Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/RO-lKkaah4XNjyeF242S_yoJPoI.roa
File: RO-lKkaah4XNjyeF242S_yoJPoI.roa (raw, json)
Hash identifier: gho7WwSVV30PDDTAJe6t0hErKbpkzFaVLo5D6I9HW9E=
Subject key identifier: 44:EF:A5:2A:46:9A:87:85:CD:8F:27:85:DB:8D:92:FF:2A:09:3E:82
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F7B2AE09B2AAC072C43ACB851FD6A38FD
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/RO-lKkaah4XNjyeF242S_yoJPoI.roa
Signing time: Sun 19 Jul 2026 16:17:15 +0000
ROA not before: Sun 19 Jul 2026 16:17:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147208
IP address blocks: 31.77.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7b:2a:e0:9b:2a:ac:07:2c:43:ac:b8:51:fd:6a:38:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 19 16:17:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44efa52a469a8785cd8f2785db8d92ff2a093e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c6:58:26:11:c4:0b:c2:9c:a1:d5:95:55:c4:
44:9d:f6:af:10:80:15:40:27:61:b7:d0:f1:96:c6:
9c:3b:4d:61:7a:42:e0:83:90:f7:53:30:71:89:1a:
56:60:d7:88:18:9e:8a:ca:5b:a4:c1:9b:9d:98:8f:
44:70:25:f2:4a:56:b9:10:f3:fa:b8:5d:54:bb:e3:
c5:59:08:70:05:69:b8:4f:50:b8:8a:d4:18:88:45:
69:07:53:55:e5:b5:92:97:5c:52:58:87:70:93:f6:
ff:9f:09:57:cd:b1:49:f5:51:f3:8e:a9:15:ba:0c:
05:20:8a:21:be:6d:11:89:5a:de:0c:76:12:d4:99:
a2:2b:e5:17:95:f4:6b:5d:5e:31:4a:0f:9f:b2:17:
2e:eb:7e:ce:d4:61:9e:2f:ba:f0:07:55:57:62:74:
52:8b:45:84:4b:09:36:8b:e9:12:9e:17:89:75:5d:
09:41:e3:a7:09:57:c0:00:7b:f6:94:10:8f:73:b3:
2d:e1:77:c4:e9:6d:8b:51:15:a7:9f:b5:4a:d3:e5:
f4:b2:d8:56:fd:80:b9:05:10:08:93:3f:e9:4d:f1:
06:d3:21:29:19:64:78:70:7a:49:6a:1f:56:fe:d5:
fc:3a:85:f2:c1:f2:bd:d2:38:03:87:f3:8d:6a:3c:
9d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EF:A5:2A:46:9A:87:85:CD:8F:27:85:DB:8D:92:FF:2A:09:3E:82
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/RO-lKkaah4XNjyeF242S_yoJPoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.229.0/24
Signature Algorithm: sha256WithRSAEncryption
15:70:0f:55:d4:11:55:6b:6d:2f:2d:69:77:47:76:1c:13:91:
f6:90:0a:db:11:1f:a6:f3:07:3f:30:f1:a3:1c:59:7b:e8:5e:
a8:8a:31:74:cb:6a:cc:e4:db:c1:d0:51:43:8a:5f:34:46:dc:
79:9c:ed:bf:3f:d6:f9:fc:87:d2:4f:f2:98:38:2b:2f:b5:dc:
50:83:b9:ce:25:a0:43:b6:5f:7a:43:c1:92:0a:aa:76:74:9d:
03:ad:c1:cf:9f:98:21:b2:03:47:cf:37:e8:c7:e3:14:e3:a0:
c4:04:2b:3b:fc:50:32:5d:95:9e:1b:f0:be:b0:00:eb:59:6a:
dd:c8:72:4d:71:66:84:70:3c:f0:66:2a:a0:4f:32:f0:88:4e:
de:bb:54:3d:5f:6a:15:fd:e9:7f:5e:b7:87:51:c9:4f:cd:24:
3d:e2:d6:3d:56:af:58:2f:ab:01:18:35:a4:d7:81:54:80:83:
85:46:7c:3e:49:fb:9f:ab:ac:94:93:d8:ca:00:4b:1a:9b:04:
4e:5a:10:dc:18:91:3d:ea:e6:61:8e:28:a3:f4:4a:55:45:de:
3f:57:16:fa:07:71:10:44:6a:0b:f0:79:be:47:1a:15:4d:1a:
a3:da:4c:fe:5d:5e:10:0c:58:49:7b:6d:d5:4a:40:3e:ee:7c:
cf:fe:5d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:40:46 2026 by rpki-client