Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/X_HZlh-fyyi6nMPG03DxxtwqFxo.roa
File: X_HZlh-fyyi6nMPG03DxxtwqFxo.roa (raw, json)
Hash identifier: Dr0N9vuKegt2x5jucYpwb4GRxzk5SOl731OxeVfIpPE=
Subject key identifier: 5F:F1:D9:96:1F:9F:CB:28:BA:9C:C3:C6:D3:70:F1:C6:DC:2A:17:1A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F5D8CEC391E2DC4419128693F3EF3F23A
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/X_HZlh-fyyi6nMPG03DxxtwqFxo.roa
Signing time: Mon 13 Jul 2026 22:15:44 +0000
ROA not before: Mon 13 Jul 2026 22:15:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219225
IP address blocks: 31.77.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5d:8c:ec:39:1e:2d:c4:41:91:28:69:3f:3e:f3:f2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 13 22:15:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ff1d9961f9fcb28ba9cc3c6d370f1c6dc2a171a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ad:9d:7d:79:36:e0:26:7e:7c:7e:c2:8f:f0:
ec:8d:81:eb:70:9b:da:df:86:a7:ef:ea:9a:40:29:
6c:4a:c4:1f:be:6e:38:73:5d:d3:47:ae:f9:7a:d8:
8b:29:fd:c8:fd:5f:ae:f4:86:6a:be:bd:33:35:7a:
6c:3d:8e:33:ed:52:99:94:de:4f:60:e1:2f:49:60:
98:2c:8e:61:d5:38:3b:f4:b9:04:cd:5b:00:4a:99:
db:e9:9b:25:95:6b:2b:4b:25:cb:99:b2:c7:5e:5b:
66:01:eb:20:bc:19:64:fa:27:52:af:53:53:8e:4e:
f4:ae:06:bd:38:7d:c7:2b:f6:99:46:b9:2e:a9:16:
46:07:94:c2:74:c5:8b:4f:6c:3d:cf:70:a1:13:fb:
7a:75:86:42:bd:53:7b:96:78:f4:89:cd:3d:c2:63:
33:48:11:4a:02:42:20:81:21:1a:d1:f3:db:fb:32:
25:97:19:48:e1:52:e1:d1:54:9e:c8:38:76:7d:da:
25:d1:a1:86:58:19:72:f5:f8:97:fc:e4:57:d1:59:
6d:ba:d9:89:e6:f6:eb:8d:14:c6:38:70:c2:74:98:
cf:a9:63:b1:14:e3:9b:32:50:0c:c9:07:08:b4:da:
e3:45:65:eb:3b:80:33:71:81:a5:74:38:38:f4:00:
d8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F1:D9:96:1F:9F:CB:28:BA:9C:C3:C6:D3:70:F1:C6:DC:2A:17:1A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/X_HZlh-fyyi6nMPG03DxxtwqFxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.163.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:96:52:93:50:a0:b4:1e:77:7b:cf:97:d2:cb:fa:95:08:ad:
3e:cf:66:79:b6:b8:a3:c2:a3:b1:34:c1:50:6b:a2:dc:d5:3f:
fb:a0:1a:73:7a:ed:4b:48:8b:60:1e:54:b1:4d:75:0b:77:f7:
0e:5e:69:09:f1:e9:0c:28:19:bd:d0:33:bf:c0:ec:78:d4:ca:
2b:a2:5a:34:88:83:80:93:da:c9:59:d5:e2:85:ac:71:53:2c:
c0:95:cf:8f:a4:2b:06:6b:18:15:89:3e:9c:25:6d:67:f9:2d:
2c:14:8e:4d:ca:b4:bc:27:d8:4a:23:1b:0d:f7:0a:96:e3:29:
d1:2f:d1:f3:16:e6:93:69:3a:ea:61:9f:04:63:02:3f:35:89:
62:b3:3c:e8:d4:c9:82:88:70:1e:74:d3:6c:c1:76:b7:cd:3f:
39:d0:a1:ef:8d:4e:3b:b1:91:0a:12:0c:a9:9f:35:6c:cf:7e:
b5:41:ad:64:6d:05:32:76:c4:bc:98:e8:67:66:6f:5d:fe:db:
55:8a:d0:4e:aa:dc:e4:65:da:87:58:2e:1d:ca:81:c9:51:f1:
3c:6e:2b:d5:69:60:22:02:60:a8:b5:3d:7d:cf:b9:a1:76:af:
39:ae:7c:bb:8f:f6:e9:00:d4:3b:f0:9b:fb:4d:bb:3d:6f:a8:
88:cf:1a:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9djOw5Hi3EQZEoaT8+8/I6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNzEzMjIxNTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmYxZDk5NjFmOWZjYjI4YmE5Y2MzYzZkMzcwZjFjNmRjMmExNzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq2dfXk24CZ+fH7Cj/DsjYHrcJva
34an7+qaQClsSsQfvm44c13TR675etiLKf3I/V+u9IZqvr0zNXpsPY4z7VKZlN5P
YOEvSWCYLI5h1Tg79LkEzVsASpnb6ZsllWsrSyXLmbLHXltmAesgvBlk+idSr1NT
jk70rga9OH3HK/aZRrkuqRZGB5TCdMWLT2w9z3ChE/t6dYZCvVN7lnj0ic09wmMz
SBFKAkIggSEa0fPb+zIllxlI4VLh0VSeyDh2fdol0aGGWBly9fiX/ORX0VltutmJ
5vbrjRTGOHDCdJjPqWOxFOObMlAMyQcItNrjRWXrO4AzcYGldDg49ADYGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF/x2ZYfn8soupzDxtNw8cbcKhcaMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvWF9IWmxoLWZ5eWk2bk1QRzAzRHh4dHdxRnhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH02jMA0G
CSqGSIb3DQEBCwUAA4IBAQCzllKTUKC0Hnd7z5fSy/qVCK0+z2Z5trijwqOxNMFQ
a6Lc1T/7oBpzeu1LSItgHlSxTXULd/cOXmkJ8ekMKBm90DO/wOx41Morolo0iIOA
k9rJWdXihaxxUyzAlc+PpCsGaxgViT6cJW1n+S0sFI5NyrS8J9hKIxsN9wqW4ynR
L9HzFuaTaTrqYZ8EYwI/NYliszzo1MmCiHAedNNswXa3zT850KHvjU47sZEKEgyp
nzVsz361Qa1kbQUydsS8mOhnZm9d/ttVitBOqtzkZdqHWC4dyoHJUfE8bivVaWAi
AmCotT19z7mhdq85rny7j/bpANQ78Jv7Tbs9b6iIzxqw
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:55:41 2026 by rpki-client