Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/edwQYbt4rFXoPY8aZplbd08GBGc.roa
File: edwQYbt4rFXoPY8aZplbd08GBGc.roa (raw, json)
Hash identifier: JnZlbILUjbQBoduynVyxM8TMvQiGNgVBAVjwfw6xXY0=
Subject key identifier: 79:DC:10:61:BB:78:AC:55:E8:3D:8F:1A:66:99:5B:77:4F:06:04:67
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E1806C5CDD2DA4A94BFB8BAC58D2E6135
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/edwQYbt4rFXoPY8aZplbd08GBGc.roa
Signing time: Mon 11 May 2026 17:12:37 +0000
ROA not before: Mon 11 May 2026 17:12:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46011
IP address blocks: 31.77.176.0/23 maxlen: 24
31.77.221.0/24 maxlen: 24
31.77.227.0/24 maxlen: 24
31.77.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:18:06:c5:cd:d2:da:4a:94:bf:b8:ba:c5:8d:2e:61:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 11 17:12:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79dc1061bb78ac55e83d8f1a66995b774f060467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:83:76:c0:6d:37:1e:c9:bd:5b:d9:25:df:53:
3b:ce:3b:45:b9:e3:1e:36:e4:3d:99:fc:a1:38:f0:
e6:19:59:a6:bc:69:76:db:28:e5:63:e7:e6:9e:45:
88:f2:34:ea:8a:1d:8c:96:04:43:07:34:d2:36:38:
31:45:30:d8:8d:b7:27:c7:b7:c2:96:6b:40:90:c6:
49:f8:34:ff:af:c6:a1:88:80:65:2c:f7:59:f9:7f:
e2:2b:30:36:d3:e6:19:14:52:33:59:31:53:9a:c6:
f8:08:69:d6:3a:40:04:9f:bc:14:5a:db:7f:35:06:
63:35:1c:ba:ba:4f:56:12:de:a5:9f:d9:7f:7f:78:
99:f1:90:72:cf:40:c4:4b:74:21:e5:12:c1:cf:6d:
cd:fb:14:23:94:4a:80:f1:11:d2:16:aa:e5:42:66:
0c:5b:6e:7b:ec:c0:91:2d:fe:1c:8d:22:86:87:05:
16:1e:08:52:cd:ab:ab:13:7a:b3:ec:ba:13:46:e7:
36:da:29:ea:8a:bd:96:66:89:c0:9c:d5:03:cc:19:
52:ff:8f:79:b6:a7:03:9f:42:b5:b3:c4:26:ba:28:
50:ae:6c:12:04:01:47:1d:56:46:19:27:e5:27:be:
f4:43:7a:91:f7:df:b5:e1:d5:48:ee:7f:d3:d0:8d:
0b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DC:10:61:BB:78:AC:55:E8:3D:8F:1A:66:99:5B:77:4F:06:04:67
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/edwQYbt4rFXoPY8aZplbd08GBGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.176.0/23
31.77.221.0/24
31.77.227.0-31.77.228.255
Signature Algorithm: sha256WithRSAEncryption
43:45:c2:fb:97:1c:ac:79:0c:cf:4a:98:b3:1a:3b:c7:98:a4:
16:8d:61:0b:d4:52:00:2d:c8:cd:8b:90:86:32:35:77:f4:ec:
da:c7:c9:8b:82:ab:74:7b:d0:d5:ef:ec:a6:1a:3f:58:ac:16:
62:a1:be:9d:08:2e:a3:13:c2:f6:9b:32:94:09:43:bf:cc:55:
15:6e:54:29:89:28:08:0a:7f:95:f3:8b:43:46:cb:50:f2:cc:
21:72:25:21:b8:1c:cc:93:d6:83:d7:66:9b:ab:d4:3e:ab:f3:
19:c6:8c:6a:16:b1:34:c8:00:c9:38:a4:ec:fa:7e:93:bb:25:
46:a7:45:31:2c:8d:eb:bb:d6:4e:c4:74:37:62:19:3d:6b:69:
ce:89:29:a0:79:6e:43:37:57:bd:93:c2:56:4b:45:ff:bc:6e:
cc:4e:e0:cb:c2:c1:ea:97:0c:06:dd:61:61:78:41:5d:7c:da:
a1:4e:ca:cc:b8:83:b8:cc:78:af:b7:91:bd:fe:40:96:51:04:
dd:0b:d3:71:4e:43:f1:a4:42:95:5e:79:ae:02:46:eb:c2:82:
a1:0f:a7:57:8a:2a:c3:62:04:d0:01:b2:25:03:39:12:9d:55:
6d:1c:05:fe:41:41:72:c1:ec:88:3b:2f:cf:7b:d4:8f:c5:f5:
bb:c7:e2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:58:17 2026 by rpki-client