:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218239
IP address blocks: 2.27.7.0/24 maxlen: 24
31.76.108.0/22 maxlen: 24
31.76.246.0/24 maxlen: 24
31.77.100.0/24 maxlen: 24
31.77.217.0/24 maxlen: 24
144.31.220.0/24 maxlen: 24
144.31.225.0/24 maxlen: 24
185.176.94.0/24 maxlen: 24
201.8.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:4e:6b:14:62:55:c1:23:4c:2e:72:28:dd:06:b2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 30 19:34:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7082119608b90e6ccd084f53abb09d07c1a6877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ec:44:80:b6:56:4d:b0:3b:f6:92:62:39:49:
0a:31:60:c5:5b:18:f0:5f:f1:77:44:aa:9d:74:51:
b8:4f:2d:96:98:a4:b4:d5:58:93:58:05:2b:63:79:
4b:ec:4f:99:2c:a3:c5:64:26:7b:82:32:b3:a4:48:
d3:03:ed:3a:d5:13:50:0e:1b:8e:4f:5b:19:13:43:
4f:f8:dd:16:c4:27:d3:82:c7:5b:4f:7a:46:62:9d:
4b:fe:01:77:6b:f0:e2:fc:ad:2f:b5:e5:32:d9:b4:
f7:b6:09:d1:32:1b:98:10:ee:d5:05:a9:60:7b:d3:
b9:5e:d6:68:26:50:e4:1e:61:ed:a1:56:56:4c:9a:
1a:21:1b:7b:27:10:cc:08:4b:8a:49:72:05:93:81:
bc:23:c3:10:b4:f1:c1:d8:2e:99:6f:77:e7:8e:f2:
ca:27:3c:0d:dc:fa:60:43:b6:fc:2d:a8:56:3d:f0:
b9:32:83:4e:47:fa:b4:04:62:35:fc:6d:be:cd:b5:
ae:84:38:55:06:7f:1e:69:ad:bb:36:19:a3:12:c1:
83:54:94:09:13:f6:0a:fa:d3:88:b5:aa:eb:31:ab:
81:e1:38:d3:c4:22:9b:1c:05:50:2b:12:f2:07:d7:
b7:a8:14:fa:c4:28:94:e0:95:3b:cd:c5:9b:ce:eb:
04:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:08:21:19:60:8B:90:E6:CC:D0:84:F5:3A:BB:09:D0:7C:1A:68:77
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xwghGWCLkObM0IT1OrsJ0HwaaHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.7.0/24
31.76.108.0/22
31.76.246.0/24
31.77.100.0/24
31.77.217.0/24
144.31.220.0/24
144.31.225.0/24
185.176.94.0/24
201.8.88.0/24
Signature Algorithm: sha256WithRSAEncryption
92:c9:45:89:e6:83:a9:b4:3a:12:eb:05:2d:4c:9a:19:fd:43:
ab:3a:9e:30:82:50:f3:01:e4:fb:d6:74:fd:1a:d1:91:4b:aa:
41:33:2b:79:d5:2a:2c:c2:fd:cf:09:94:19:d4:dd:fb:24:f5:
5d:ae:f4:4d:32:f8:30:70:fb:6c:a8:78:34:51:c2:bd:d6:3d:
fd:e0:1f:05:e9:b4:50:94:b9:db:2d:93:ec:2c:b6:3e:09:a4:
bc:7a:c2:bc:97:be:65:83:9e:31:36:34:39:e7:26:c6:eb:80:
07:19:1c:58:3a:d0:65:28:67:c2:d3:38:a5:d1:75:48:4b:71:
f0:21:c6:ea:03:6c:09:ae:ed:72:5a:f4:f1:60:bb:e2:80:80:
d7:7a:6c:e7:b3:9e:b6:50:f4:ec:d8:79:64:aa:43:d1:11:bc:
bd:95:85:34:5d:24:35:6c:51:62:a1:85:17:38:d7:bb:d7:4c:
12:4e:7b:eb:d0:65:13:10:19:75:6e:11:6f:9c:dd:13:6d:d7:
da:fb:ad:cb:94:64:91:03:d3:fa:e3:fb:be:28:f1:dc:90:5b:
f6:b3:d5:e9:f0:89:5a:82:16:00:a8:21:48:f0:76:e6:d2:f7:
8c:8d:a1:c1:3e:f1:c0:92:92:cf:65:45:8c:49:c6:3f:e5:07:
64:6c:28:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:27:17 2026 by rpki-client