Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/tJrUEoBl_ussKaPWeGnqw_KZPFU.roa
File: tJrUEoBl_ussKaPWeGnqw_KZPFU.roa (raw, json)
Hash identifier: +JEqAj191AVb4ZdpooppIbvbs94iZh+/nROb8VfR2AM=
Subject key identifier: B4:9A:D4:12:80:65:FE:EB:2C:29:A3:D6:78:69:EA:C3:F2:99:3C:55
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F6DE22E3C1D7556AB97F81AD3B4C28A04
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/tJrUEoBl_ussKaPWeGnqw_KZPFU.roa
Signing time: Fri 17 Jul 2026 02:22:47 +0000
ROA not before: Fri 17 Jul 2026 02:22:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146871
IP address blocks: 31.77.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6d:e2:2e:3c:1d:75:56:ab:97:f8:1a:d3:b4:c2:8a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 17 02:22:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b49ad4128065feeb2c29a3d67869eac3f2993c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b8:25:38:1a:14:19:a8:21:54:8a:cf:d2:da:
1e:21:95:f7:49:50:b9:6f:33:93:b7:56:a8:e3:5b:
4c:39:1e:17:78:11:e1:a3:50:06:64:78:76:9b:b2:
c4:5a:da:f6:81:03:98:ac:a3:bb:02:15:69:4a:ab:
3b:13:1a:06:f1:a7:8e:67:0e:f9:34:3d:9f:ed:01:
48:5a:c2:68:07:5b:5d:0b:e1:d9:13:f9:69:63:8f:
1f:1b:2f:d5:77:4e:be:60:4f:23:96:4a:3d:7a:29:
df:98:78:25:a2:59:72:e2:e3:b3:00:e8:dd:35:e8:
d6:e0:6e:c2:22:09:fb:a7:d7:35:b1:4b:d6:52:94:
53:36:96:85:95:99:49:e8:5b:63:69:82:a3:fb:1d:
58:a0:55:dc:8c:53:81:15:44:1f:d9:82:82:4a:98:
42:84:68:6f:7b:d0:33:13:68:6a:82:38:7e:3f:ad:
a3:e7:99:2e:42:00:0a:84:31:a6:38:06:65:46:7f:
d4:9d:9a:b1:13:a1:a9:f8:23:de:aa:c0:b1:40:42:
f5:7f:5a:50:6e:e3:0c:4a:8b:24:31:25:80:fc:24:
a7:f5:f4:34:64:0f:b7:8c:e2:3e:77:a7:e5:d6:85:
ea:a9:bf:a8:98:56:e7:91:a1:90:6b:95:5e:75:df:
82:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9A:D4:12:80:65:FE:EB:2C:29:A3:D6:78:69:EA:C3:F2:99:3C:55
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/tJrUEoBl_ussKaPWeGnqw_KZPFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.119.0/24
Signature Algorithm: sha256WithRSAEncryption
61:15:a3:3b:1c:3c:66:30:8b:e6:7b:8b:77:55:5a:31:f0:13:
ed:a0:34:df:fd:a6:a2:11:83:5b:af:6a:64:e7:fc:d7:50:62:
38:03:8d:eb:79:bd:b0:24:66:02:86:e2:d8:34:63:94:8c:48:
5f:4b:6d:8f:6f:07:d7:d7:c0:98:1a:c4:05:85:5b:fd:b2:21:
a9:6a:75:da:49:c5:7c:92:54:7f:0b:c9:50:eb:f3:f3:98:7d:
ca:72:d0:ef:73:e8:8a:65:3c:fd:cf:ee:b7:b4:24:50:03:e6:
dd:c0:41:66:c1:1c:fe:30:75:55:31:00:f1:f1:b4:c0:04:79:
f2:19:84:16:fb:f9:16:c4:de:b7:7d:e6:93:9b:b1:ef:cb:a5:
d4:5f:12:3d:f6:35:fa:bb:b0:77:6f:30:2d:de:00:53:90:e5:
fd:54:13:a8:ba:63:e5:4c:6c:dc:04:90:b5:3d:5b:be:07:45:
93:d1:58:48:04:c4:bf:c4:c5:57:d6:3a:43:e7:90:16:5b:70:
55:78:d7:5c:f9:b9:3c:6f:c6:28:b8:61:b1:02:56:a1:0c:37:
9e:08:0d:96:d9:15:d5:b5:44:74:5e:f8:09:47:13:df:1c:4b:
50:bf:4d:1f:0b:d8:64:a7:f0:cc:b6:65:c6:d7:cc:c6:bd:6b:
63:ff:ae:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:33:43 2026 by rpki-client