Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/CvyEx_QNDEhFEGL_tgvo8bSdh3Y.roa
File: CvyEx_QNDEhFEGL_tgvo8bSdh3Y.roa (raw, json)
Hash identifier: P/t3FRiWeN4EesGMj6wRcGAr9injOFr3UDSsEm5Y9Es=
Subject key identifier: 0A:FC:84:C7:F4:0D:0C:48:45:10:62:FF:B6:0B:E8:F1:B4:9D:87:76
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D97085ED540A36AB124E797F6B5A81AA9
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/CvyEx_QNDEhFEGL_tgvo8bSdh3Y.roa
Signing time: Thu 16 Apr 2026 16:03:21 +0000
ROA not before: Thu 16 Apr 2026 16:03:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215439
IP address blocks: 2.26.0.0/21 maxlen: 24
2.26.48.0/21 maxlen: 24
2.26.80.0/21 maxlen: 24
2.26.96.0/21 maxlen: 24
2.27.20.0/22 maxlen: 24
2.27.40.0/24 maxlen: 24
2.27.41.0/24 maxlen: 24
2.27.42.0/24 maxlen: 24
2.27.43.0/24 maxlen: 24
64.188.64.0/22 maxlen: 24
77.239.125.0/24 maxlen: 24
144.31.14.0/24 maxlen: 24
144.31.30.0/24 maxlen: 24
144.31.47.0/24 maxlen: 24
144.31.54.0/24 maxlen: 24
144.31.95.0/24 maxlen: 24
144.31.147.0/24 maxlen: 24
144.31.156.0/24 maxlen: 24
144.31.157.0/24 maxlen: 24
144.31.158.0/24 maxlen: 24
144.31.164.0/22 maxlen: 24
144.31.203.0/24 maxlen: 24
144.31.207.0/24 maxlen: 24
144.31.212.0/24 maxlen: 24
144.31.224.0/24 maxlen: 24
144.31.230.0/24 maxlen: 24
144.31.234.0/23 maxlen: 24
150.241.70.0/24 maxlen: 24
150.241.71.0/24 maxlen: 24
150.241.94.0/24 maxlen: 24
193.23.194.0/24 maxlen: 24
193.23.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:08:5e:d5:40:a3:6a:b1:24:e7:97:f6:b5:a8:1a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 16 16:03:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0afc84c7f40d0c48451062ffb60be8f1b49d8776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:75:fa:53:7c:49:0a:5a:9d:18:8c:62:e2:a7:
2c:c7:8a:47:05:94:3c:9e:8d:49:ec:c0:10:8a:cc:
2f:cf:75:30:b3:66:3b:37:5f:1c:46:5a:0f:9a:1d:
63:e5:c8:be:31:c1:13:ec:b7:a7:c7:b5:35:94:bd:
a1:e0:70:c5:48:20:7e:83:1c:46:86:d7:42:68:e0:
5f:3f:5f:d5:6d:55:c7:d9:d1:f7:91:6b:18:59:a4:
53:0c:0e:46:a9:51:f8:1d:6c:4c:b4:a5:4f:6c:fe:
8c:f7:16:ee:a8:2b:82:98:0f:e2:38:92:15:ff:c2:
f5:79:b1:d9:42:3a:52:13:eb:67:c9:e6:e7:c4:fa:
5f:48:fe:aa:11:eb:96:2c:12:cf:22:a4:17:5b:37:
f2:53:14:23:b4:e6:e7:3a:b5:42:15:00:2c:2c:36:
19:6d:00:ac:db:3f:4e:d8:9a:3d:7e:d8:ae:e3:12:
30:dd:ed:0d:8c:e3:e4:74:38:c8:ce:80:c5:3c:ce:
ea:d4:3d:e8:13:3c:dd:e9:ca:a9:9c:54:74:a7:15:
0f:17:16:ce:f5:8b:ab:17:02:5a:1d:78:8a:6d:39:
0f:45:1b:27:c9:d6:d9:ab:71:39:26:d8:bf:17:04:
a4:12:79:f0:f3:03:60:98:eb:18:76:e6:f8:75:72:
f3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FC:84:C7:F4:0D:0C:48:45:10:62:FF:B6:0B:E8:F1:B4:9D:87:76
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/CvyEx_QNDEhFEGL_tgvo8bSdh3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.0.0/21
2.26.48.0/21
2.26.80.0/21
2.26.96.0/21
2.27.20.0/22
2.27.40.0/22
64.188.64.0/22
77.239.125.0/24
144.31.14.0/24
144.31.30.0/24
144.31.47.0/24
144.31.54.0/24
144.31.95.0/24
144.31.147.0/24
144.31.156.0-144.31.158.255
144.31.164.0/22
144.31.203.0/24
144.31.207.0/24
144.31.212.0/24
144.31.224.0/24
144.31.230.0/24
144.31.234.0/23
150.241.70.0/23
150.241.94.0/24
193.23.194.0/24
193.23.201.0/24
Signature Algorithm: sha256WithRSAEncryption
10:72:5c:bc:98:41:40:d1:eb:0a:59:9e:c0:39:8c:a7:8c:20:
e9:e1:bc:a8:69:4a:e8:e5:ba:87:36:27:6e:e4:9a:2a:ee:d4:
ba:5b:4f:b0:3c:fc:0d:69:6b:f7:0e:95:15:54:93:aa:cb:f9:
97:91:53:36:a1:71:e2:12:f1:e7:c3:a7:c2:27:95:1e:ee:9c:
29:3b:b4:a6:df:9d:b1:8d:1c:c1:37:96:f6:87:8b:08:c1:17:
02:72:69:87:cb:d7:ca:75:76:a0:cd:60:bc:85:f0:3a:18:10:
3b:65:75:7a:04:e0:d4:17:4a:80:61:db:af:15:b9:11:58:29:
06:b4:2c:12:61:e7:43:88:df:2c:db:2c:13:6b:e4:c8:d4:10:
ac:fb:24:70:26:1d:c7:c1:d1:cc:c1:fb:98:a3:c9:f9:61:7e:
83:68:0e:b8:f5:4a:13:c6:33:31:ce:66:cc:f1:2e:05:23:e4:
fb:ae:eb:e4:63:3d:ff:69:ac:20:2b:2e:e4:e9:42:86:ca:3d:
e5:9f:6b:37:cb:ea:7c:e6:73:c8:cf:bb:df:0a:8f:e0:60:c7:
a7:7b:f4:87:50:dd:6b:23:93:e8:0e:08:6b:e6:aa:b0:3e:0f:
76:3d:18:36:00:99:03:42:1e:79:a0:6c:9d:cc:0b:0e:95:72:
45:e5:43:ba
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgISAZ2XCF7VQKNqsSTnl/a1qBqpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNDE2MTYwMzIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWZjODRjN2Y0MGQwYzQ4NDUxMDYyZmZiNjBiZThmMWI0OWQ4Nzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnX6U3xJClqdGIxi4qcsx4pHBZQ8
no1J7MAQiswvz3Uws2Y7N18cRloPmh1j5ci+McET7Lenx7U1lL2h4HDFSCB+gxxG
htdCaOBfP1/VbVXH2dH3kWsYWaRTDA5GqVH4HWxMtKVPbP6M9xbuqCuCmA/iOJIV
/8L1ebHZQjpSE+tnyebnxPpfSP6qEeuWLBLPIqQXWzfyUxQjtObnOrVCFQAsLDYZ
bQCs2z9O2Jo9ftiu4xIw3e0NjOPkdDjIzoDFPM7q1D3oEzzd6cqpnFR0pxUPFxbO
9YurFwJaHXiKbTkPRRsnydbZq3E5Jti/FwSkEnnw8wNgmOsYdub4dXLzywIDAQAB
o4ICrDCCAqgwHQYDVR0OBBYEFAr8hMf0DQxIRRBi/7YL6PG0nYd2MB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvQ3Z5RXhfUU5ERWhGRUdMX3Rndm84YlNkaDNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHBBggrBgEFBQcBBwEB/wSBsTCBrjCBqwQCAAEwgaQDBAMC
GgADBAMCGjADBAMCGlADBAMCGmADBAICGxQDBAICGygDBAJAvEADBABN730DBACQ
Hw4DBACQHx4DBACQHy8DBACQHzYDBACQH18DBACQH5MwDAMEApAfnAMEAJAfngME
ApAfpAMEAJAfywMEAJAfzwMEAJAf1AMEAJAf4AMEAJAf5gMEAZAf6gMEAZbxRgME
AJbxXgMEAMEXwgMEAMEXyTANBgkqhkiG9w0BAQsFAAOCAQEAEHJcvJhBQNHrClme
wDmMp4wg6eG8qGlK6OW6hzYnbuSaKu7UultPsDz8DWlr9w6VFVSTqsv5l5FTNqFx
4hLx58OnwieVHu6cKTu0pt+dsY0cwTeW9oeLCMEXAnJph8vXynV2oM1gvIXwOhgQ
O2V1egTg1BdKgGHbrxW5EVgpBrQsEmHnQ4jfLNssE2vkyNQQrPskcCYdx8HRzMH7
mKPJ+WF+g2gOuPVKE8YzMc5mzPEuBSPk+67r5GM9/2msICsu5OlChso95Z9rN8vq
fOZzyM+73wqP4GDHp3v0h1DdayOT6A4Ia+aqsD4Pdj0YNgCZA0IeeaBsncwLDpVy
ReVDug==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:14 2026 by rpki-client