Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/d_Vuwe2HSflg0WGyBK8xAZ2dgic.roa
File: d_Vuwe2HSflg0WGyBK8xAZ2dgic.roa (raw, json)
Hash identifier: d/QGVaMalIVPZj/SduDLcgM9mfh4n/vTOr3+nh+zDCg=
Subject key identifier: 77:F5:6E:C1:ED:87:49:F9:60:D1:61:B2:04:AF:31:01:9D:9D:82:27
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D971C828EABE2606280D79A68A81F6570
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/d_Vuwe2HSflg0WGyBK8xAZ2dgic.roa
Signing time: Thu 16 Apr 2026 16:25:21 +0000
ROA not before: Thu 16 Apr 2026 16:25:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199785
IP address blocks: 2.26.64.0/22 maxlen: 24
2.26.72.0/23 maxlen: 24
2.27.1.0/24 maxlen: 24
2.27.48.0/23 maxlen: 24
2.27.50.0/23 maxlen: 24
37.46.16.0/24 maxlen: 24
37.46.17.0/24 maxlen: 24
37.46.18.0/24 maxlen: 24
37.46.19.0/24 maxlen: 24
64.188.72.0/24 maxlen: 24
64.188.99.0/24 maxlen: 24
77.239.106.0/24 maxlen: 24
144.31.80.0/23 maxlen: 24
144.31.132.0/23 maxlen: 24
144.31.184.0/23 maxlen: 24
144.31.194.0/23 maxlen: 24
150.241.76.0/23 maxlen: 24
150.241.113.0/24 maxlen: 24
150.241.114.0/24 maxlen: 24
150.241.115.0/24 maxlen: 24
150.241.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:1c:82:8e:ab:e2:60:62:80:d7:9a:68:a8:1f:65:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 16 16:25:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77f56ec1ed8749f960d161b204af31019d9d8227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:95:f1:6c:e9:f1:7d:47:84:60:db:d9:c9:
19:02:58:c0:7d:70:f8:99:4e:5b:86:17:25:7a:5e:
56:3e:2c:ef:e9:a7:78:a5:d3:7f:87:f6:0c:05:c2:
ea:9e:36:54:18:51:c3:85:5b:67:5e:51:9c:42:b5:
fd:b6:88:bb:27:cc:6a:04:bc:e0:ff:eb:3e:f7:31:
74:1f:e4:1e:fa:7c:73:c7:41:aa:59:19:9d:1d:3a:
d4:12:78:29:1e:0a:c3:4e:85:e4:d8:23:05:1c:83:
7c:d2:06:13:05:75:b5:d1:07:d5:5a:40:56:14:8f:
98:91:62:f0:74:1f:c5:6a:c2:d9:78:6c:66:d9:96:
d6:94:0a:9b:c0:70:c9:ea:ce:8f:c1:07:09:d0:6c:
3c:39:28:51:8c:8e:5e:ae:85:0c:01:d4:37:6c:68:
37:e3:5d:8b:9c:be:31:ff:fb:7a:14:ce:8d:18:8f:
03:77:73:18:f8:94:77:67:7a:94:60:e1:70:6a:44:
d5:95:94:7e:aa:ef:6a:de:3e:15:1a:61:42:f2:61:
52:c8:3c:26:c9:da:fe:72:59:9c:d9:37:76:25:63:
8e:36:23:16:78:b2:ec:de:ad:e8:74:a5:f1:06:d0:
07:1a:ba:88:f0:ba:7a:8f:f4:b0:b9:dc:35:c6:97:
97:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F5:6E:C1:ED:87:49:F9:60:D1:61:B2:04:AF:31:01:9D:9D:82:27
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/d_Vuwe2HSflg0WGyBK8xAZ2dgic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.64.0/22
2.26.72.0/23
2.27.1.0/24
2.27.48.0/22
37.46.16.0/22
64.188.72.0/24
64.188.99.0/24
77.239.106.0/24
144.31.80.0/23
144.31.132.0/23
144.31.184.0/23
144.31.194.0/23
150.241.76.0/23
150.241.113.0-150.241.116.255
Signature Algorithm: sha256WithRSAEncryption
9f:dd:65:28:1c:30:12:0e:5b:c3:7c:41:ea:f3:8a:61:97:01:
8d:c4:e8:83:7f:8a:34:44:3e:33:f1:8d:5d:f1:cd:9e:5a:1e:
6c:ca:e5:b1:fa:99:f3:6a:c9:21:b3:f2:0a:98:64:a2:51:18:
76:10:03:09:1d:0d:28:a5:44:87:e0:4e:8b:1c:9e:52:9a:b2:
c1:20:00:69:57:31:62:4e:24:99:77:53:61:f0:9e:32:da:47:
06:de:78:a7:39:76:bd:44:6e:64:0b:2b:95:1e:7b:54:b3:7d:
05:d9:33:f0:45:09:7f:1f:6b:1d:b6:d9:bd:7e:41:ff:24:7c:
6e:28:ed:90:95:75:06:c5:9e:c6:21:77:29:a7:3c:e6:67:90:
a8:b7:13:3e:c1:50:21:10:70:e4:95:64:23:0f:a8:1d:b4:03:
7e:33:72:15:c3:8a:9d:db:e3:09:9b:90:eb:b9:75:04:81:e6:
4f:b4:3b:aa:3d:ae:8a:15:67:c0:bc:64:37:5c:09:93:5e:a3:
c2:19:bf:c6:1b:c9:f3:c6:7d:77:d8:f3:bd:ff:95:13:2c:9f:
10:ec:2d:65:a6:2c:42:59:62:a3:eb:85:46:1a:52:83:16:b9:
2e:42:58:c4:99:d7:bc:26:e5:1d:1a:05:a6:22:d7:98:96:fc:
99:e3:04:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:01:58 2026 by rpki-client