Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/DiKR1C_Nt-MKqRTAZuajlCPhem0.roa
File: DiKR1C_Nt-MKqRTAZuajlCPhem0.roa (raw, json)
Hash identifier: iQGXaZwTjRJEtY/QOIvR14CrX86AAuyqN2xO9gjJDHY=
Subject key identifier: 0E:22:91:D4:2F:CD:B7:E3:0A:A9:14:C0:66:E6:A3:94:23:E1:7A:6D
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F1FFB34CEC048C47C125ED0602FF0DE17
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/DiKR1C_Nt-MKqRTAZuajlCPhem0.roa
Signing time: Wed 01 Jul 2026 23:19:44 +0000
ROA not before: Wed 01 Jul 2026 23:19:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215133
IP address blocks: 31.77.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1f:fb:34:ce:c0:48:c4:7c:12:5e:d0:60:2f:f0:de:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 1 23:19:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e2291d42fcdb7e30aa914c066e6a39423e17a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a8:c0:c8:8c:a8:4b:1a:94:b9:18:bd:ba:91:
e7:3a:a5:75:17:6e:10:49:9a:cd:a2:6d:79:a8:c1:
80:b4:9b:d2:48:77:87:cd:5e:f8:ca:c6:08:d8:df:
9f:55:78:0c:ce:fa:29:81:fe:47:a3:ed:6c:78:7b:
dc:f4:51:d0:06:89:d4:38:14:d4:6b:24:8c:b0:5f:
18:b5:d7:8e:3c:ee:49:14:a6:56:d1:53:de:55:21:
41:d5:0d:96:f7:6d:12:cc:4e:7a:0b:ee:58:38:55:
4b:a0:31:a7:4b:db:e3:e7:5e:8f:ba:23:70:20:c6:
ab:b3:23:4d:58:33:f0:94:d2:dd:ea:4c:11:fd:b2:
99:8b:23:c0:a3:c1:a2:5d:c1:4f:a5:f1:63:f1:c5:
90:f2:79:ce:9b:96:fe:3b:1e:fa:80:f0:66:ec:60:
67:af:b8:f8:de:d8:7c:65:35:83:17:3d:c2:66:3f:
49:17:b2:f9:b6:65:82:52:5d:0b:71:7b:31:b4:e4:
36:a8:21:ea:25:01:36:74:8b:d2:37:41:7c:f4:0d:
57:98:7c:5e:0d:8d:cf:2c:e1:2d:1c:36:1d:91:dd:
fc:bb:a7:78:2c:3f:ed:73:64:6e:04:4c:3a:04:2e:
c3:1a:44:b4:19:ca:60:4f:cf:a9:a1:32:e1:8d:a9:
7e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:22:91:D4:2F:CD:B7:E3:0A:A9:14:C0:66:E6:A3:94:23:E1:7A:6D
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/DiKR1C_Nt-MKqRTAZuajlCPhem0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.250.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:01:d5:2a:5a:80:47:43:53:c1:89:a8:b9:68:c2:23:d0:e7:
2e:b9:d2:ab:4b:8b:63:69:63:8c:82:d6:a8:bb:ca:2c:89:22:
13:06:22:90:c4:c6:0b:e4:02:87:61:bf:59:f3:2a:41:57:06:
50:0d:eb:65:cc:dd:1b:70:e0:95:ba:86:54:bf:cd:60:25:f7:
97:e0:4f:9d:c0:ca:72:45:71:d0:fd:16:f5:8a:ad:d7:4b:77:
c9:f6:60:7d:3c:3a:6b:d9:49:e9:11:cd:b4:9e:6a:dc:c7:72:
52:cc:3e:b0:83:d0:ee:c0:7e:92:e9:7a:2f:58:b4:59:e5:bd:
df:ca:33:89:bb:2e:50:dc:49:a1:22:3a:2d:f2:3a:49:f7:53:
17:97:cd:76:4d:5d:ca:9a:8b:2a:c6:95:12:9b:c6:b5:e2:84:
a4:26:20:a4:52:38:38:61:4e:68:67:34:99:b8:8e:f3:85:13:
69:43:18:50:dc:60:90:29:3e:1f:5b:29:22:64:e1:fa:1f:ef:
38:6c:c9:41:0e:9e:6f:22:e6:ac:70:ea:66:38:99:b3:46:0b:
42:c1:18:98:a7:82:fc:88:09:ce:21:61:d3:24:48:d7:34:9d:
af:15:9d:c0:bb:0d:88:f1:9e:ce:f3:16:39:94:91:e0:46:c6:
0a:f0:4e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:01:53 2026 by rpki-client