Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-Ow2Ul1eq79uKobRxlmUWDYKT-A.roa
File: 1-Ow2Ul1eq79uKobRxlmUWDYKT-A.roa (raw, json)
Hash identifier: V4l5GSQWCcAmJKr6QJSu3t0zvs410Pk1ffYmPASxffw=
Subject key identifier: F8:EC:36:52:5D:5E:AB:BF:6E:2A:86:D1:C6:59:94:58:36:0A:4F:E0
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0B5A1169209820C02D5715B30DDEB2F65
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-Ow2Ul1eq79uKobRxlmUWDYKT-A.roa
Signing time: Fri 18 Sep 2026 17:47:08 +0000
ROA not before: Fri 18 Sep 2026 17:47:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213520
IP address blocks: 2.26.24.0/22 maxlen: 24
2.26.76.0/23 maxlen: 24
2.26.162.0/23 maxlen: 24
2.27.24.0/23 maxlen: 24
2.27.28.0/22 maxlen: 24
2.27.82.0/24 maxlen: 24
2.27.175.0/24 maxlen: 24
31.77.105.0/24 maxlen: 24
31.77.160.0/23 maxlen: 24
31.77.162.0/24 maxlen: 24
31.77.226.0/24 maxlen: 24
64.188.68.0/22 maxlen: 24
64.188.74.0/24 maxlen: 24
64.188.104.0/22 maxlen: 24
77.239.120.0/23 maxlen: 24
144.31.16.0/23 maxlen: 24
144.31.18.0/23 maxlen: 24
144.31.62.0/23 maxlen: 24
144.31.84.0/23 maxlen: 24
144.31.116.0/23 maxlen: 24
144.31.118.0/23 maxlen: 24
144.31.122.0/23 maxlen: 24
144.31.134.0/23 maxlen: 24
144.31.138.0/23 maxlen: 24
144.31.196.0/23 maxlen: 24
144.31.232.0/24 maxlen: 24
144.31.233.0/24 maxlen: 24
150.241.64.0/24 maxlen: 24
150.241.78.0/23 maxlen: 24
177.1.186.0/23 maxlen: 24
177.1.188.0/23 maxlen: 24
179.254.80.0/24 maxlen: 24
193.23.197.0/24 maxlen: 24
193.23.210.0/23 maxlen: 24
193.23.218.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:a1:16:92:09:82:0c:02:d5:71:5b:30:dd:eb:2f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 18 17:47:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8ec36525d5eabbf6e2a86d1c6599458360a4fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e7:79:cb:e4:18:4b:67:c2:fe:75:10:3a:f6:
ed:eb:64:97:63:86:5a:b2:dc:4b:1c:97:dd:48:64:
fe:0e:43:9e:a5:c8:bb:45:6f:17:6b:cc:4c:41:8f:
65:c3:6a:65:4f:07:21:51:fe:63:b9:3e:9b:20:54:
20:09:c1:1f:bf:6e:97:08:42:d8:bb:7e:4a:f8:d7:
99:2b:80:49:9a:f9:ed:9d:89:1a:ab:61:2f:4a:cb:
e5:ed:a7:4a:24:5e:db:2e:4c:80:08:e8:02:a8:29:
05:cc:b4:ef:e2:e6:28:5d:09:8f:d3:ff:d2:71:d0:
8b:73:8c:08:42:3f:2a:21:a7:e7:68:87:82:9f:15:
82:56:3f:6c:45:7e:ba:47:c4:3e:5e:8c:90:f0:59:
8b:e3:de:38:a0:b3:60:35:a6:81:e6:9f:04:d9:0b:
45:fd:0d:0f:8d:6d:e2:80:3b:9b:97:6d:46:86:0e:
0f:ed:3d:2f:c6:d3:0a:b2:3f:04:d7:5d:31:d5:0f:
f8:54:79:2e:50:c5:30:34:6f:ff:65:45:56:fe:80:
4b:8a:ac:5a:bf:8c:b8:df:2a:b0:a0:c6:32:b0:af:
78:56:d8:b9:de:be:1f:23:94:ea:f0:77:cf:1d:a3:
b4:56:9b:48:51:0b:41:82:ec:4e:ee:c2:39:85:0d:
7c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EC:36:52:5D:5E:AB:BF:6E:2A:86:D1:C6:59:94:58:36:0A:4F:E0
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-Ow2Ul1eq79uKobRxlmUWDYKT-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.24.0/22
2.26.76.0/23
2.26.162.0/23
2.27.24.0/23
2.27.28.0/22
2.27.82.0/24
2.27.175.0/24
31.77.105.0/24
31.77.160.0-31.77.162.255
31.77.226.0/24
64.188.68.0/22
64.188.74.0/24
64.188.104.0/22
77.239.120.0/23
144.31.16.0/22
144.31.62.0/23
144.31.84.0/23
144.31.116.0/22
144.31.122.0/23
144.31.134.0/23
144.31.138.0/23
144.31.196.0/23
144.31.232.0/23
150.241.64.0/24
150.241.78.0/23
177.1.186.0-177.1.189.255
179.254.80.0/24
193.23.197.0/24
193.23.210.0/23
193.23.218.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:d2:51:80:4d:b6:77:67:c9:ad:8b:30:ab:cd:34:bf:e8:2d:
d2:9c:56:8b:53:7d:b9:23:8d:9f:8e:37:bd:c9:6b:d3:b7:cf:
07:6f:69:66:af:00:2a:ca:f6:c4:e8:e5:01:2d:b3:7e:6c:79:
cb:ff:13:49:78:2f:03:6a:40:06:48:55:7c:5b:af:c3:6c:ee:
dc:ba:40:77:b6:81:24:e0:39:5a:d0:67:3d:39:06:9c:de:7c:
b6:c3:b1:b8:0f:4d:3f:14:a7:82:0e:17:d2:72:39:d8:01:9f:
df:f3:b6:dd:e1:77:8d:2b:f2:4a:42:3c:b7:56:58:cd:db:78:
9a:1e:64:2e:77:fe:d7:d7:e1:04:9b:22:c2:52:d1:c0:9f:e2:
bc:10:9e:ee:3f:ce:61:e1:e0:3d:7e:2b:7b:a8:4f:4e:10:99:
45:f3:69:5f:b2:cd:08:a3:67:06:c1:89:31:90:1c:04:f1:bd:
66:f8:5f:59:de:b1:ab:15:68:93:6d:6c:58:9c:ff:ca:31:8f:
2d:b5:2b:2b:c2:43:65:e3:ce:34:d2:91:11:23:db:44:d5:b6:
b6:4a:9d:73:8b:59:2a:18:99:63:d3:a1:2c:87:73:fd:ae:d8:
de:42:40:cc:e0:79:69:51:07:1f:a5:5f:eb:7d:74:15:22:11:
6e:e3:03:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:49:29 2026 by rpki-client