Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/p1fgelRtzadArrnrUNMWiF_Oc6s.roa
File: p1fgelRtzadArrnrUNMWiF_Oc6s.roa (raw, json)
Hash identifier: hDTSZAMeehvrj19OjUYbTyRozTF+ns+Z4sEuOL1MFCA=
Subject key identifier: A7:57:E0:7A:54:6D:CD:A7:40:AE:B9:EB:50:D3:16:88:5F:CE:73:AB
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F8049EBBE3BF2A69CF62A11B8E883C4A5
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/p1fgelRtzadArrnrUNMWiF_Oc6s.roa
Signing time: Mon 20 Jul 2026 16:09:15 +0000
ROA not before: Mon 20 Jul 2026 16:09:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 31.77.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:80:49:eb:be:3b:f2:a6:9c:f6:2a:11:b8:e8:83:c4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 20 16:09:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a757e07a546dcda740aeb9eb50d316885fce73ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:16:49:02:15:b4:cc:fa:57:42:2e:1a:0f:f4:
c5:c0:7c:a8:ad:b9:82:6e:be:1e:d8:b4:4b:b6:93:
00:fe:c4:3d:83:8d:d1:35:4b:77:2a:8b:66:02:51:
3e:ce:a3:a2:62:a9:87:67:eb:fc:aa:65:d9:eb:d5:
d3:8d:00:bf:2e:c6:92:a0:f5:32:a7:57:5f:50:3d:
9f:ef:23:8d:57:d4:2f:fb:37:79:74:57:bd:f6:f4:
d4:96:8c:7f:9d:40:1a:f9:51:82:f8:2c:64:92:7d:
6c:49:9b:ac:81:05:a9:49:b2:eb:d7:65:74:51:02:
65:5f:0a:96:3e:18:4b:b6:27:6b:82:2f:69:f5:a2:
d3:3b:b3:e0:c4:0f:22:d8:f4:57:58:4f:1c:14:96:
9e:4d:1b:8d:ee:be:06:2b:37:42:91:5a:f2:d7:e6:
71:3d:67:58:53:a8:4c:9d:06:6c:1a:45:f7:38:41:
ea:e3:a6:20:2d:c3:c3:2a:dc:dd:da:e1:7a:60:51:
dd:f8:4e:7c:92:95:12:de:b0:36:ec:35:84:f5:cd:
45:a5:ca:7c:b1:8a:f3:8c:c7:26:40:71:55:67:86:
e7:06:20:59:35:59:27:45:27:80:f8:7c:39:12:53:
20:77:42:c7:98:27:36:dd:ef:f5:d6:c0:49:5d:93:
72:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:57:E0:7A:54:6D:CD:A7:40:AE:B9:EB:50:D3:16:88:5F:CE:73:AB
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/p1fgelRtzadArrnrUNMWiF_Oc6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.116.0/24
Signature Algorithm: sha256WithRSAEncryption
58:25:1c:86:50:9b:c7:b9:ce:3a:00:d1:d2:2f:68:4d:41:4f:
e4:e6:4b:7a:b6:c5:a5:b2:2e:b9:50:ac:9e:d2:51:a6:51:af:
c6:fa:7e:a3:c4:c4:f0:ca:f1:88:e6:47:b3:f6:ad:8f:11:5d:
85:d7:84:18:f2:f6:75:bb:3b:a0:60:56:06:70:a9:3d:cc:54:
3b:54:13:e6:3d:8f:d0:de:0e:1f:c4:80:be:25:66:34:a2:a7:
1b:0d:94:85:8e:2c:29:2d:fa:10:ec:06:83:db:78:05:f3:c2:
cf:1a:45:dd:e3:08:09:d1:29:f6:ce:9d:c0:e7:c9:ae:2f:8f:
ab:60:24:60:c1:0f:c8:56:8c:f7:76:4b:6a:3b:2a:33:c3:dc:
e5:aa:cd:c7:1b:60:ae:33:2b:ca:3f:09:2d:e7:1b:ff:cf:67:
84:cc:3b:23:ac:31:4b:b8:a4:19:c9:a0:dc:bd:24:44:e7:a5:
d1:5c:f4:52:65:a0:51:cc:91:1b:b7:0c:a4:42:bb:1d:d4:cf:
52:d7:c4:2a:51:b9:d1:ea:c1:29:b8:08:4e:16:b0:7c:5f:17:
d1:00:5b:58:e4:b3:6d:de:23:1c:5b:63:08:47:ee:38:10:2b:
b9:a0:37:0a:c9:ab:48:6e:db:b3:b4:1a:9c:58:95:b5:33:c1:
d6:68:a6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:48:17 2026 by rpki-client