Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/FqUwRxhg_CN14hlu8tMcOICdxk8.roa
File: FqUwRxhg_CN14hlu8tMcOICdxk8.roa (raw, json)
Hash identifier: fM2mpOMk4hqgwzekGJsacZzbECpeVEo9gRdQYnYeU8c=
Subject key identifier: 16:A5:30:47:18:60:FC:23:75:E2:19:6E:F2:D3:1C:38:80:9D:C6:4F
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019EB7BA2D645E1EC704AE60B9FF932AFF68
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/FqUwRxhg_CN14hlu8tMcOICdxk8.roa
Signing time: Thu 11 Jun 2026 17:28:12 +0000
ROA not before: Thu 11 Jun 2026 17:28:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215439
IP address blocks: 2.26.0.0/21 maxlen: 24
2.26.48.0/21 maxlen: 24
2.26.80.0/21 maxlen: 24
2.26.96.0/21 maxlen: 24
2.26.228.0/24 maxlen: 24
2.26.229.0/24 maxlen: 24
2.26.230.0/24 maxlen: 24
2.26.231.0/24 maxlen: 24
2.27.20.0/22 maxlen: 24
2.27.40.0/24 maxlen: 24
2.27.41.0/24 maxlen: 24
2.27.42.0/24 maxlen: 24
2.27.43.0/24 maxlen: 24
2.27.137.0/24 maxlen: 24
31.76.8.0/22 maxlen: 24
31.76.20.0/24 maxlen: 24
31.76.21.0/24 maxlen: 24
31.76.24.0/24 maxlen: 24
31.76.27.0/24 maxlen: 24
31.76.28.0/24 maxlen: 24
31.76.29.0/24 maxlen: 24
31.76.76.0/24 maxlen: 24
31.76.77.0/24 maxlen: 24
31.76.78.0/24 maxlen: 24
31.76.79.0/24 maxlen: 24
31.76.80.0/24 maxlen: 24
31.76.81.0/24 maxlen: 24
31.77.128.0/24 maxlen: 24
31.77.129.0/24 maxlen: 24
31.77.130.0/24 maxlen: 24
31.77.131.0/24 maxlen: 24
31.77.156.0/22 maxlen: 24
64.188.64.0/22 maxlen: 24
77.239.125.0/24 maxlen: 24
144.31.14.0/24 maxlen: 24
144.31.30.0/24 maxlen: 24
144.31.47.0/24 maxlen: 24
144.31.54.0/24 maxlen: 24
144.31.95.0/24 maxlen: 24
144.31.147.0/24 maxlen: 24
144.31.156.0/24 maxlen: 24
144.31.157.0/24 maxlen: 24
144.31.158.0/24 maxlen: 24
144.31.164.0/22 maxlen: 24
144.31.203.0/24 maxlen: 24
144.31.207.0/24 maxlen: 24
144.31.212.0/24 maxlen: 24
144.31.224.0/24 maxlen: 24
144.31.230.0/24 maxlen: 24
144.31.234.0/23 maxlen: 24
150.241.70.0/24 maxlen: 24
150.241.71.0/24 maxlen: 24
150.241.94.0/24 maxlen: 24
193.23.194.0/24 maxlen: 24
193.23.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:ba:2d:64:5e:1e:c7:04:ae:60:b9:ff:93:2a:ff:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 11 17:28:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16a530471860fc2375e2196ef2d31c38809dc64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:ce:89:50:34:d6:f0:9d:a1:49:f2:76:4e:
da:7a:5a:e6:2e:32:ae:e5:77:c9:7c:37:2e:6b:19:
51:da:28:88:b7:dc:f5:9d:a2:ce:0f:72:f5:4c:a8:
c7:32:ef:3a:10:06:a7:b9:c0:02:1f:9a:5d:82:53:
cb:cc:a7:32:05:ac:28:3e:db:20:29:93:3f:b2:90:
c9:a7:0a:89:1f:4e:e0:6f:62:b8:5f:10:9c:6d:77:
69:9b:81:ae:38:f5:65:97:d0:64:7b:6d:e6:70:25:
05:13:0f:b5:14:84:3d:6a:63:ea:8d:8f:51:7f:66:
a1:88:86:b1:33:6c:85:dc:87:9e:ec:96:92:f0:ff:
87:f4:14:24:2a:f2:b7:54:a2:87:3e:e6:00:11:ce:
0a:b8:1c:0c:b4:2a:3d:1f:3c:10:43:55:41:6c:98:
9e:d8:ad:d1:dc:f3:2a:95:71:57:38:35:61:f2:7b:
a9:bf:40:0a:ed:1b:43:1c:67:4f:1a:03:e6:88:f2:
57:23:cc:5d:1a:17:6e:b0:60:33:fb:20:9b:ee:da:
84:27:99:43:e2:52:bc:e9:38:7f:5b:01:8f:43:4e:
e1:66:d0:28:37:8a:05:f1:04:67:95:b9:9d:5f:ba:
c0:3b:77:5c:a4:0b:f6:b5:c0:4f:8f:87:e9:f3:ce:
38:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A5:30:47:18:60:FC:23:75:E2:19:6E:F2:D3:1C:38:80:9D:C6:4F
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/FqUwRxhg_CN14hlu8tMcOICdxk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.0.0/21
2.26.48.0/21
2.26.80.0/21
2.26.96.0/21
2.26.228.0/22
2.27.20.0/22
2.27.40.0/22
2.27.137.0/24
31.76.8.0/22
31.76.20.0/23
31.76.24.0/24
31.76.27.0-31.76.29.255
31.76.76.0-31.76.81.255
31.77.128.0/22
31.77.156.0/22
64.188.64.0/22
77.239.125.0/24
144.31.14.0/24
144.31.30.0/24
144.31.47.0/24
144.31.54.0/24
144.31.95.0/24
144.31.147.0/24
144.31.156.0-144.31.158.255
144.31.164.0/22
144.31.203.0/24
144.31.207.0/24
144.31.212.0/24
144.31.224.0/24
144.31.230.0/24
144.31.234.0/23
150.241.70.0/23
150.241.94.0/24
193.23.194.0/24
193.23.201.0/24
Signature Algorithm: sha256WithRSAEncryption
20:d2:fb:45:b0:7b:30:73:ac:bf:84:d2:9e:14:80:af:32:16:
1a:d1:1d:c9:18:d5:bb:7c:94:09:a5:72:24:34:59:5e:c2:1f:
51:f1:be:57:03:4f:e9:16:ec:7a:88:ff:43:b7:d0:68:e2:cd:
fb:7c:ec:64:52:63:0b:3d:02:9d:5b:ff:51:bf:f8:c5:7a:07:
fc:dc:2e:3a:f4:37:3a:bd:25:d6:e6:44:85:74:44:d2:56:74:
23:16:96:48:a0:c9:73:99:d2:0b:e0:03:8a:d4:5f:f8:34:f3:
97:73:b4:ec:2c:fd:94:c1:d3:1c:20:d2:22:8b:36:a4:96:09:
96:2b:25:aa:85:26:b4:cf:35:bb:bd:fe:fb:ef:20:e8:57:ef:
8c:23:86:cc:ba:b2:2b:48:6a:21:94:a5:2c:e3:c3:36:5a:2f:
01:24:4e:69:8f:09:0f:2c:1c:9d:1e:e1:25:13:d8:37:a3:1a:
f1:ea:e2:53:aa:10:cc:ee:cd:29:8e:0e:03:78:ae:43:15:51:
08:32:61:72:02:11:bb:2f:ce:bd:74:75:79:21:a4:55:9d:36:
f7:a3:87:74:65:f2:c4:c1:13:5a:0d:e2:b6:75:b1:11:f0:73:
01:3e:04:fa:80:4e:64:32:49:48:e8:64:a8:fe:f8:ac:a1:79:
5e:59:96:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:38 2026 by rpki-client