Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/DrExFcQ7ZRYUEDBDlqyKNDXPUt4.roa
File: DrExFcQ7ZRYUEDBDlqyKNDXPUt4.roa (raw, json)
Hash identifier: uUpV3ArMPKXkpEVQZvjc69JyXl1oOAdloQlLigG2haU=
Subject key identifier: 0E:B1:31:15:C4:3B:65:16:14:10:30:43:96:AC:8A:34:35:CF:52:DE
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F14B819C4E8DE79EE1FFFD3A935C712CB
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/DrExFcQ7ZRYUEDBDlqyKNDXPUt4.roa
Signing time: Mon 29 Jun 2026 18:50:37 +0000
ROA not before: Mon 29 Jun 2026 18:50:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402343
IP address blocks: 31.77.96.0/24 maxlen: 24
31.77.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:b8:19:c4:e8:de:79:ee:1f:ff:d3:a9:35:c7:12:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 29 18:50:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0eb13115c43b65161410304396ac8a3435cf52de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:40:c3:5f:03:35:31:1f:bf:7e:17:1e:10:6b:
49:c6:86:74:32:68:a8:46:fb:56:ea:9c:de:93:e4:
c8:15:2d:ff:e2:26:02:bf:2c:9d:6f:8c:06:e6:c6:
a6:76:33:2a:b7:59:ff:cc:ba:17:ba:54:29:e7:e7:
5b:38:b8:22:24:65:55:34:e2:b3:dd:65:5b:f9:b6:
d4:ae:f3:f0:d7:e6:38:c2:ec:c0:13:d3:93:b1:a7:
36:23:ec:7d:cb:98:ea:4a:f2:59:c7:e0:69:bf:ba:
fa:7c:21:93:37:4e:29:2a:43:6a:82:85:3b:c7:ea:
f6:af:6c:98:6e:9a:dc:8f:1f:d2:3c:e3:21:f4:f6:
17:05:a1:3c:41:80:a2:35:cb:7e:7c:dc:e7:8f:e9:
88:3e:46:92:73:00:7f:2f:fe:df:53:97:22:90:dc:
76:8a:56:90:3e:9e:27:3e:94:c8:48:15:31:75:96:
b5:64:9b:0e:7c:bd:d3:c2:7e:1a:a2:17:a7:9b:07:
13:8f:1b:00:65:ba:56:72:04:62:e8:e6:df:a8:24:
4e:e6:d7:c8:18:e9:df:fb:2d:cd:16:c3:92:cd:81:
fd:2f:bf:98:56:6f:a1:56:1f:09:f8:7b:c7:bd:76:
70:0a:05:e6:a9:6f:19:47:5a:ec:cf:fe:fa:0a:f7:
ea:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B1:31:15:C4:3B:65:16:14:10:30:43:96:AC:8A:34:35:CF:52:DE
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/DrExFcQ7ZRYUEDBDlqyKNDXPUt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.96.0/24
31.77.124.0/24
Signature Algorithm: sha256WithRSAEncryption
21:c2:7c:8b:64:29:cd:56:8a:5d:6d:a1:3f:b8:75:18:e3:80:
03:b1:e5:61:b5:29:e9:b7:b9:f3:02:c7:80:ac:1e:64:9f:e6:
7e:48:8d:ad:a5:47:02:db:76:f3:a0:6f:72:a4:32:8e:39:3d:
6b:7d:a9:1e:a9:1c:2a:95:cb:d1:aa:0e:83:01:ef:cc:ce:a7:
83:56:60:27:ac:7f:bf:c8:8b:df:5d:6f:10:89:84:9f:7d:79:
8b:32:60:d7:b5:96:f6:a6:df:60:4d:14:9f:76:5c:70:24:8d:
13:65:66:71:ae:26:16:66:e2:48:31:d0:d1:26:45:04:3c:d7:
46:ff:b3:5a:22:86:ab:72:a6:5a:cd:08:2a:e3:d5:bf:99:8f:
46:5a:d8:38:87:de:d4:e8:e0:b0:f3:23:c0:e4:6f:20:e7:cc:
9a:6b:f9:9a:0d:da:17:b1:71:b7:a1:a8:36:a2:96:7a:56:e8:
7a:c1:c2:05:93:e4:02:c3:4f:00:1d:b9:4c:a3:53:b6:4c:78:
da:e8:15:62:87:e3:0c:c8:46:9f:95:9c:5f:16:54:3c:b0:13:
75:28:da:b2:c7:d0:f6:4d:4f:cf:10:5a:93:43:67:7f:06:96:
4a:53:37:af:83:67:52:6f:14:6f:e8:af:02:6e:dd:5a:f6:a7:
54:39:25:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:55:26 2026 by rpki-client