Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xWSrLdgAWvf4P7VQDQIhC9oQQYs.roa
File: xWSrLdgAWvf4P7VQDQIhC9oQQYs.roa (raw, json)
Hash identifier: WKW70RN+UrZqRqKHy9Zr4LmYPvorFbCdghm+pp/1SVg=
Subject key identifier: C5:64:AB:2D:D8:00:5A:F7:F8:3F:B5:50:0D:02:21:0B:DA:10:41:8B
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FA9833370785FBCEECE7BAD7A6EDABCA6
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xWSrLdgAWvf4P7VQDQIhC9oQQYs.roa
Signing time: Tue 28 Jul 2026 16:16:15 +0000
ROA not before: Tue 28 Jul 2026 16:16:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 2.26.165.0/24 maxlen: 24
2.26.167.0/24 maxlen: 24
2.26.170.0/24 maxlen: 24
2.26.175.0/24 maxlen: 24
2.26.189.0/24 maxlen: 24
2.26.191.0/24 maxlen: 24
2.26.208.0/21 maxlen: 24
2.27.82.0/24 maxlen: 24
2.27.119.0/24 maxlen: 24
2.27.140.0/23 maxlen: 24
2.27.142.0/23 maxlen: 24
2.27.162.0/24 maxlen: 24
2.27.172.0/24 maxlen: 24
2.27.196.0/22 maxlen: 24
2.27.200.0/21 maxlen: 24
2.27.224.0/21 maxlen: 24
2.27.232.0/24 maxlen: 24
2.27.241.0/24 maxlen: 24
2.27.243.0/24 maxlen: 24
2.27.249.0/24 maxlen: 24
2.27.255.0/24 maxlen: 24
31.77.96.0/24 maxlen: 24
31.77.97.0/24 maxlen: 24
31.77.113.0/24 maxlen: 24
31.77.178.0/23 maxlen: 24
31.77.209.0/24 maxlen: 24
31.77.211.0/24 maxlen: 24
31.77.219.0/24 maxlen: 24
31.77.220.0/24 maxlen: 24
31.77.225.0/24 maxlen: 24
31.77.239.0/24 maxlen: 24
31.77.242.0/24 maxlen: 24
31.77.243.0/24 maxlen: 24
31.77.251.0/24 maxlen: 24
31.77.253.0/24 maxlen: 24
144.31.39.0/24 maxlen: 24
144.31.41.0/24 maxlen: 24
144.31.145.0/24 maxlen: 24
144.31.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:83:33:70:78:5f:bc:ee:ce:7b:ad:7a:6e:da:bc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 28 16:16:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c564ab2dd8005af7f83fb5500d02210bda10418b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b9:07:99:87:7b:bb:2c:44:49:ee:1f:10:bd:
71:bd:f4:ba:ef:21:29:6a:56:67:f2:31:ae:89:60:
a0:58:15:8a:cc:23:75:a8:94:5e:8b:11:f3:5d:98:
7e:af:34:c3:b7:f7:fe:96:cf:79:fb:26:98:8f:79:
22:33:f7:e6:a5:db:e4:c2:35:2a:fb:9c:f8:7a:21:
7f:0f:f8:f0:f0:28:d3:0f:c2:cd:e0:36:7a:36:b3:
8d:ec:99:86:6d:be:93:4a:09:9f:17:5c:3d:09:be:
22:11:1f:1c:2f:78:fd:91:2a:3c:90:95:df:ff:57:
0b:41:13:2d:fe:19:fd:da:35:2a:01:a8:02:0b:83:
ab:9a:c1:b0:02:42:31:ad:23:19:ab:91:bd:10:92:
84:f7:23:ad:8f:9e:b0:a7:1d:ad:3d:d4:20:1a:2f:
d8:aa:81:07:bb:62:f3:30:7e:3f:cc:5d:fd:61:e0:
d2:a8:1b:a7:0d:db:dc:73:3e:59:fc:99:a2:43:af:
9e:20:7d:c3:b6:ed:1b:24:66:d3:a8:f8:e6:8a:3a:
cc:ec:64:99:8d:3b:9a:7a:f7:ff:05:1f:bb:d8:07:
21:5b:f7:8a:2e:f6:e4:0a:74:20:d6:54:88:66:3d:
f6:df:6a:2e:bf:76:5d:f4:6b:35:cf:a7:d2:42:0b:
80:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:64:AB:2D:D8:00:5A:F7:F8:3F:B5:50:0D:02:21:0B:DA:10:41:8B
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xWSrLdgAWvf4P7VQDQIhC9oQQYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.165.0/24
2.26.167.0/24
2.26.170.0/24
2.26.175.0/24
2.26.189.0/24
2.26.191.0/24
2.26.208.0/21
2.27.82.0/24
2.27.119.0/24
2.27.140.0/22
2.27.162.0/24
2.27.172.0/24
2.27.196.0-2.27.207.255
2.27.224.0-2.27.232.255
2.27.241.0/24
2.27.243.0/24
2.27.249.0/24
2.27.255.0/24
31.77.96.0/23
31.77.113.0/24
31.77.178.0/23
31.77.209.0/24
31.77.211.0/24
31.77.219.0-31.77.220.255
31.77.225.0/24
31.77.239.0/24
31.77.242.0/23
31.77.251.0/24
31.77.253.0/24
144.31.39.0/24
144.31.41.0/24
144.31.145.0/24
144.31.150.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:95:e6:e1:b3:b7:64:e8:30:89:08:c0:71:dd:78:77:01:1f:
8c:28:8c:07:34:0b:30:e3:c8:19:05:b8:0c:8b:a1:cd:f5:70:
0b:42:d3:a5:ef:e0:e0:7a:66:65:7c:37:bc:92:9c:e0:fa:5b:
fd:6c:99:d6:fd:61:1e:32:75:b2:bd:3c:8c:a6:b3:64:89:39:
1d:cc:5c:a7:fa:e5:1d:19:57:87:6f:bc:7f:d3:90:26:37:bb:
fa:42:3c:e1:ba:b5:10:c0:29:e0:08:d6:89:34:ac:03:7b:11:
43:74:bd:a7:7b:78:f0:e9:2c:0a:f3:8a:13:0e:5c:3b:37:11:
d9:f4:c5:0e:4b:51:9c:3f:87:ec:63:b9:91:7a:50:06:3c:4e:
a6:69:77:d1:fc:10:21:26:de:2e:76:ed:d8:a5:c7:37:39:69:
7e:f6:f5:be:a2:c2:52:10:42:b9:dc:9f:d7:58:6b:6a:69:27:
b6:b7:29:64:40:01:ad:e1:65:33:42:4e:df:ba:cd:52:52:ca:
ab:57:d8:e5:ad:b3:d4:11:87:f4:a5:63:d8:b2:e9:45:88:6c:
79:32:6e:12:15:d2:ad:db:42:ef:2d:b6:8e:b4:7e:d9:97:20:
ca:de:35:a0:60:c7:ce:3c:17:37:8e:19:50:1e:a4:5a:b2:b6:
3d:d8:69:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:36:57 2026 by rpki-client