Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TpWZfn_ywkOAwDxBm76aYryDhdA.roa
File: TpWZfn_ywkOAwDxBm76aYryDhdA.roa (raw, json)
Hash identifier: QxZonlQ+vsW5ZFpdbQGcMs95qTsACk0lo6Auhqn4bm0=
Subject key identifier: 4E:95:99:7E:7F:F2:C2:43:80:C0:3C:41:9B:BE:9A:62:BC:83:85:D0
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D6E1A25E4D81F7C27F175F08D4B4268F2
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TpWZfn_ywkOAwDxBm76aYryDhdA.roa
Signing time: Wed 08 Apr 2026 17:18:20 +0000
ROA not before: Wed 08 Apr 2026 17:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213877
IP address blocks: 2.26.112.0/22 maxlen: 24
2.27.8.0/22 maxlen: 24
2.27.44.0/23 maxlen: 24
2.27.46.0/23 maxlen: 24
64.188.73.0/24 maxlen: 24
64.188.75.0/24 maxlen: 24
64.188.92.0/22 maxlen: 24
64.188.96.0/24 maxlen: 24
64.188.97.0/24 maxlen: 24
64.188.112.0/23 maxlen: 24
64.188.116.0/23 maxlen: 24
64.188.124.0/24 maxlen: 24
64.188.125.0/24 maxlen: 24
64.188.126.0/24 maxlen: 24
77.239.100.0/22 maxlen: 24
77.239.104.0/24 maxlen: 24
77.239.105.0/24 maxlen: 24
77.239.122.0/24 maxlen: 24
77.239.123.0/24 maxlen: 24
144.31.26.0/23 maxlen: 24
144.31.64.0/22 maxlen: 24
144.31.68.0/22 maxlen: 24
144.31.72.0/22 maxlen: 24
144.31.76.0/22 maxlen: 24
144.31.86.0/23 maxlen: 24
144.31.89.0/24 maxlen: 24
144.31.104.0/23 maxlen: 24
144.31.114.0/23 maxlen: 24
144.31.120.0/23 maxlen: 24
144.31.137.0/24 maxlen: 24
144.31.192.0/23 maxlen: 24
144.31.198.0/23 maxlen: 24
144.31.226.0/23 maxlen: 24
144.31.228.0/23 maxlen: 24
144.31.244.0/23 maxlen: 24
144.31.246.0/23 maxlen: 24
144.31.252.0/23 maxlen: 24
144.31.254.0/23 maxlen: 24
150.241.86.0/24 maxlen: 24
150.241.105.0/24 maxlen: 24
150.241.108.0/24 maxlen: 24
150.241.123.0/24 maxlen: 24
185.184.122.0/24 maxlen: 24
185.184.123.0/24 maxlen: 24
185.207.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6e:1a:25:e4:d8:1f:7c:27:f1:75:f0:8d:4b:42:68:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 8 17:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e95997e7ff2c24380c03c419bbe9a62bc8385d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:41:c6:60:fe:b6:b6:8d:99:4c:d9:cc:a5:
b0:54:c8:22:54:79:3a:b8:3a:5c:3f:9e:e2:ad:64:
f7:5b:d4:de:5d:00:43:e9:67:32:be:b9:78:55:67:
05:4b:70:ca:06:db:5b:92:be:ab:1f:fe:bb:3f:d0:
c8:d5:90:3e:3f:20:45:d5:3c:5b:71:1a:d4:b7:96:
f0:a3:10:0d:76:f8:de:26:1e:8c:59:8f:ae:41:5b:
15:c0:65:b5:0b:0d:46:60:ab:08:73:b1:44:69:c6:
25:e9:d3:ef:39:a8:75:ab:19:7e:79:21:c5:a5:cd:
23:3e:d8:72:f8:13:de:4b:2e:94:58:b3:f5:d6:cf:
27:4f:f9:9b:4f:a0:9a:41:9c:59:bf:77:5b:af:e5:
59:33:62:59:33:69:ad:cc:db:c7:78:48:32:c6:9f:
6c:01:69:1e:3a:2c:16:ce:cb:ad:49:bb:49:9a:3d:
94:37:a2:e1:4e:9c:12:b4:9c:20:c5:f6:93:f7:0e:
e0:12:c5:07:ed:b3:e6:0e:48:d0:33:dc:c6:14:76:
fe:10:d9:6b:bc:8e:52:c5:f0:e9:fd:9c:9b:36:b0:
65:08:cb:1b:4c:2b:e3:95:68:23:9d:e9:47:16:e9:
d4:26:b2:d9:13:2b:fd:a7:88:21:98:df:e8:3b:a2:
27:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:95:99:7E:7F:F2:C2:43:80:C0:3C:41:9B:BE:9A:62:BC:83:85:D0
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TpWZfn_ywkOAwDxBm76aYryDhdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.112.0/22
2.27.8.0/22
2.27.44.0/22
64.188.73.0/24
64.188.75.0/24
64.188.92.0-64.188.97.255
64.188.112.0/23
64.188.116.0/23
64.188.124.0-64.188.126.255
77.239.100.0-77.239.105.255
77.239.122.0/23
144.31.26.0/23
144.31.64.0/20
144.31.86.0/23
144.31.89.0/24
144.31.104.0/23
144.31.114.0/23
144.31.120.0/23
144.31.137.0/24
144.31.192.0/23
144.31.198.0/23
144.31.226.0-144.31.229.255
144.31.244.0/22
144.31.252.0/22
150.241.86.0/24
150.241.105.0/24
150.241.108.0/24
150.241.123.0/24
185.184.122.0/23
185.207.133.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:32:b0:a0:3b:a2:26:66:ea:57:50:22:00:a5:b3:8d:c9:9e:
31:1c:85:aa:a6:0e:5d:e0:7f:4d:ea:2a:32:a6:ae:4c:81:3c:
d7:e8:eb:d8:6a:68:57:d7:f7:7e:d3:5c:5c:db:33:f2:80:50:
52:8d:90:53:dc:22:7e:1a:2f:06:0e:8c:c5:b2:b6:af:f4:fe:
33:2f:7c:ef:e2:3f:6d:7f:62:c2:d5:21:01:44:d9:53:a3:59:
6e:a3:28:2c:ec:4b:42:7e:57:0d:7b:77:de:e8:9b:2e:9c:0a:
33:28:f7:ff:65:92:a9:2d:05:7c:b1:c8:d0:0e:2f:b5:ac:f6:
93:ec:0b:4e:7c:29:45:fd:03:71:2c:6a:8a:4c:88:3a:2e:87:
9e:04:bb:71:a7:1d:e2:1d:5a:ff:cc:c6:d8:20:40:be:48:e4:
e8:1d:04:a4:59:a8:37:02:6a:f0:8d:d5:c4:5d:51:b2:b4:42:
bb:ce:25:a0:40:44:e4:61:ea:b0:68:9b:ee:f9:b4:0f:7c:71:
b8:84:9c:0d:43:87:fc:73:12:2b:f8:8c:a0:93:47:ac:ac:b0:
95:58:e0:77:4e:d9:cd:08:af:b0:e9:70:09:36:28:c8:0f:58:
f0:1d:eb:5b:84:0b:a9:28:fe:d2:52:de:38:c6:f8:6b:62:dd:
de:b1:37:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:38:17 2026 by rpki-client