Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hMaqZfXXn45tGmbrTVjCo0coHwc.roa
File: hMaqZfXXn45tGmbrTVjCo0coHwc.roa (raw, json)
Hash identifier: g2FDQirnGd6MnpbopfIJ+9s+9N++F5XvUFwG1EB7v6A=
Subject key identifier: 84:C6:AA:65:F5:D7:9F:8E:6D:1A:66:EB:4D:58:C2:A3:47:28:1F:07
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F8AE560C0EE3D0A3F9A771000BDB232CE
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hMaqZfXXn45tGmbrTVjCo0coHwc.roa
Signing time: Wed 22 Jul 2026 17:35:16 +0000
ROA not before: Wed 22 Jul 2026 17:35:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134915
IP address blocks: 31.77.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:e5:60:c0:ee:3d:0a:3f:9a:77:10:00:bd:b2:32:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 22 17:35:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84c6aa65f5d79f8e6d1a66eb4d58c2a347281f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:84:8c:41:ac:d2:ff:16:0b:56:9a:fc:02:38:
a1:71:d2:35:8d:d6:77:98:70:76:04:e3:7b:f9:74:
c2:87:77:c5:f8:bd:63:20:cc:80:44:23:b1:70:89:
09:49:5d:b8:51:2a:a2:13:28:b1:b2:6e:91:30:b8:
a0:70:93:ae:ea:99:54:82:68:50:bd:10:91:a5:6a:
9d:0f:1b:52:ed:69:cd:27:64:c7:0b:42:e3:88:c8:
5a:c1:ba:39:25:6f:e3:40:b0:00:e2:45:3d:94:49:
b3:d1:2f:a8:48:92:a4:bf:ef:b0:29:a9:6d:38:a9:
63:82:9b:25:01:2b:7f:e1:be:9c:41:8a:a2:8b:69:
69:14:a7:9d:87:52:3a:dc:45:03:15:be:4a:a8:16:
9e:b0:02:ca:d5:ed:ca:77:b8:c2:8e:ab:e0:6f:cb:
70:59:bb:36:25:86:89:b8:91:4a:fa:f9:db:e1:fe:
45:c5:33:99:56:c4:91:72:4b:1e:0f:6b:1e:23:58:
7c:af:9b:eb:09:a7:6e:df:94:4a:b1:37:6c:a5:37:
82:c6:e0:db:a4:a3:51:0e:d1:06:86:e0:3b:ec:58:
f2:44:9a:40:b2:ff:64:ff:c8:29:c3:53:48:16:79:
71:62:3b:98:3b:aa:dc:9c:bd:a4:78:94:83:b6:9e:
15:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C6:AA:65:F5:D7:9F:8E:6D:1A:66:EB:4D:58:C2:A3:47:28:1F:07
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hMaqZfXXn45tGmbrTVjCo0coHwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.115.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:15:c1:f3:19:a4:97:90:9d:86:55:8b:25:b7:b6:36:8c:8a:
10:3e:ab:13:d0:7a:86:3b:ee:3d:72:e0:c3:76:a6:33:45:ec:
23:0b:45:e7:c7:22:b9:81:a3:04:0a:08:51:3b:3b:95:4a:b8:
28:4a:35:e1:a7:ee:2d:03:5c:68:e6:2a:70:be:e7:f5:1d:21:
50:d6:52:23:2c:52:c5:cc:8a:3c:eb:61:39:08:80:03:75:87:
3d:7e:01:c3:87:36:5c:d9:e0:a7:88:86:fe:10:09:b0:80:32:
9f:f8:1b:2d:1f:30:38:c4:02:cf:44:62:29:c4:87:08:f2:8b:
a9:d4:7f:94:f8:62:9b:60:21:b0:b1:24:b9:c1:00:d6:3a:89:
25:b9:90:2b:d5:9a:47:e1:30:ec:f9:7b:12:bd:56:8b:a2:b5:
8b:32:e4:3a:56:5e:52:74:f3:54:ec:b0:48:92:2b:58:da:54:
7b:3f:14:a3:8a:22:40:9e:61:04:86:29:28:e8:02:c4:8e:97:
68:8b:42:12:ab:74:ab:98:1a:f3:2f:03:02:fa:30:10:68:cf:
51:e9:3e:c5:59:30:f7:05:a8:ce:f4:29:e3:ca:f1:cb:eb:7a:
8d:ff:5a:39:05:75:eb:fb:3b:31:ef:4e:61:87:d7:b2:be:c5:
98:d1:56:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+K5WDA7j0KP5p3EAC9sjLOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNzIyMTczNTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGM2YWE2NWY1ZDc5ZjhlNmQxYTY2ZWI0ZDU4YzJhMzQ3MjgxZjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoSMQazS/xYLVpr8AjihcdI1jdZ3
mHB2BON7+XTCh3fF+L1jIMyARCOxcIkJSV24USqiEyixsm6RMLigcJOu6plUgmhQ
vRCRpWqdDxtS7WnNJ2THC0LjiMhawbo5JW/jQLAA4kU9lEmz0S+oSJKkv++wKalt
OKljgpslASt/4b6cQYqii2lpFKedh1I63EUDFb5KqBaesALK1e3Kd7jCjqvgb8tw
Wbs2JYaJuJFK+vnb4f5FxTOZVsSRckseD2seI1h8r5vrCadu35RKsTdspTeCxuDb
pKNRDtEGhuA77FjyRJpAsv9k/8gpw1NIFnlxYjuYO6rcnL2keJSDtp4VZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFITGqmX115+ObRpm601YwqNHKB8HMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvaE1hcVpmWFhuNDV0R21iclRWakNvMGNvSHdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH01zMA0G
CSqGSIb3DQEBCwUAA4IBAQBrFcHzGaSXkJ2GVYslt7Y2jIoQPqsT0HqGO+49cuDD
dqYzRewjC0XnxyK5gaMECghROzuVSrgoSjXhp+4tA1xo5ipwvuf1HSFQ1lIjLFLF
zIo862E5CIADdYc9fgHDhzZc2eCniIb+EAmwgDKf+BstHzA4xALPRGIpxIcI8oup
1H+U+GKbYCGwsSS5wQDWOokluZAr1ZpH4TDs+XsSvVaLorWLMuQ6Vl5SdPNU7LBI
kitY2lR7PxSjiiJAnmEEhiko6ALEjpdoi0ISq3SrmBrzLwMC+jAQaM9R6T7FWTD3
BajO9CnjyvHL63qN/1o5BXXr+zsx705hh9eyvsWY0Vax
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:21:59 2026 by rpki-client