Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9ExFe9S4fzs4XW8p5M6sDFLtz6A.roa
File: 9ExFe9S4fzs4XW8p5M6sDFLtz6A.roa (raw, json)
Hash identifier: e5kD9x2kdgihBE8FM6debzbAXlRTatpUBuxZ+4W2vE0=
Subject key identifier: F4:4C:45:7B:D4:B8:7F:3B:38:5D:6F:29:E4:CE:AC:0C:52:ED:CF:A0
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FA47CE46B91D0095EB5D65FB7A6F66D71
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9ExFe9S4fzs4XW8p5M6sDFLtz6A.roa
Signing time: Mon 27 Jul 2026 16:51:15 +0000
ROA not before: Mon 27 Jul 2026 16:51:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402343
IP address blocks: 31.77.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:7c:e4:6b:91:d0:09:5e:b5:d6:5f:b7:a6:f6:6d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 27 16:51:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f44c457bd4b87f3b385d6f29e4ceac0c52edcfa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:58:da:1f:80:1e:61:ef:f6:a6:af:87:f8:68:
1c:13:a0:b5:ae:de:35:c4:bf:97:f3:5e:3f:1d:42:
31:73:0b:3a:ad:4b:a1:c1:1d:65:e7:03:5f:7d:16:
31:b3:f2:4a:dd:b0:8b:bd:24:24:e0:1b:70:f3:8f:
fb:33:eb:bb:1f:e1:a6:65:14:e9:aa:7d:97:7b:01:
be:53:c1:5f:d8:b0:c5:dd:ac:4f:61:8f:ec:db:08:
4b:7f:c1:f0:e1:93:e1:76:1a:76:73:06:d6:d4:0f:
1f:28:db:14:b6:f4:1a:23:96:e3:b0:40:39:9a:c3:
df:80:55:37:39:39:7a:48:50:a6:cd:38:9c:d8:f6:
73:1d:2e:b0:b4:2d:44:fc:23:e9:4c:3d:03:ea:61:
c8:a0:43:b1:bc:9c:e6:ab:26:04:67:69:39:de:3a:
dc:36:75:de:ef:be:c2:6b:98:e8:ae:1a:27:51:e2:
8e:95:a6:0e:f0:90:84:d1:b9:72:c8:26:2c:ec:3b:
b4:62:67:40:84:5f:26:d7:cf:d2:5f:85:df:30:0a:
94:d9:df:0f:66:16:d1:4d:a6:25:4c:72:7b:83:9b:
4c:38:96:c1:f5:a6:48:ae:e1:69:81:37:0b:71:48:
9c:f0:bb:c5:c6:4f:70:ef:30:8c:ff:50:02:0f:4d:
93:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4C:45:7B:D4:B8:7F:3B:38:5D:6F:29:E4:CE:AC:0C:52:ED:CF:A0
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9ExFe9S4fzs4XW8p5M6sDFLtz6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.124.0/24
Signature Algorithm: sha256WithRSAEncryption
02:35:3b:01:1b:b5:ad:1f:f6:1e:2a:98:3d:f0:c1:1e:64:a9:
da:7c:33:36:4e:53:02:12:a2:2f:ad:f2:32:6f:fd:61:96:1b:
0e:2c:87:36:78:04:9b:35:f8:43:84:7a:fc:4c:8e:1b:62:70:
71:df:53:ef:61:05:b9:fd:05:b9:d3:a3:6b:70:c7:20:31:0a:
e5:20:5f:6e:87:fe:cf:d3:4c:e4:77:01:a2:bd:b6:8c:5a:57:
9c:f4:4e:f5:f8:3d:21:e2:2f:ca:56:e3:8c:ce:78:19:0b:5f:
26:b8:f3:df:44:5b:7c:19:0b:ba:91:f5:49:4e:5b:b0:47:8c:
5c:a4:24:01:c3:11:3e:03:8d:c4:a8:4e:68:0c:9a:de:23:ad:
11:7b:67:3f:e4:e4:db:70:73:cf:ea:ed:83:f4:99:4b:ac:d2:
96:45:f6:cd:6d:72:e9:c7:7f:a8:1f:6a:6f:3a:20:b3:69:30:
93:4d:47:b9:40:11:55:ff:5a:1e:24:c6:23:4c:7c:7c:73:ba:
4f:3a:96:58:4e:4a:46:5e:cf:70:92:50:90:c2:bb:e2:e7:c5:
8d:b6:97:d6:61:d2:ad:b7:26:a4:de:c4:b4:1b:f8:89:de:37:
77:00:af:55:42:42:7d:c9:48:7f:31:8e:e2:ce:ba:d2:75:65:
e6:e4:c2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:05:00 2026 by rpki-client