Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-PWmkTSau0o6ywA9SgEJH8bQcbk.roa
File: 1-PWmkTSau0o6ywA9SgEJH8bQcbk.roa (raw, json)
Hash identifier: TvRR4wjPgN+oL3AUaGnncL1IaLajY8BNy0UkMu81qZU=
Subject key identifier: F8:F5:A6:91:34:9A:BB:4A:3A:CB:00:3D:4A:01:09:1F:C6:D0:71:B9
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DFE47FB1F1F1EA754FA54A5B29D2314E0
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-PWmkTSau0o6ywA9SgEJH8bQcbk.roa
Signing time: Wed 06 May 2026 17:13:43 +0000
ROA not before: Wed 06 May 2026 17:13:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 812
IP address blocks: 31.76.182.0/23 maxlen: 24
31.76.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fe:47:fb:1f:1f:1e:a7:54:fa:54:a5:b2:9d:23:14:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 6 17:13:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8f5a691349abb4a3acb003d4a01091fc6d071b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:78:89:52:f4:98:27:dc:37:35:5d:fc:a0:22:
05:0c:18:63:23:48:e7:af:ec:35:66:1a:86:d0:3d:
42:dc:e8:46:f8:c2:4f:50:b7:4c:8f:f7:89:e6:e3:
ba:51:0a:68:7e:d0:42:0f:33:b9:aa:b6:92:92:fe:
09:91:26:b1:d0:eb:d8:8f:51:fd:9c:30:94:2a:65:
be:2f:c5:5a:c1:0d:96:f1:70:d8:e4:91:0d:22:c5:
9f:9b:a8:17:0b:fc:f9:ce:c1:44:d7:9e:f0:8a:89:
b7:28:82:fe:3c:cb:51:17:d3:79:6c:b3:9b:72:2c:
d2:26:6c:e7:38:81:b0:d3:ac:71:73:7b:69:25:fa:
75:23:c7:79:ad:8c:52:06:c0:5e:14:07:52:2b:83:
6e:5b:0e:a2:a9:ed:0f:18:87:e2:04:68:3a:b6:e0:
31:76:02:c8:13:62:a4:1f:55:66:ba:b2:c6:bf:a1:
2f:16:9b:a9:57:f2:b2:bd:53:02:ae:26:55:79:f0:
fa:01:18:ae:1f:0f:b9:4e:36:c1:f2:48:3a:8e:59:
81:09:5f:9b:69:12:f1:4c:ac:48:b0:ba:38:9c:b4:
f5:5a:be:0b:c2:e6:96:21:f4:78:fe:ed:4e:7b:9a:
80:54:72:3b:8e:ed:6f:d3:45:fa:d4:fd:53:f9:d6:
b8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F5:A6:91:34:9A:BB:4A:3A:CB:00:3D:4A:01:09:1F:C6:D0:71:B9
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-PWmkTSau0o6ywA9SgEJH8bQcbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.76.182.0/23
31.76.186.0/23
Signature Algorithm: sha256WithRSAEncryption
92:8a:52:17:db:85:a4:58:db:a6:7a:4a:10:98:0e:de:1e:ad:
f5:5e:3c:cf:c4:4d:76:55:51:31:a5:99:96:05:5e:f4:99:f0:
36:97:84:52:67:04:d6:a7:d9:b4:c5:d6:84:3a:f8:19:15:67:
3d:ce:ff:2d:35:52:34:5b:09:76:09:bc:d9:9f:d9:64:24:d7:
71:d2:b4:32:ef:83:49:03:f4:19:e2:55:ad:a1:b1:c7:ae:b3:
19:f0:6c:bd:f9:57:fe:a6:10:7b:69:93:4a:fc:9e:0c:64:35:
d7:d5:b1:03:31:96:3d:6b:23:c3:6d:5b:e4:7d:bb:99:6f:28:
ae:46:24:3b:49:a9:92:a7:34:94:33:83:fa:e5:09:cc:32:6b:
ba:2c:3c:1e:14:29:29:7c:e8:23:43:36:3a:dc:7b:e1:63:a8:
c8:77:20:70:fe:cc:44:51:7a:dd:75:d6:ab:c0:a5:5d:21:ad:
61:a4:ca:ca:a2:3d:b1:1f:59:57:6d:64:9f:c9:4e:0e:fe:6e:
a7:6e:21:38:ae:4e:7b:71:4e:b1:3b:c7:39:19:31:81:0c:0b:
1f:80:cb:3b:b1:7c:f7:3c:4b:36:2d:60:d3:f0:d6:95:ff:bf:
29:c4:63:c3:8e:d8:1a:28:e5:5b:3b:b9:27:4a:f7:d7:17:4f:
8a:40:8e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:54:39 2026 by rpki-client