Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/PmvQtGzkBa9NzE1ur7dh4IMIUaE.roa
File: PmvQtGzkBa9NzE1ur7dh4IMIUaE.roa (raw, json)
Hash identifier: SnaQXZD1QXB2o6+cQi95BmOw5il8le2D/wQmg07VdfE=
Subject key identifier: 3E:6B:D0:B4:6C:E4:05:AF:4D:CC:4D:6E:AF:B7:61:E0:83:08:51:A1
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F43A796F02F37F16765FEBABB9EE915BE
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/PmvQtGzkBa9NzE1ur7dh4IMIUaE.roa
Signing time: Wed 08 Jul 2026 21:34:44 +0000
ROA not before: Wed 08 Jul 2026 21:34:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197462
IP address blocks: 31.76.33.0/24 maxlen: 24
31.76.35.0/24 maxlen: 24
31.76.112.0/24 maxlen: 24
31.76.116.0/24 maxlen: 24
177.1.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:43:a7:96:f0:2f:37:f1:67:65:fe:ba:bb:9e:e9:15:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 8 21:34:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e6bd0b46ce405af4dcc4d6eafb761e0830851a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:5a:08:31:2a:aa:24:5d:41:69:ed:29:c6:
9c:79:fb:3b:00:65:86:82:f6:71:23:98:0b:78:0f:
2a:01:42:3c:cd:98:a0:b6:07:cd:51:52:5a:97:7f:
17:ea:71:9f:96:ce:1c:ce:d8:6f:07:83:e3:36:68:
18:66:c1:ce:9a:25:69:d2:c8:27:dc:7a:82:d3:46:
82:6b:72:f8:22:0e:a1:f5:b9:82:ea:17:1e:81:ef:
f2:41:2d:79:c9:ea:b5:52:ae:0c:60:d1:70:95:7e:
b2:ce:7c:a0:e7:21:d6:36:92:41:3e:8b:e7:3c:c6:
3b:34:f0:9a:91:6f:bf:1f:f1:67:9a:f1:e4:80:65:
24:a6:ad:8a:d7:24:6f:79:2f:e5:51:ab:a0:66:bb:
45:20:da:ab:a8:45:05:30:73:cd:47:b6:2a:2f:6a:
77:8b:2e:99:9c:b3:df:bc:b4:00:9a:b3:9f:c6:f6:
16:2c:06:6a:27:19:f1:17:e5:74:e0:c5:43:87:64:
f0:a3:5f:56:d8:59:80:a7:47:dc:0c:d2:45:f7:a8:
82:a7:42:0c:9e:6b:20:88:64:64:36:4d:b9:bc:9b:
e1:48:0d:58:a2:e7:0f:84:ee:7a:fe:66:60:06:5c:
8a:21:0e:5e:e7:56:b5:a9:5e:09:f2:29:89:46:ef:
19:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6B:D0:B4:6C:E4:05:AF:4D:CC:4D:6E:AF:B7:61:E0:83:08:51:A1
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/PmvQtGzkBa9NzE1ur7dh4IMIUaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.76.33.0/24
31.76.35.0/24
31.76.112.0/24
31.76.116.0/24
177.1.192.0/24
Signature Algorithm: sha256WithRSAEncryption
19:6a:70:4c:6d:ed:6c:c9:3f:f2:3d:41:f4:50:70:47:06:a6:
6d:ec:84:98:71:07:4b:ec:a2:a8:c6:28:40:97:ae:60:36:95:
df:31:8a:38:29:d2:f7:ce:2f:c1:51:4d:64:fe:ce:7d:02:cb:
b1:6c:ca:9c:4e:c8:ab:7b:be:10:2e:41:86:0d:e9:b0:92:81:
4b:89:a8:70:13:e4:b2:ca:7e:b2:59:ad:f5:bf:00:8c:9d:bb:
b6:a5:fd:66:49:af:71:85:f8:51:e5:2f:a2:48:4d:22:84:77:
49:fd:90:b8:1d:1d:25:92:af:6a:11:33:8b:fb:3e:7e:92:dd:
74:69:5d:61:59:7b:ca:55:82:2e:2d:d8:03:43:e0:48:2a:3c:
f5:09:7a:a2:21:e4:d4:3e:4b:b5:10:00:42:29:73:5b:57:1d:
bb:ad:b1:e4:38:58:81:70:a5:1c:55:41:dc:fb:a1:6e:57:f7:
84:c2:a6:f6:fd:92:2b:1c:70:b5:2e:4e:5c:c6:07:c6:f6:84:
4c:3b:37:52:9e:d1:34:c4:e3:fc:55:2d:da:3e:6e:0a:a2:2d:
f2:5b:9c:e8:18:93:94:47:0c:e3:fa:0c:92:df:9b:3e:94:40:
f9:59:d1:72:0a:f2:59:19:5d:ee:ec:09:9b:b1:60:f5:b2:2e:
61:b3:3b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:38:32 2026 by rpki-client