Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0fXuqtd7JOSscz5RoyR4qka8O5E.roa
File: 0fXuqtd7JOSscz5RoyR4qka8O5E.roa (raw, json)
Hash identifier: gIR1C3haz6+X3YgiQbEIB9Wehc2STcaZxQfQkgaCDDY=
Subject key identifier: D1:F5:EE:AA:D7:7B:24:E4:AC:73:3E:51:A3:24:78:AA:46:BC:3B:91
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E6A38325120A243FB2480B93192016C07
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0fXuqtd7JOSscz5RoyR4qka8O5E.roa
Signing time: Wed 27 May 2026 16:15:28 +0000
ROA not before: Wed 27 May 2026 16:15:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201002
IP address blocks: 31.77.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6a:38:32:51:20:a2:43:fb:24:80:b9:31:92:01:6c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 27 16:15:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1f5eeaad77b24e4ac733e51a32478aa46bc3b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:af:2c:64:3d:bd:6b:59:f7:42:b3:f9:11:5a:
de:8d:15:06:d8:0a:71:0c:3b:c5:1b:d7:c7:66:d9:
c0:0a:a4:6b:ca:51:e9:0b:a8:02:16:c9:89:a2:18:
fd:ab:2d:71:83:69:ba:7a:17:d3:83:c5:d4:4b:91:
c8:a6:09:29:e2:16:93:78:36:1c:88:42:76:80:2a:
08:44:bb:29:7f:a0:40:32:81:f0:e8:82:aa:1f:96:
bb:c1:05:97:87:8e:4d:3c:d1:1c:ee:c9:4e:79:9b:
ad:6a:f2:35:4c:43:51:ca:1a:61:9a:ce:2f:12:b7:
0a:ff:39:5a:18:da:ed:d6:3c:eb:e9:dc:a0:73:cc:
25:ca:3a:fa:e9:87:35:cc:5c:82:97:8a:99:e6:26:
09:64:6d:bb:b7:0b:55:4b:ce:10:a3:27:0d:10:93:
fc:80:f4:df:6b:14:c6:a4:b1:32:d1:9c:e6:a9:b5:
c7:70:b0:24:b1:46:c2:b6:63:80:f1:45:43:bf:95:
b8:bb:a3:5e:2f:37:04:a6:2a:15:69:52:6c:9f:be:
9f:a3:d2:ee:f8:96:e6:ad:97:69:4c:73:d0:65:3f:
84:98:51:16:7d:98:95:44:dc:ae:31:1e:0c:d2:5e:
e0:be:cb:8c:c5:8a:8c:7d:70:57:94:44:c8:90:c2:
77:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F5:EE:AA:D7:7B:24:E4:AC:73:3E:51:A3:24:78:AA:46:BC:3B:91
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0fXuqtd7JOSscz5RoyR4qka8O5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.243.0/24
Signature Algorithm: sha256WithRSAEncryption
73:b1:e6:b6:50:fe:a7:72:16:fe:07:28:f8:0a:48:18:02:e8:
c4:be:30:68:8e:d2:87:27:bb:6f:4d:39:37:c1:d8:60:21:26:
34:fc:e4:6b:a1:f4:32:7e:26:55:bf:66:52:6b:a7:61:7d:eb:
48:0d:74:e8:9a:ce:1b:10:95:52:e8:7d:41:0e:a7:f8:8f:14:
c2:fb:d8:ba:96:b5:0e:15:ae:20:74:ac:98:93:39:d1:b3:00:
fd:cb:f1:57:ba:58:b1:ba:8a:97:ab:cf:4b:89:bf:2c:81:78:
eb:57:45:70:03:dc:d1:f5:bc:28:8e:57:4b:18:8b:2a:0b:3a:
16:de:c4:32:e1:af:c3:f8:39:9a:f9:52:39:9e:46:27:01:7c:
3c:5a:d3:3b:c2:77:ee:1e:21:8f:43:7c:4d:d3:ad:22:be:f0:
af:33:52:57:57:cc:26:7d:d1:03:c6:42:07:ab:4c:fb:b7:6c:
47:d5:d0:11:bb:37:9f:e8:74:30:38:9c:b5:2f:6e:3e:4e:05:
c1:13:28:52:81:26:41:74:c0:0a:ed:b5:2b:bc:80:00:cb:53:
9c:a1:dc:9f:59:8e:13:8b:25:4a:4b:14:71:1b:92:a8:53:9b:
d2:c3:1e:66:a9:e2:e3:b2:5d:26:7c:26:a9:21:ff:08:1d:53:
72:13:d0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:08:39 2026 by rpki-client