Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/joKeOQwA1vv80R0mup8OW0BvGYA.roa
File: joKeOQwA1vv80R0mup8OW0BvGYA.roa (raw, json)
Hash identifier: JJ5l68iy5eNz5hnl46khmkch5yHVVCSLGna/HBTvsm8=
Subject key identifier: 8E:82:9E:39:0C:00:D6:FB:FC:D1:1D:26:BA:9F:0E:5B:40:6F:19:80
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F8115285169DAC2DF47DDF39DA1E20CBA
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/joKeOQwA1vv80R0mup8OW0BvGYA.roa
Signing time: Mon 20 Jul 2026 19:51:15 +0000
ROA not before: Mon 20 Jul 2026 19:51:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215102
IP address blocks: 31.77.139.0/24 maxlen: 24
201.10.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:15:28:51:69:da:c2:df:47:dd:f3:9d:a1:e2:0c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 20 19:51:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e829e390c00d6fbfcd11d26ba9f0e5b406f1980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1e:0c:1e:42:ef:e9:42:77:c1:22:60:bf:0f:
f2:0e:9b:4c:16:b1:06:03:d9:c6:78:8d:d0:17:02:
19:2e:5a:a8:c4:75:a0:d8:d2:08:46:c4:67:71:b7:
4e:ba:2e:f9:74:ce:c4:e4:c3:44:e9:1c:fe:36:5f:
61:37:2e:38:00:1a:ee:ed:e6:5b:be:70:2c:4b:eb:
1b:28:1c:a5:13:87:f3:c2:7e:37:b4:6c:f5:7f:9f:
09:9c:46:3a:29:4b:b5:be:b8:97:44:46:f9:75:5c:
35:86:ab:cd:0b:80:e9:3c:3d:ca:2b:9e:e3:51:30:
59:81:76:5e:bf:82:da:0a:07:47:3a:6c:87:c6:80:
c4:56:25:e0:b8:9b:81:b2:fc:0c:68:4b:3f:81:20:
bd:fe:ae:1c:f4:e3:fe:48:13:72:24:98:ed:f6:86:
88:91:1f:ed:64:40:e9:20:c4:b4:e6:04:a9:38:02:
65:b7:3a:c8:ce:33:ee:e6:99:c2:1b:ec:e8:11:2b:
ba:b6:7f:ff:79:b7:91:35:8f:92:a1:2e:80:c6:07:
f2:d8:d2:81:39:00:db:2e:ca:f7:e8:96:5d:61:ab:
26:e4:45:f0:02:a6:c8:dd:19:5a:f1:b0:78:c8:d7:
a9:46:1e:83:c7:f7:d2:bd:27:66:a9:b9:be:53:6e:
1a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:82:9E:39:0C:00:D6:FB:FC:D1:1D:26:BA:9F:0E:5B:40:6F:19:80
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/joKeOQwA1vv80R0mup8OW0BvGYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.139.0/24
201.10.80.0/24
Signature Algorithm: sha256WithRSAEncryption
03:59:c5:a1:28:77:c0:d4:0c:81:3f:30:f0:bd:2a:db:55:0c:
bb:bf:ae:c5:0c:8d:b1:cf:e9:84:57:02:c3:9d:33:10:23:ea:
46:8a:54:67:74:ab:2c:62:a2:1e:43:cb:f3:60:93:ae:26:36:
bb:67:ea:5d:f0:9f:c0:75:78:1b:a4:34:d6:9a:af:7a:21:29:
52:92:97:f2:01:62:f9:db:bf:ec:7a:56:ac:ea:72:8a:a3:4e:
79:0f:e4:ae:2e:af:a7:b9:00:da:6c:08:a5:86:e0:fa:bf:4c:
7e:40:61:a7:db:85:03:13:db:89:b9:c1:16:6d:ac:6d:b0:1b:
af:f8:1e:05:a2:e4:0d:a6:07:61:d4:16:fb:c5:53:dd:0e:8a:
de:88:c2:67:4d:10:85:8c:46:da:ff:9e:71:ee:91:05:35:72:
04:c8:dc:31:78:96:e6:f7:89:37:50:c8:90:9a:42:39:ff:84:
9e:45:a4:f2:d5:0a:65:21:d7:4c:d7:21:7e:84:c1:63:2f:ea:
d9:8d:50:3b:3b:b7:cf:ff:55:83:f5:42:fc:97:87:1d:43:6d:
ba:01:8f:ab:35:4f:37:3f:66:84:b3:ce:29:ef:7b:a3:82:6f:
f5:d3:a5:dc:20:a5:fa:c1:71:9f:3f:64:fe:59:79:cc:9c:f5:
11:9d:09:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:02:51 2026 by rpki-client