Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ztGKQ_f22rUHdv9KSeabIYs-_mc.roa
File: ztGKQ_f22rUHdv9KSeabIYs-_mc.roa (raw, json)
Hash identifier: ockE5otYss/O2QIxhD1oOVZ3D6Z8XLg2Q9e5uU61kQQ=
Subject key identifier: CE:D1:8A:43:F7:F6:DA:B5:07:76:FF:4A:49:E6:9B:21:8B:3E:FE:67
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F90063FE385AE31B399F0B86E41B176B2
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ztGKQ_f22rUHdv9KSeabIYs-_mc.roa
Signing time: Thu 23 Jul 2026 17:29:16 +0000
ROA not before: Thu 23 Jul 2026 17:29:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151814
IP address blocks: 31.77.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:06:3f:e3:85:ae:31:b3:99:f0:b8:6e:41:b1:76:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 23 17:29:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ced18a43f7f6dab50776ff4a49e69b218b3efe67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:20:b4:a8:8d:cd:9a:15:cc:8f:bf:f5:d1:9a:
67:49:3f:0c:89:7b:73:24:b2:47:32:8a:61:93:62:
a7:ea:ff:01:79:93:1d:34:2c:5f:be:a3:20:36:4b:
52:5b:9e:77:a4:48:f2:c9:f2:7b:d6:2e:9a:46:52:
d8:75:e0:a6:11:92:a9:d9:2f:e6:0c:8a:38:e0:be:
ed:1c:85:31:45:d7:bc:03:76:4e:a3:cb:f9:32:2f:
cf:5f:dd:9a:c1:16:89:27:59:40:76:a0:f0:36:4f:
8e:c9:98:53:11:24:1a:00:f8:aa:84:8d:3e:1e:d6:
c4:8a:31:23:aa:5b:99:2e:c4:88:44:63:5b:d2:93:
16:e0:11:fc:d0:83:3b:d3:9a:98:61:23:27:27:93:
30:0b:14:43:59:9d:57:3f:c9:e4:58:0f:b7:c1:52:
bd:64:a7:f5:6e:13:98:d0:68:0e:92:52:2b:a3:f4:
b7:3e:ab:7d:7d:0f:1c:2c:34:f8:56:3c:4e:30:0e:
fb:6e:e5:9a:94:c6:cc:fc:74:c1:cb:50:8e:c7:07:
bc:64:e3:32:a5:87:af:b1:46:07:52:bc:12:5e:85:
7c:40:d3:c9:84:f8:a6:3a:8a:bc:a8:8e:4b:4c:c2:
bf:8f:40:7e:56:3c:28:c5:5c:d2:77:6d:a1:ff:6a:
2b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D1:8A:43:F7:F6:DA:B5:07:76:FF:4A:49:E6:9B:21:8B:3E:FE:67
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ztGKQ_f22rUHdv9KSeabIYs-_mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.215.0/24
Signature Algorithm: sha256WithRSAEncryption
56:e1:61:ab:a5:6d:cd:58:3b:9f:04:1a:8a:0a:5e:ae:ad:88:
d6:bf:57:1c:ef:0e:29:4a:4f:30:e6:55:4e:af:97:d7:41:61:
3a:43:f4:7b:37:fb:ce:5a:34:0e:16:6c:16:5d:79:f3:a8:86:
71:bd:67:32:3d:b5:54:ac:f5:0d:70:8d:bc:41:5b:dc:9a:95:
c8:1d:67:10:16:3c:ea:5c:9a:5a:41:5d:3b:2d:a6:07:e2:ad:
45:e2:18:69:f2:8e:db:82:b1:90:26:69:e6:dd:53:fb:1b:56:
af:d6:6b:52:04:34:7b:85:42:8d:25:26:05:1c:30:ad:88:b8:
12:85:d8:33:ef:b6:e9:ce:7e:99:4a:eb:de:14:71:46:61:d9:
fd:1d:97:35:37:f4:6c:c5:c2:96:ab:bb:1f:cb:f5:94:cd:84:
96:ce:08:15:04:bf:81:5b:7a:42:d2:ee:66:30:11:5e:45:9b:
70:b2:92:d7:6e:48:94:11:e3:80:b5:e3:ff:b5:68:aa:7b:8f:
00:fa:2f:74:98:ce:75:8e:04:50:2c:fe:a2:03:86:a8:bf:d3:
06:34:2c:50:28:93:4b:7c:e4:c3:47:75:7a:02:cc:4a:4d:64:
66:dd:03:84:78:21:46:93:9f:ef:ff:c5:a9:c5:ce:62:34:5f:
e4:4d:fd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:01 2026 by rpki-client