Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/X3IaXRHPWERTSokfgNJ0HUNgGL8.roa
File: X3IaXRHPWERTSokfgNJ0HUNgGL8.roa (raw, json)
Hash identifier: xIDoP4vyJbdqhzETlDKX9e2Kfz//kNKnwHIQ0ei2Lks=
Subject key identifier: 5F:72:1A:5D:11:CF:58:44:53:4A:89:1F:80:D2:74:1D:43:60:18:BF
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F8663D0C2E236309672312A3359B5936B
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/X3IaXRHPWERTSokfgNJ0HUNgGL8.roa
Signing time: Tue 21 Jul 2026 20:35:16 +0000
ROA not before: Tue 21 Jul 2026 20:35:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199412
IP address blocks: 31.77.48.0/24 maxlen: 24
31.77.53.0/24 maxlen: 24
31.77.54.0/24 maxlen: 24
179.254.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:63:d0:c2:e2:36:30:96:72:31:2a:33:59:b5:93:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 21 20:35:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f721a5d11cf5844534a891f80d2741d436018bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:03:1a:d6:71:cd:6c:f1:e4:17:38:8c:da:43:
b4:8c:81:11:b9:e0:ce:f3:c7:9f:4a:37:5b:5d:4c:
b2:6d:20:48:df:77:bd:76:29:86:ce:ed:d8:72:d3:
eb:a5:47:36:6e:be:7a:36:23:14:61:0b:f2:58:db:
14:ec:c8:a3:44:19:75:fb:1d:a3:f3:af:cc:d7:d7:
04:50:86:c3:23:3d:eb:16:b0:bf:01:a5:73:a1:b4:
c7:54:7a:e8:df:40:ca:94:34:3f:34:e4:c1:17:71:
4d:77:d2:01:13:13:15:2d:b8:ca:a1:ae:ed:f3:98:
5b:be:6a:ff:70:44:15:43:43:ff:e5:c4:b1:a4:03:
c2:b1:eb:de:cb:94:6f:0a:61:61:17:52:07:1a:cd:
05:f5:b8:f1:a4:ff:5c:6d:1e:fd:fe:7a:00:ce:75:
ea:07:ef:6c:4c:ef:0b:4a:af:fa:45:c7:f6:d2:bc:
a2:6f:55:6d:15:3e:cf:c3:be:82:fc:8f:fb:6d:a9:
24:b5:0c:e8:d1:d5:e4:1d:3d:bb:15:59:b7:a0:38:
6c:05:82:12:6d:67:5a:7b:6c:9f:09:2d:62:58:7b:
78:5d:79:9c:11:06:98:5e:81:ef:8a:71:4a:16:54:
c1:71:ae:bb:de:dd:f4:c9:80:5c:99:88:cf:c1:eb:
7e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:72:1A:5D:11:CF:58:44:53:4A:89:1F:80:D2:74:1D:43:60:18:BF
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/X3IaXRHPWERTSokfgNJ0HUNgGL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.48.0/24
31.77.53.0-31.77.54.255
179.254.124.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:51:9e:2a:d5:cf:41:e5:8d:f9:c8:6c:f1:43:23:21:2b:5d:
ea:f8:05:7c:2d:a1:45:be:de:08:96:6a:d1:12:9c:b8:70:d5:
54:7f:98:35:00:78:12:d4:03:d1:52:70:d4:3e:d8:5d:b1:8b:
f3:99:c3:6a:b3:0b:02:e0:47:d0:b5:19:be:cb:2f:2f:0d:2d:
32:b0:19:ec:92:4f:b2:b0:61:13:e2:24:fb:d1:82:43:52:54:
97:f4:31:7f:0a:65:65:04:d2:a5:7e:06:b4:c0:8a:2f:53:12:
33:1c:69:81:f2:71:2d:d4:1d:29:67:4a:a7:c4:23:e7:07:42:
ce:e8:14:a5:a1:17:19:d4:29:6b:8a:f1:93:02:3c:82:8a:85:
fb:4d:b5:87:0e:c0:9d:a6:be:8e:ac:04:ac:52:6f:3b:ff:a1:
0d:3f:bf:a3:9e:ff:cc:e8:5c:88:f1:f9:e6:64:16:34:4c:55:
68:89:ba:a1:4b:a8:eb:59:7e:71:a6:fd:0e:2d:3a:3a:3d:8a:
b7:49:ec:39:29:f6:15:8c:87:96:bc:58:d5:c5:2a:f7:9e:83:
56:75:82:8f:5b:fd:fb:8b:05:84:51:6c:11:af:18:d2:55:15:
2c:93:bb:9f:e3:75:96:62:bd:51:36:9b:1b:f0:6d:a9:bd:21:
b1:cd:e3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:05:27 2026 by rpki-client