Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-RMyTI-uVynA7kogZ39Df3Nm_II.roa
File: 1-RMyTI-uVynA7kogZ39Df3Nm_II.roa (raw, json)
Hash identifier: xjejGu4exDEmo4MaXDpyLc6NxC9hxvu2YWFUtb+j60o=
Subject key identifier: F9:13:32:4C:8F:AE:57:29:C0:EE:4A:20:67:7F:43:7F:73:66:FC:82
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019EBCB92BC482637EE6A6BB8C173F67F8A5
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-RMyTI-uVynA7kogZ39Df3Nm_II.roa
Signing time: Fri 12 Jun 2026 16:45:12 +0000
ROA not before: Fri 12 Jun 2026 16:45:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401152
IP address blocks: 2.26.95.0/24 maxlen: 24
2.26.148.0/24 maxlen: 24
2.26.150.0/24 maxlen: 24
31.76.128.0/21 maxlen: 24
31.76.168.0/21 maxlen: 24
31.76.192.0/22 maxlen: 24
31.76.200.0/22 maxlen: 24
31.76.208.0/22 maxlen: 24
31.76.216.0/22 maxlen: 24
31.76.228.0/23 maxlen: 24
31.76.232.0/23 maxlen: 24
31.76.236.0/23 maxlen: 24
31.76.242.0/23 maxlen: 24
31.77.73.0/24 maxlen: 24
31.77.221.0/24 maxlen: 24
31.77.226.0/24 maxlen: 24
31.77.227.0/24 maxlen: 24
144.31.8.0/23 maxlen: 24
144.31.110.0/24 maxlen: 24
144.31.160.0/22 maxlen: 24
144.31.235.0/24 maxlen: 24
150.241.69.0/24 maxlen: 24
185.207.135.0/24 maxlen: 24
185.216.104.0/22 maxlen: 24
193.23.192.0/24 maxlen: 24
193.23.198.0/24 maxlen: 24
193.23.204.0/22 maxlen: 22
193.23.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bc:b9:2b:c4:82:63:7e:e6:a6:bb:8c:17:3f:67:f8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 12 16:45:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f913324c8fae5729c0ee4a20677f437f7366fc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:84:97:4a:1d:07:b2:9f:ac:07:d1:eb:09:3c:
6f:c2:fd:9c:22:e5:ba:c4:9d:60:0e:8d:d3:c0:0e:
4d:8a:36:89:67:d6:fe:ed:5e:08:31:bf:05:f1:84:
37:d7:c0:87:11:75:19:58:6c:37:cb:6e:95:be:5b:
19:40:dc:6b:64:99:2f:d1:0a:1c:7f:9d:b5:aa:1a:
b5:26:1b:60:b7:5c:b9:fb:2c:98:8b:97:02:21:3c:
2c:3e:15:65:3a:bb:5a:dc:2b:c5:a6:0c:69:96:d0:
c4:e7:2a:51:6d:fb:db:24:77:65:15:da:94:fd:ca:
56:bc:14:2e:ec:d3:1f:f4:7c:ce:e9:ba:38:99:14:
38:7e:df:d2:81:ad:87:bc:eb:1b:38:a1:06:71:aa:
e4:f0:a2:ea:25:11:88:ef:20:1b:ce:86:38:58:ba:
e8:d3:34:24:d0:bb:e5:53:18:b8:c0:57:97:92:c9:
83:78:ec:f7:63:5b:ae:10:49:74:8a:e9:4a:f8:d0:
95:0c:d5:f9:3d:de:23:72:60:51:c8:1e:6e:76:36:
33:2a:d1:cc:e7:d1:0c:a2:26:4a:98:7b:52:ea:cc:
a1:9a:c7:c3:e6:91:91:73:aa:a0:a3:6f:b4:08:f1:
20:69:f3:6f:4f:5f:e8:31:b8:30:c5:f4:fc:43:41:
90:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:13:32:4C:8F:AE:57:29:C0:EE:4A:20:67:7F:43:7F:73:66:FC:82
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-RMyTI-uVynA7kogZ39Df3Nm_II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.95.0/24
2.26.148.0/24
2.26.150.0/24
31.76.128.0/21
31.76.168.0/21
31.76.192.0/22
31.76.200.0/22
31.76.208.0/22
31.76.216.0/22
31.76.228.0/23
31.76.232.0/23
31.76.236.0/23
31.76.242.0/23
31.77.73.0/24
31.77.221.0/24
31.77.226.0/23
144.31.8.0/23
144.31.110.0/24
144.31.160.0/22
144.31.235.0/24
150.241.69.0/24
185.207.135.0/24
185.216.104.0/22
193.23.192.0/24
193.23.198.0/24
193.23.204.0/22
193.23.212.0/22
Signature Algorithm: sha256WithRSAEncryption
19:33:b5:5e:35:fa:71:41:5d:20:7b:1a:fb:a8:cf:c0:a7:cb:
40:2c:63:fe:71:a9:8f:ce:8e:d9:60:37:90:00:c0:11:a7:4c:
3a:86:db:14:80:36:63:a4:4b:29:a9:24:50:42:9b:5b:22:6a:
7a:f1:3d:fb:d4:06:20:2e:7d:82:4d:a6:40:d5:37:1e:64:3f:
be:c9:49:60:13:b7:0e:2e:41:1a:fe:36:be:36:51:56:cc:d3:
4a:ca:e5:0c:5b:9b:dc:bd:02:64:6f:c5:72:9a:1e:17:b0:74:
bd:4f:07:89:e2:be:5b:ac:a5:6b:58:d9:cd:2a:8e:bd:44:e1:
5d:35:bf:37:98:3a:47:13:80:af:9e:d8:a7:62:47:4f:a0:cd:
b1:45:2d:ec:52:e6:dc:0e:1c:ca:44:1d:0e:3c:f8:46:82:19:
88:f1:7f:cc:ca:19:ea:19:a4:35:a0:50:3a:fb:7f:2b:4e:12:
9f:ba:bd:84:1b:8b:cf:b2:5d:7e:82:c8:18:1d:d0:a5:2e:b5:
9f:d9:de:4b:fe:c4:f4:d1:21:4e:8d:89:78:24:4f:4e:cf:3b:
78:cc:b6:8c:5f:0e:bc:19:f7:31:15:2a:1e:af:76:67:f4:35:
f4:30:31:bb:d5:9a:bf:be:05:b0:5a:6f:34:91:9f:17:33:2b:
57:25:71:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:53:44 2026 by rpki-client