Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/NU5q_6WelheNUFqN4H1k2JMhstc.roa
File: NU5q_6WelheNUFqN4H1k2JMhstc.roa (raw, json)
Hash identifier: zqqpHy63YY4CbTVKLTmhsymO3DLn9YgV6CHowFlUuxo=
Subject key identifier: 35:4E:6A:FF:A5:9E:96:17:8D:50:5A:8D:E0:7D:64:D8:93:21:B2:D7
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E137AC17BCEF369F5D0EF24A179E88E96
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/NU5q_6WelheNUFqN4H1k2JMhstc.roa
Signing time: Sun 10 May 2026 20:01:12 +0000
ROA not before: Sun 10 May 2026 20:01:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199186
IP address blocks: 31.77.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:13:7a:c1:7b:ce:f3:69:f5:d0:ef:24:a1:79:e8:8e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 10 20:01:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=354e6affa59e96178d505a8de07d64d89321b2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:43:61:2f:b5:43:0d:58:15:37:ca:17:eb:4e:
92:3c:ad:7c:a0:18:f3:0b:d3:e2:c1:42:e6:72:32:
da:72:95:fb:53:f7:31:fd:ac:57:45:0d:cf:4d:91:
b8:57:77:d3:62:d1:3f:70:3b:e0:7b:52:a0:0f:dd:
83:c9:cd:1d:4d:fb:52:ad:f4:e2:6b:b2:44:f2:31:
4c:3f:19:62:af:5e:6d:93:99:c4:a4:0a:49:dd:00:
fd:b8:48:b9:a6:4b:32:4b:e6:2c:92:04:77:db:c6:
cb:17:82:76:26:a8:78:9e:57:61:be:c6:59:6f:b4:
d6:18:ef:db:ba:dd:d5:a4:96:a6:48:3c:9a:d6:88:
23:87:31:9c:4f:5b:74:f7:ed:33:01:48:be:94:73:
f3:ba:b9:d6:63:3a:b2:03:f4:ff:f8:42:49:1c:d6:
45:9f:93:6b:9e:2e:da:31:e6:45:40:3e:4d:47:fa:
80:5d:c1:39:e8:17:30:68:01:25:59:9e:be:bd:32:
75:fc:1b:77:98:51:70:ad:dc:99:44:25:2f:27:2c:
16:d7:3a:15:2a:8e:c2:03:c8:f7:59:38:f8:00:28:
e6:b1:14:97:df:af:9d:ee:71:09:85:4a:35:98:f7:
83:84:9a:21:29:c0:fa:f3:d5:c0:a8:cf:a0:b9:e4:
24:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4E:6A:FF:A5:9E:96:17:8D:50:5A:8D:E0:7D:64:D8:93:21:B2:D7
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/NU5q_6WelheNUFqN4H1k2JMhstc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.223.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:f1:80:da:40:ed:7b:30:5b:3a:41:6c:23:ad:76:c8:6e:81:
ca:a4:b3:44:ac:b4:7c:aa:96:2e:4b:f4:29:0b:0a:c2:15:2f:
5f:f9:e7:d5:18:e1:f5:7e:0e:db:6b:da:46:c8:94:09:d3:b6:
3d:e5:68:05:29:39:50:2c:68:1e:b5:49:54:db:18:26:d1:27:
6b:c8:73:45:27:15:37:ea:94:f7:31:ae:8e:00:42:9e:f5:be:
51:61:9e:57:5f:5b:65:1d:a2:64:b7:d7:2e:e4:1b:ed:b1:4e:
ed:dd:8d:e9:1f:39:d8:08:a5:f8:99:e7:38:09:37:03:12:41:
da:98:11:12:be:a0:8b:55:2d:da:8b:7a:7c:1e:25:3f:2d:35:
46:cc:5e:47:8d:9b:3e:75:9a:1c:ae:69:d8:bd:6b:25:27:de:
1f:89:63:07:12:7b:d6:63:02:bd:49:8a:db:63:26:7d:74:f3:
10:b0:c5:12:1b:e9:e3:e2:93:a6:d2:ba:e6:7c:73:62:86:08:
9d:30:1d:bb:c8:ca:65:44:4c:ea:ee:12:87:ba:f2:d5:22:7b:
82:bc:ad:b4:18:2c:0d:99:3c:6f:23:9d:d1:07:1a:2c:26:e8:
29:0a:cc:dc:43:15:53:4f:d5:e7:35:00:8e:43:5f:03:1a:fd:
06:bc:9f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:41:38 2026 by rpki-client