Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jNXV-WG8sHtzxPRb06_1_UIk2Zo.roa
File: jNXV-WG8sHtzxPRb06_1_UIk2Zo.roa (raw, json)
Hash identifier: 1FdFQaXYerqM+cbBQyuYGINj6nQy9gblOQr1RIiV+g4=
Subject key identifier: 8C:D5:D5:F9:61:BC:B0:7B:73:C4:F4:5B:D3:AF:F5:FD:42:24:D9:9A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1D0DE83B259A9BC1E9F832860E61410B1
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jNXV-WG8sHtzxPRb06_1_UIk2Zo.roa
Signing time: Thu 12 Nov 2026 17:46:46 +0000
ROA not before: Thu 12 Nov 2026 17:46:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33842
IP address blocks: 31.77.71.0/24 maxlen: 24
48.103.149.0/24 maxlen: 24
144.31.48.0/24 maxlen: 24
144.31.61.0/24 maxlen: 24
179.253.173.0/24 maxlen: 24
191.223.140.0/24 maxlen: 24
201.8.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d0:de:83:b2:59:a9:bc:1e:9f:83:28:60:e6:14:10:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 12 17:46:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cd5d5f961bcb07b73c4f45bd3aff5fd4224d99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:01:dd:f0:6d:7b:3e:0c:26:d6:0b:d2:80:
9b:18:8c:d4:73:d3:07:00:2f:12:e8:39:aa:a5:45:
fa:02:15:f9:36:e9:ee:4a:75:71:b8:9a:9a:6f:32:
ab:00:a0:e6:13:99:31:06:fe:d1:cf:25:29:66:91:
24:d1:14:c9:e3:14:71:41:f5:41:81:96:ca:c9:f2:
e9:ac:f4:45:a0:64:d3:84:d4:6d:68:bc:37:4e:a4:
d7:20:2f:85:03:de:89:b2:70:55:f4:90:75:eb:aa:
14:94:64:e1:fd:2d:ff:ea:c0:5f:86:4a:1a:1d:1f:
39:6c:bc:34:0c:4a:af:62:f3:cc:fd:cc:87:75:39:
9d:7a:9e:be:55:cb:2c:35:13:14:aa:dd:02:15:22:
88:6b:45:6b:9d:fb:c7:82:c5:3b:11:72:11:9a:ff:
84:67:48:4d:66:4b:78:e1:97:c0:73:a1:17:18:25:
00:32:ec:de:b7:dd:0f:d1:76:33:57:47:fb:64:05:
7d:20:d7:4b:db:9a:33:2d:31:c9:4a:b3:06:bd:b8:
ce:7b:ab:74:c1:ef:f5:1e:90:b7:0b:a3:71:9a:98:
d0:59:2a:df:b8:01:ec:c1:79:98:a3:84:35:64:33:
5d:4b:11:87:c8:1b:cd:1a:14:d1:ce:1d:de:3e:1f:
f0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D5:D5:F9:61:BC:B0:7B:73:C4:F4:5B:D3:AF:F5:FD:42:24:D9:9A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jNXV-WG8sHtzxPRb06_1_UIk2Zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.71.0/24
48.103.149.0/24
144.31.48.0/24
144.31.61.0/24
179.253.173.0/24
191.223.140.0/24
201.8.90.0/24
Signature Algorithm: sha256WithRSAEncryption
20:6d:ff:39:7c:45:87:fd:7f:5f:6e:f6:ef:58:aa:f0:9f:5f:
b1:49:9a:5c:5a:04:25:4b:d9:f4:5a:eb:5f:64:70:66:de:d6:
00:fd:70:11:da:4c:40:31:c8:02:fd:5d:fd:cc:2b:bc:ce:d2:
9a:85:66:86:fa:55:0b:ba:e8:0c:3b:a3:62:dd:49:5b:ae:de:
6c:08:04:d4:72:0a:38:e0:fb:f5:7c:4e:50:93:96:98:e0:b2:
cc:81:b4:c1:ee:90:b8:b9:85:94:bc:cf:41:48:41:24:52:98:
9b:63:92:e7:82:b6:4f:d6:ec:20:2e:fc:ca:ce:4a:77:81:34:
a2:76:21:53:52:91:40:ca:4d:60:d2:4d:88:f3:82:8a:19:99:
e1:bc:83:5d:31:59:1e:3b:60:b6:33:00:6a:82:96:bd:4f:af:
77:26:35:37:7e:3c:77:b2:0b:17:eb:44:ee:fb:ae:f4:02:00:
4e:40:09:f5:c7:70:65:cf:8a:fd:23:4a:f9:3d:68:88:16:d0:
77:b4:5d:df:80:66:c9:a9:3f:26:cb:0f:21:44:3a:7d:47:2d:
54:09:03:a9:56:a8:ce:25:4f:6c:f2:57:26:26:5e:fa:cb:2e:
e4:bf:52:ec:b6:94:41:05:eb:11:11:a4:78:6c:f0:ee:61:6a:
3d:a0:8b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:32:34 2026 by rpki-client