Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/DtDAFiHXocpctB4Y0l-xPNHCfUM.roa
File: DtDAFiHXocpctB4Y0l-xPNHCfUM.roa (raw, json)
Hash identifier: 6pJyjb6aRNFVb11KeWnMsioStPBIiiwHolse7iZulF0=
Subject key identifier: 0E:D0:C0:16:21:D7:A1:CA:5C:B4:1E:18:D2:5F:B1:3C:D1:C2:7D:43
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DF93C037DA0B82C19A244F76EE923C1E7
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/DtDAFiHXocpctB4Y0l-xPNHCfUM.roa
Signing time: Tue 05 May 2026 17:42:32 +0000
ROA not before: Tue 05 May 2026 17:42:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197974
IP address blocks: 31.76.249.0/24 maxlen: 24
31.76.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f9:3c:03:7d:a0:b8:2c:19:a2:44:f7:6e:e9:23:c1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 5 17:42:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ed0c01621d7a1ca5cb41e18d25fb13cd1c27d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f6:e3:95:97:21:86:2b:80:7f:4b:92:c4:66:
f2:57:39:b1:ca:40:35:3a:55:61:db:42:d2:8b:1e:
86:3b:95:56:17:78:be:dc:a4:43:fa:dd:c3:64:49:
b2:7d:d0:a4:dd:5e:ba:c9:cc:46:0a:64:f9:82:45:
86:d6:2c:94:68:02:30:76:da:73:1a:fc:cb:b8:b7:
df:dd:a4:42:fd:cd:b9:25:a3:d8:ec:d0:8b:7f:74:
8e:bf:f1:29:92:a3:26:1d:30:e1:7f:39:6d:20:6b:
0d:e5:7b:72:aa:2c:17:05:f1:56:d7:f0:9e:8e:b5:
75:59:fe:72:92:79:d2:72:b1:9b:fc:36:8b:bd:da:
e3:62:72:c1:19:12:13:e3:88:f0:a4:c5:bd:3b:81:
6f:bf:e5:7f:16:f9:4d:ca:d7:f1:4c:f7:34:aa:a9:
6a:8d:e5:5d:a6:76:d5:21:ce:0c:1b:24:d5:af:de:
b5:2b:42:24:ef:37:4e:ac:f6:0a:97:12:3f:e6:62:
d7:98:ab:38:6e:a7:67:e3:e1:56:ce:16:f1:0e:e9:
1e:4f:57:1d:bb:90:12:cf:0e:d6:7c:0c:98:9d:40:
9b:13:0e:c8:b9:cf:95:87:68:84:89:6a:8b:1f:46:
cd:a5:29:73:72:c4:dc:64:8d:08:17:36:1e:fe:09:
75:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D0:C0:16:21:D7:A1:CA:5C:B4:1E:18:D2:5F:B1:3C:D1:C2:7D:43
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/DtDAFiHXocpctB4Y0l-xPNHCfUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.76.249.0-31.76.250.255
Signature Algorithm: sha256WithRSAEncryption
7b:ee:39:5e:d0:6f:a0:04:5b:3a:08:c7:a6:79:41:63:b9:9d:
81:8d:f8:0f:56:0a:6f:8e:c4:eb:c7:65:1d:b9:81:8b:7d:5a:
e7:6b:09:9f:46:c1:36:4a:4e:49:2e:be:7e:f9:62:48:c6:9e:
5f:9b:f1:76:f3:2a:7d:d3:84:c0:72:3b:1f:ac:13:f1:32:2b:
a4:ec:cb:76:de:4d:ab:36:ed:0c:01:08:b7:92:d3:5f:e9:6c:
ba:2a:d2:f2:84:d8:12:5f:60:cf:6a:fc:aa:8c:2a:bb:f6:a1:
37:60:e8:0b:86:c5:97:74:59:4d:7a:cb:01:d2:1f:2d:35:ee:
26:4d:2e:e1:6d:57:be:47:73:1c:51:86:8e:b7:6b:c2:6a:13:
a1:3b:45:0d:86:a1:df:d4:8c:4f:98:f2:f2:72:e7:06:10:58:
48:e5:aa:d9:fd:7d:0d:6b:b0:7d:88:90:66:5c:d9:85:d8:e8:
8f:d7:d7:9c:9f:ea:b4:33:db:a7:8e:24:13:ca:2e:8c:4d:4b:
b1:42:3f:07:d1:05:53:16:32:cb:f6:1e:e8:6a:ff:f6:95:11:
d6:1b:81:1b:4f:44:77:e4:c9:6e:af:c0:a0:0c:0b:f6:d7:1c:
5a:80:5c:de:e1:c1:4e:b5:40:9e:49:fe:15:56:73:39:ea:ef:
87:65:a7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:54 2026 by rpki-client