Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/AqIWGGjCqh7KHCdVrxg-Ss6pfCQ.roa
File: AqIWGGjCqh7KHCdVrxg-Ss6pfCQ.roa (raw, json)
Hash identifier: 0TWkSCle/qcdFZ2Hz6bZpwqbVHKRuMMuf9wSYuaAF+c=
Subject key identifier: 02:A2:16:18:68:C2:AA:1E:CA:1C:27:55:AF:18:3E:4A:CE:A9:7C:24
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FAB0CE04185B207C807E661331BFEDB22
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/AqIWGGjCqh7KHCdVrxg-Ss6pfCQ.roa
Signing time: Tue 28 Jul 2026 23:26:15 +0000
ROA not before: Tue 28 Jul 2026 23:26:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401152
IP address blocks: 2.26.95.0/24 maxlen: 24
13.143.28.0/22 maxlen: 24
13.143.48.0/22 maxlen: 22
13.143.76.0/22 maxlen: 22
31.76.192.0/22 maxlen: 24
31.76.208.0/22 maxlen: 24
31.76.228.0/23 maxlen: 24
31.76.232.0/23 maxlen: 24
31.76.236.0/23 maxlen: 24
31.76.242.0/23 maxlen: 24
144.31.8.0/23 maxlen: 24
144.31.110.0/24 maxlen: 24
144.31.160.0/22 maxlen: 24
144.31.208.0/22 maxlen: 24
144.31.235.0/24 maxlen: 24
150.241.69.0/24 maxlen: 24
177.1.176.0/22 maxlen: 24
177.1.199.0/24 maxlen: 24
179.198.62.0/23 maxlen: 24
185.207.135.0/24 maxlen: 24
185.216.104.0/22 maxlen: 24
191.223.154.0/24 maxlen: 24
191.223.158.0/24 maxlen: 24
193.23.192.0/24 maxlen: 24
193.23.198.0/24 maxlen: 24
193.23.204.0/22 maxlen: 22
193.23.212.0/22 maxlen: 24
201.10.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:0c:e0:41:85:b2:07:c8:07:e6:61:33:1b:fe:db:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 28 23:26:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02a2161868c2aa1eca1c2755af183e4acea97c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:aa:aa:26:a2:5f:fd:0c:19:df:29:b2:e2:9d:
04:78:f6:37:69:af:4c:0a:79:13:f7:b6:91:2a:8e:
40:a0:a3:2c:3c:0c:72:4c:b7:24:86:19:bd:c9:4a:
65:09:d3:d3:86:1b:39:bf:c1:a3:17:9f:09:50:6e:
d3:25:b8:52:b3:08:5e:6b:e6:b9:9f:c2:27:f1:a1:
b4:f3:af:0e:75:c9:10:4d:66:15:73:81:58:33:cf:
38:e3:6d:f2:62:f2:85:a5:8f:12:ff:30:60:ae:32:
ab:3d:54:05:60:02:89:e7:2e:f6:fd:02:f5:19:9e:
5f:7d:c0:35:fd:15:be:a1:fb:32:d1:ab:a2:eb:d0:
26:ad:3f:3d:e0:c4:37:72:0d:37:c8:5d:e1:56:0e:
bc:a7:c4:83:cf:ab:1f:2b:eb:84:1a:ec:88:f1:d0:
ed:7d:6c:3d:8a:65:03:9b:0f:b9:2d:86:1e:6c:96:
e7:6a:45:4d:b6:d4:b7:c6:6f:a8:aa:ab:db:ee:5f:
a4:00:2f:2a:55:6b:02:7d:2b:a6:5a:10:60:77:1a:
30:3e:ae:35:6c:c3:c7:65:3d:2e:33:7b:37:50:fd:
fd:82:af:83:34:3d:2d:15:05:ea:0c:26:43:b9:cb:
d5:67:92:79:86:dc:24:1c:36:a5:93:fc:5a:ec:28:
c5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A2:16:18:68:C2:AA:1E:CA:1C:27:55:AF:18:3E:4A:CE:A9:7C:24
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/AqIWGGjCqh7KHCdVrxg-Ss6pfCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.95.0/24
13.143.28.0/22
13.143.48.0/22
13.143.76.0/22
31.76.192.0/22
31.76.208.0/22
31.76.228.0/23
31.76.232.0/23
31.76.236.0/23
31.76.242.0/23
144.31.8.0/23
144.31.110.0/24
144.31.160.0/22
144.31.208.0/22
144.31.235.0/24
150.241.69.0/24
177.1.176.0/22
177.1.199.0/24
179.198.62.0/23
185.207.135.0/24
185.216.104.0/22
191.223.154.0/24
191.223.158.0/24
193.23.192.0/24
193.23.198.0/24
193.23.204.0/22
193.23.212.0/22
201.10.81.0/24
Signature Algorithm: sha256WithRSAEncryption
99:8b:f1:20:4e:af:3d:92:e2:19:f4:e8:68:41:c2:4f:cb:b9:
c2:12:d3:be:3d:03:b7:08:09:52:4e:71:30:47:be:1e:a5:2f:
90:b5:1d:ce:5f:93:4c:bf:0f:d5:33:75:61:30:9b:4b:e7:b5:
3a:c5:07:6d:a1:ae:f2:0f:2d:5a:cc:50:da:48:c7:5b:49:10:
39:c6:18:70:5a:1f:5b:d7:a4:4a:b2:55:98:61:c1:68:6a:ef:
95:b7:bb:f9:28:e3:52:09:e4:c5:71:fb:38:8e:eb:23:db:4c:
e8:f2:9a:78:81:20:27:7e:d6:14:6f:ef:c3:c9:40:2a:c8:65:
ab:27:20:cd:60:da:3b:a1:56:2f:c2:5a:a6:cc:73:cd:9a:22:
d4:11:77:a8:55:cf:76:0c:a5:12:3f:28:fa:8e:e1:1a:de:f7:
77:d4:ed:4f:ae:ce:89:cf:76:6b:59:9e:d9:e9:a1:81:85:64:
f5:e5:12:bc:4c:78:c8:16:09:f3:02:60:b9:2d:77:97:c4:07:
90:2f:38:03:dc:b5:fc:9e:3b:86:fc:a5:5a:00:15:70:9e:af:
12:67:1e:88:54:15:be:a5:2f:89:31:9e:20:d7:9e:0b:a1:d5:
16:65:50:59:bd:2d:9e:1c:b6:81:a2:ff:4d:28:ed:82:61:38:
f5:69:be:c8
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgISAZ+rDOBBhbIHyAfmYTMb/tsiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNzI4MjMyNjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmEyMTYxODY4YzJhYTFlY2ExYzI3NTVhZjE4M2U0YWNlYTk3YzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKqqJqJf/QwZ3ymy4p0EePY3aa9M
CnkT97aRKo5AoKMsPAxyTLckhhm9yUplCdPThhs5v8GjF58JUG7TJbhSswhea+a5
n8In8aG0868OdckQTWYVc4FYM884423yYvKFpY8S/zBgrjKrPVQFYAKJ5y72/QL1
GZ5ffcA1/RW+ofsy0aui69AmrT894MQ3cg03yF3hVg68p8SDz6sfK+uEGuyI8dDt
fWw9imUDmw+5LYYebJbnakVNttS3xm+oqqvb7l+kAC8qVWsCfSumWhBgdxowPq41
bMPHZT0uM3s3UP39gq+DND0tFQXqDCZDucvVZ5J5htwkHDalk/xa7CjFBQIDAQAB
o4ICsDCCAqwwHQYDVR0OBBYEFAKiFhhowqoeyhwnVa8YPkrOqXwkMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvQXFJV0dHakNxaDdLSENkVnJ4Zy1TczZwZkNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHFBggrBgEFBQcBBwEB/wSBtTCBsjCBrwQCAAEwgagDBAAC
Gl8DBAINjxwDBAINjzADBAINj0wDBAIfTMADBAIfTNADBAEfTOQDBAEfTOgDBAEf
TOwDBAEfTPIDBAGQHwgDBACQH24DBAKQH6ADBAKQH9ADBACQH+sDBACW8UUDBAKx
AbADBACxAccDBAGzxj4DBAC5z4cDBAK52GgDBAC/35oDBAC/354DBADBF8ADBADB
F8YDBALBF8wDBALBF9QDBADJClEwDQYJKoZIhvcNAQELBQADggEBAJmL8SBOrz2S
4hn06GhBwk/LucIS0749A7cICVJOcTBHvh6lL5C1Hc5fk0y/D9UzdWEwm0vntTrF
B22hrvIPLVrMUNpIx1tJEDnGGHBaH1vXpEqyVZhhwWhq75W3u/ko41IJ5MVx+ziO
6yPbTOjymniBICd+1hRv78PJQCrIZasnIM1g2juhVi/CWqbMc82aItQRd6hVz3YM
pRI/KPqO4Rre93fU7U+uzonPdmtZntnpoYGFZPXlErxMeMgWCfMCYLktd5fEB5Av
OAPctfyeO4b8pVoAFXCerxJnHohUFb6lL4kxniDXnguh1RZlUFm9LZ4ctoGi/00o
7YJhOPVpvsg=
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:36:55 2026 by rpki-client