Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/PEuobJwWU4p-NsiUdeVBz67V71U.roa
File: PEuobJwWU4p-NsiUdeVBz67V71U.roa (raw, json)
Hash identifier: C1/6HyoizyAywvlA8QXVvNmkfGE7WzjKQGL0x0A53Hk=
Subject key identifier: 3C:4B:A8:6C:9C:16:53:8A:7E:36:C8:94:75:E5:41:CF:AE:D5:EF:55
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E1D19E850F3F11783F5D3A21EF1D1D274
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/PEuobJwWU4p-NsiUdeVBz67V71U.roa
Signing time: Tue 12 May 2026 16:51:37 +0000
ROA not before: Tue 12 May 2026 16:51:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213529
IP address blocks: 31.76.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:19:e8:50:f3:f1:17:83:f5:d3:a2:1e:f1:d1:d2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 12 16:51:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c4ba86c9c16538a7e36c89475e541cfaed5ef55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:58:e8:0f:f4:0d:df:17:f7:96:07:c1:ea:5f:
60:c6:d3:fa:ce:67:0d:ac:3a:5d:3d:82:5f:5a:27:
62:58:11:fa:cc:67:24:f5:c7:1b:96:21:5e:ce:67:
72:a1:34:27:e4:4d:e1:4d:29:a7:f7:5d:52:78:4f:
fc:b1:38:65:fe:a2:07:1d:9b:03:1b:57:25:96:9e:
1c:d7:ed:59:c6:19:d5:27:4b:00:85:bc:1b:fe:3d:
71:fa:df:6f:ef:03:00:03:10:48:15:88:96:a1:5f:
4c:d2:65:df:48:62:a3:ef:ee:5f:c5:7e:b6:56:cc:
e0:63:4e:aa:9a:f7:72:80:07:53:9e:eb:00:f7:1b:
7d:6f:07:6c:98:1f:20:5c:6e:f7:87:50:ba:51:f2:
e6:dc:f1:a2:d7:c1:16:b1:a8:b4:a1:6a:6c:a8:6f:
e7:c4:30:dc:7b:b0:e5:ae:e4:69:67:1a:21:02:94:
a0:fe:61:a1:1b:65:b2:d4:99:ba:59:87:bc:00:be:
d4:68:6e:49:87:ad:9e:dd:3b:33:23:38:e4:08:38:
45:2f:ce:01:ec:80:02:37:72:58:9c:b3:60:dd:85:
c7:98:b0:f7:2e:c8:33:62:c9:3c:b6:ff:e0:a4:47:
73:c6:1b:8f:82:5a:5e:58:c3:40:7e:da:74:28:09:
df:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4B:A8:6C:9C:16:53:8A:7E:36:C8:94:75:E5:41:CF:AE:D5:EF:55
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/PEuobJwWU4p-NsiUdeVBz67V71U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.76.126.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:cc:16:b8:a4:4f:05:b7:e8:c2:e6:9a:98:94:7d:67:fa:f5:
c5:fc:14:f5:01:2d:f6:da:c6:ba:f6:1e:98:97:cb:53:ee:1c:
f6:39:0e:95:cf:42:13:d5:b3:9b:43:fd:c8:df:82:98:22:ad:
51:cc:df:51:06:6f:83:16:b9:ef:ec:a7:fe:11:43:6d:7f:48:
00:85:b9:db:d9:90:5c:19:f9:d9:43:69:af:1c:f6:d8:42:3b:
9d:c7:e9:d1:ce:4c:67:b9:23:99:75:17:e5:66:b1:27:b7:9d:
0b:d6:a1:2c:dd:bc:e9:dc:8e:39:35:5a:bc:6f:91:9e:c8:32:
38:20:f7:b0:e7:a1:9f:95:08:51:c2:9c:8b:77:08:6d:4f:fb:
d9:7c:c8:40:a4:ef:ac:37:41:9e:e2:67:a9:9f:5e:66:66:81:
d9:57:ff:d2:14:a1:72:49:b3:07:86:f1:17:c4:92:56:a6:b2:
c1:91:b3:78:22:d0:c9:15:62:52:e6:92:e0:5f:45:82:45:b9:
bc:61:53:2a:6c:7f:fe:bf:6a:a4:7b:8e:24:13:6b:c0:08:eb:
83:76:d0:28:96:9e:4f:d5:a0:4d:70:c0:6b:b4:fe:1f:3e:53:
94:a8:79:06:16:05:ad:40:e9:1c:26:a0:c2:1f:e3:aa:8e:08:
e3:13:2a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:17 2026 by rpki-client