Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/IxchQ0oXJvy41hszUizPmoBctHw.roa
File: IxchQ0oXJvy41hszUizPmoBctHw.roa (raw, json)
Hash identifier: MLFbK0UZCvAXdvq+t8y3nuL3H9usn+GwoFfyFbbLPIU=
Subject key identifier: 23:17:21:43:4A:17:26:FC:B8:D6:1B:33:52:2C:CF:9A:80:5C:B4:7C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E0366048D3890FD143E7050EDCDE33362
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/IxchQ0oXJvy41hszUizPmoBctHw.roa
Signing time: Thu 07 May 2026 17:04:37 +0000
ROA not before: Thu 07 May 2026 17:04:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 31.76.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:03:66:04:8d:38:90:fd:14:3e:70:50:ed:cd:e3:33:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 7 17:04:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=231721434a1726fcb8d61b33522ccf9a805cb47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:d3:d6:e6:66:8e:35:48:30:7b:f1:0d:e5:
38:71:83:f7:b7:90:7b:89:70:51:82:cf:cc:bc:8b:
3f:db:4d:86:a1:29:af:5e:fd:cc:3a:76:58:d5:a2:
28:2d:52:78:08:8a:45:6a:91:12:be:02:66:15:9f:
bd:34:2c:10:da:12:18:7d:2e:0c:45:ef:3c:56:35:
96:90:58:29:6d:f0:00:ee:81:21:40:5a:04:c0:45:
bd:09:04:42:d7:8b:a3:f8:06:b3:94:6c:80:d2:4b:
88:ff:fa:5b:a4:e3:c7:9f:89:61:a8:01:c4:bc:da:
fd:97:05:9d:6b:d0:15:cf:93:b6:6f:ac:6e:0a:60:
e4:0a:9a:9b:6a:ed:81:68:13:77:fb:a9:7b:5b:5f:
be:d9:5a:77:f0:99:46:42:39:5d:c5:f4:46:70:81:
6b:c4:09:56:a6:91:09:ce:f6:79:10:01:8b:33:5d:
0a:e7:34:a8:5b:ee:85:9d:e9:71:8d:b4:b5:ab:30:
9f:65:07:b8:5e:6c:59:62:ab:10:a2:a7:69:57:8b:
e4:f3:d4:79:6f:0a:f1:ea:a2:fb:0a:93:86:c3:d9:
88:f3:53:f6:c8:52:14:50:74:69:44:d2:3c:42:91:
61:2d:61:de:6f:d0:2c:f4:ab:83:6d:0c:f3:66:f2:
38:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:17:21:43:4A:17:26:FC:B8:D6:1B:33:52:2C:CF:9A:80:5C:B4:7C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/IxchQ0oXJvy41hszUizPmoBctHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.76.124.0/24
Signature Algorithm: sha256WithRSAEncryption
94:bf:e6:25:b6:cf:19:d9:6e:42:59:d2:3c:de:16:b1:ce:4b:
44:08:43:ca:46:0b:2b:72:7a:04:4b:4e:3a:1b:89:6a:c7:f6:
c6:a0:88:b8:cf:82:4c:c9:63:50:b5:d5:fe:48:c0:49:a0:b8:
22:5d:4a:87:d1:56:a1:2f:f6:f1:ad:7b:3e:20:d4:cf:63:ee:
58:f0:c1:0e:69:c6:81:20:07:da:04:bc:1a:e0:2f:15:93:9a:
25:38:76:2a:7a:59:85:37:11:ce:5b:d0:05:21:39:f8:f8:d0:
89:00:63:39:f8:4d:68:37:65:2b:48:22:07:9f:fe:d0:4b:40:
1b:b7:38:71:10:fe:5c:44:7d:23:29:5b:dd:fa:c6:df:a3:4f:
05:bd:dd:60:35:42:ac:36:5e:01:b5:be:93:94:14:15:fa:c7:
19:f5:c0:23:98:17:38:43:a7:51:6c:b0:0c:7c:79:82:1d:8e:
a3:e0:96:89:ad:e9:13:f1:9e:14:41:f5:5a:82:59:d9:ec:d7:
5e:b5:39:bb:8d:a2:fb:0a:e0:70:c8:5a:f0:4c:95:d5:1b:9e:
93:9e:88:8c:cd:58:8a:b2:f0:cf:71:a9:b9:46:24:af:92:8c:
3e:64:72:80:11:0e:ba:a9:5d:c1:37:76:0a:a2:1e:92:41:48:
41:b7:01:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:14:24 2026 by rpki-client