Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/if-7rTZ-MnZCW1PJO7XwewoZvww.roa
File: if-7rTZ-MnZCW1PJO7XwewoZvww.roa (raw, json)
Hash identifier: HyaziyEh2XtawPCkR9Qnb00ZOVGjz1wLE15glbx9Otc=
Subject key identifier: 89:FF:BB:AD:36:7E:32:76:42:5B:53:C9:3B:B5:F0:7B:0A:19:BF:0C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0C63837B4E4B087E44B98F643AA3E89CF
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/if-7rTZ-MnZCW1PJO7XwewoZvww.roa
Signing time: Mon 21 Sep 2026 23:06:08 +0000
ROA not before: Mon 21 Sep 2026 23:06:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198661
IP address blocks: 31.76.86.0/24 maxlen: 24
31.76.95.0/24 maxlen: 24
31.76.255.0/24 maxlen: 24
31.77.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:38:37:b4:e4:b0:87:e4:4b:98:f6:43:aa:3e:89:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 21 23:06:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89ffbbad367e3276425b53c93bb5f07b0a19bf0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:e2:f0:a0:38:4e:77:63:c1:d5:f8:f5:6c:
13:1e:04:78:1b:c1:1a:a9:c4:ab:2d:d1:a1:63:99:
ae:5e:0f:83:55:e7:13:88:44:fa:98:20:71:4c:61:
83:fc:25:11:14:4c:6b:b5:ce:c6:e5:4a:c4:1a:41:
27:54:f9:a8:f6:4e:24:5b:cb:90:32:d9:32:13:71:
7b:b4:59:76:35:b1:dc:e3:6d:ee:59:2f:8f:ec:9c:
93:b0:96:22:e2:f2:1a:ae:37:b6:6c:a7:56:18:9c:
16:3e:91:ee:42:26:8e:3c:36:a8:ee:5d:76:47:a5:
73:2d:04:b8:dc:7c:34:7a:d8:a8:75:6d:06:a9:56:
e1:b5:d6:00:e9:df:90:1e:b5:75:f9:95:6a:17:54:
b1:99:33:6a:cc:ef:2f:36:f2:c6:aa:25:fe:87:71:
db:df:06:83:b2:98:72:73:f5:04:e1:67:52:17:c1:
9f:58:18:b5:36:07:b3:11:ee:a0:50:f0:26:ea:81:
59:d3:b6:c6:6c:11:46:7f:32:c5:5c:cf:00:b0:78:
ee:ca:5d:5b:52:c4:de:01:65:38:af:a9:04:1f:39:
87:c4:41:56:3c:c1:4e:d2:65:0e:e1:11:e0:7e:57:
e4:16:b1:3c:78:3e:9b:47:e6:e1:70:3c:b0:c5:c5:
bc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FF:BB:AD:36:7E:32:76:42:5B:53:C9:3B:B5:F0:7B:0A:19:BF:0C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/if-7rTZ-MnZCW1PJO7XwewoZvww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.76.86.0/24
31.76.95.0/24
31.76.255.0/24
31.77.115.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ae:7a:bc:20:51:d3:95:bc:bd:72:a0:19:a2:fb:74:3b:64:
44:3b:2b:93:0c:f0:13:15:b9:dd:47:7a:5e:56:c9:18:37:ba:
46:a4:67:f8:38:83:3f:dc:ce:e9:84:06:fd:29:1d:07:56:d8:
61:40:01:73:69:b0:43:c7:95:d7:9b:74:81:95:8c:a8:ab:ab:
44:ad:88:44:d3:c2:f3:eb:97:5b:c5:db:20:ae:2f:30:7a:c9:
da:74:a8:ec:c1:b9:50:d6:5c:08:43:2b:8f:6e:67:35:72:03:
31:43:76:ce:e2:7c:4d:6a:80:9a:79:07:7a:68:68:b9:e9:11:
15:99:f8:e8:79:c3:ea:b0:90:58:8d:8d:0a:64:db:7a:dc:bc:
eb:f7:c7:70:b9:f6:68:53:a0:5d:e8:50:3f:2c:1c:6c:5a:53:
b8:b3:7e:cc:42:05:b1:99:a3:2b:d3:a3:4c:6a:38:f2:0a:1f:
7f:e7:e0:bf:3e:60:41:ac:f6:12:64:45:54:a4:28:08:aa:e9:
6c:fa:42:6a:c0:80:96:24:ac:e4:f7:b9:62:95:ee:a4:5d:67:
c4:f0:82:9d:5f:cf:36:04:2f:e4:42:6d:78:b8:19:ed:f6:41:
ac:c8:61:1d:dd:7b:0f:14:3c:d1:94:94:e4:83:ed:94:a2:46:
2a:71:8e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:37:53 2026 by rpki-client