Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jblbbgEAADeLLHBXyR8QR4pEGmk.roa
File: jblbbgEAADeLLHBXyR8QR4pEGmk.roa (raw, json)
Hash identifier: PEpPk/7VedfEgp+RRJvwOyPrr/73d8CfkR6GYLMzOVc=
Subject key identifier: 8D:B9:5B:6E:01:00:00:37:8B:2C:70:57:C9:1F:10:47:8A:44:1A:69
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019EF5DA2D3C10514C77F620006B018496AB
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jblbbgEAADeLLHBXyR8QR4pEGmk.roa
Signing time: Tue 23 Jun 2026 18:59:36 +0000
ROA not before: Tue 23 Jun 2026 18:59:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50131
IP address blocks: 31.76.200.0/22 maxlen: 24
31.76.216.0/22 maxlen: 24
77.239.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f5:da:2d:3c:10:51:4c:77:f6:20:00:6b:01:84:96:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 23 18:59:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8db95b6e010000378b2c7057c91f10478a441a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:64:24:3d:dd:0e:75:7f:36:2e:0e:92:f5:54:
e3:53:b5:d9:ac:ea:0b:54:24:2a:b1:25:e3:fe:92:
e1:c7:da:d5:85:8e:de:19:e2:81:35:e1:f4:8d:13:
03:f3:49:cd:56:af:f5:f3:fb:49:d7:eb:54:25:d4:
7c:d0:e2:8c:22:0e:d1:4d:09:e2:10:34:f7:49:2d:
6c:1e:9f:2b:22:0a:11:5a:46:58:0f:48:ca:20:34:
fb:de:43:a6:47:7e:01:0f:a4:4b:2e:ef:eb:c6:1a:
74:6e:35:01:7c:bd:38:7b:45:ee:b9:4e:7b:c5:04:
18:f1:76:5c:b6:29:8f:58:e9:43:a4:0a:06:6b:42:
e9:86:92:2f:3f:fd:70:46:52:4c:b5:c8:f3:d7:a2:
98:8d:7c:f3:7a:67:48:3b:b9:91:94:de:72:be:3c:
c5:de:6f:c2:18:97:fa:07:1c:e4:df:f4:e1:e2:c9:
25:e8:e8:9e:ef:3c:2d:85:7a:7f:2d:66:a3:2a:80:
d0:e0:05:da:53:6b:0b:41:d0:4d:c8:0a:d4:c4:ac:
fa:42:58:87:f3:0b:1b:1c:5a:2b:ba:59:ce:b2:6e:
f1:04:ce:51:81:4d:11:e8:f7:4a:2c:03:9d:f9:8d:
20:43:c8:cd:67:d3:6c:99:1f:b8:c3:fe:ea:a9:bf:
6e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B9:5B:6E:01:00:00:37:8B:2C:70:57:C9:1F:10:47:8A:44:1A:69
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jblbbgEAADeLLHBXyR8QR4pEGmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.76.200.0/22
31.76.216.0/22
77.239.116.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:1f:34:4c:c7:c8:eb:f3:69:3e:29:a9:40:09:09:4e:83:1b:
04:93:a5:f5:85:3e:dd:b2:76:f5:fe:03:84:58:5f:c8:35:bb:
2c:af:e3:aa:56:49:7d:58:84:32:6d:11:1e:1b:aa:06:97:8d:
be:03:5e:e3:26:06:f3:5f:e2:f7:86:c2:df:19:13:ca:79:d7:
35:1d:68:1f:c3:fc:bf:e8:31:21:38:e0:8f:e8:19:97:33:3f:
b1:9d:51:f0:e0:a6:79:32:18:e7:7c:e7:db:be:54:57:a5:06:
d1:31:5f:9b:a0:6f:5e:11:05:bf:bb:2e:2b:43:24:b8:42:ac:
ba:cc:d3:78:d8:52:f2:3c:69:8e:ea:e2:cc:9d:94:21:15:19:
51:ba:40:20:e6:d7:a1:e2:f7:31:83:dd:2c:e0:3d:d9:0e:9e:
ee:35:a1:4e:94:52:c0:ee:b0:9f:92:af:57:6f:f1:0a:09:60:
e3:a4:51:2e:56:24:d5:1b:ad:26:df:73:59:9b:c4:57:60:6a:
86:80:6e:cc:9b:56:ad:07:8d:08:e0:13:e0:94:3e:2d:3e:a4:
88:74:63:21:c6:16:6e:e9:ff:f4:17:bf:ec:d5:48:86:6b:c3:
75:48:81:00:f6:86:e0:ea:e4:c9:2f:2d:96:05:25:0c:5d:25:
0e:ee:19:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:22 2026 by rpki-client