Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rsdcfY0qC3olnSO8Lx7q56o6v8Q.roa
File: rsdcfY0qC3olnSO8Lx7q56o6v8Q.roa (raw, json)
Hash identifier: ezl4cl2xsN6xC98FDY9tcU4BKZNliZERMrbSriq2CHU=
Subject key identifier: AE:C7:5C:7D:8D:2A:0B:7A:25:9D:23:BC:2F:1E:EA:E7:AA:3A:BF:C4
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F5C3FAE7B76D970690457027CE034EAA6
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rsdcfY0qC3olnSO8Lx7q56o6v8Q.roa
Signing time: Mon 13 Jul 2026 16:11:45 +0000
ROA not before: Mon 13 Jul 2026 16:11:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142146
IP address blocks: 31.77.121.0/24 maxlen: 24
31.77.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5c:3f:ae:7b:76:d9:70:69:04:57:02:7c:e0:34:ea:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 13 16:11:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aec75c7d8d2a0b7a259d23bc2f1eeae7aa3abfc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:52:13:65:f2:1a:15:60:65:22:20:2a:ee:67:
bb:ad:5e:e6:28:f4:1c:3b:02:a6:39:71:67:c8:53:
3c:ed:e8:ac:43:f8:fb:dd:8f:4a:ee:48:48:d8:a6:
57:60:a6:6d:10:92:ac:35:26:3d:b1:b3:ba:83:50:
37:8a:09:b4:59:d9:f9:a4:7f:ff:cc:30:76:94:71:
66:9d:cd:6b:27:52:43:44:07:53:65:cd:b2:11:01:
e6:9b:01:bf:74:50:50:99:b7:62:35:29:2d:63:e2:
af:66:2c:a5:3a:74:28:5e:9a:3e:ce:88:eb:60:21:
b6:53:87:45:fe:35:03:59:cc:63:27:58:2b:06:ad:
65:8b:0d:67:00:38:3b:89:ae:52:b7:36:18:c4:88:
fe:2f:c6:d7:e9:07:4e:bc:71:39:c5:ec:2f:55:39:
f7:3f:54:12:b9:71:13:7d:21:ea:73:91:40:1e:95:
c5:4d:bd:71:87:12:14:b1:28:77:e9:d2:b3:08:2c:
16:a2:e2:b0:48:2f:28:19:6a:7a:d3:8c:6d:ec:5f:
a8:c6:f8:d6:5b:53:94:bf:88:70:14:00:fd:8e:82:
0b:0a:0f:cd:2b:6b:2b:18:16:42:4b:5c:0f:bb:42:
13:00:de:e5:5a:58:6f:b4:7c:16:a1:8d:df:f2:48:
83:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C7:5C:7D:8D:2A:0B:7A:25:9D:23:BC:2F:1E:EA:E7:AA:3A:BF:C4
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rsdcfY0qC3olnSO8Lx7q56o6v8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.121.0-31.77.122.255
Signature Algorithm: sha256WithRSAEncryption
86:3d:55:d6:0a:c5:19:a6:07:b2:7f:ac:4a:44:6c:93:8f:07:
04:3a:e1:46:7c:bd:ba:b6:20:18:74:51:1d:26:e0:55:bf:72:
ea:66:32:fb:7b:d4:36:99:45:58:62:a4:71:1e:ca:0e:6b:81:
41:f9:2d:23:98:8a:94:ad:b1:72:f6:6b:2e:9f:4e:3f:cd:3b:
a5:d9:45:d2:7e:4f:73:58:af:41:12:fb:da:e7:ed:36:e0:e5:
5a:02:5d:4a:18:e6:09:12:60:a7:f7:ca:f3:23:e3:7d:d9:e1:
89:f1:66:5a:d2:d2:98:82:2d:24:07:b2:94:e3:b0:96:ae:23:
d6:d3:1b:e1:a1:af:ed:aa:a5:2f:6d:e8:3c:74:ea:4c:cb:48:
a7:98:f1:fe:ac:cb:9e:de:62:4d:15:92:31:ae:e6:3b:14:1d:
f7:35:5f:51:de:7d:2c:1f:68:42:33:28:24:5c:ee:d3:ca:03:
ba:3d:a6:94:c1:9a:81:ba:e8:1c:74:1e:89:88:61:b3:18:7b:
a5:8c:a7:2c:c1:e5:f0:92:e7:36:09:4c:b2:61:04:57:20:3c:
03:79:e6:48:eb:c3:92:88:5b:8b:b6:00:5f:c0:0f:87:e4:07:
cf:60:fd:82:c8:65:ca:e1:a1:2d:ae:24:5f:0b:9a:d4:84:c2:
f4:db:c1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:33:39 2026 by rpki-client