Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OzJ1dWNBZpvT1UBuU3PtB0c-MWk.roa
File: OzJ1dWNBZpvT1UBuU3PtB0c-MWk.roa (raw, json)
Hash identifier: 740J/P+U0WeOBIx+uIMEJ7JCUjLRxchdBqNgAlf0h6M=
Subject key identifier: 3B:32:75:75:63:41:66:9B:D3:D5:40:6E:53:73:ED:07:47:3E:31:69
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019EA95C8280CB9537C0BCDD0811D4F7F241
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OzJ1dWNBZpvT1UBuU3PtB0c-MWk.roa
Signing time: Mon 08 Jun 2026 22:31:12 +0000
ROA not before: Mon 08 Jun 2026 22:31:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151389
IP address blocks: 31.77.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a9:5c:82:80:cb:95:37:c0:bc:dd:08:11:d4:f7:f2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 8 22:31:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b3275756341669bd3d5406e5373ed07473e3169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bc:b4:2a:cc:57:3c:ca:72:a6:fb:5c:a3:7d:
f9:a1:97:36:12:52:c0:e6:4c:df:a7:bf:f5:05:04:
51:55:24:56:09:dd:79:f4:2f:c6:77:2c:75:af:d9:
b1:cc:7d:77:99:3d:9d:bb:83:5c:aa:1c:b4:81:91:
aa:ab:47:98:b2:34:b7:08:56:69:f9:ce:25:dc:9b:
b4:9d:a9:aa:54:25:e7:3c:0c:ac:fb:46:87:5e:f9:
b0:e6:45:54:cc:1a:b9:58:57:77:9c:d1:36:d9:65:
01:25:15:ca:3d:7f:1f:f6:05:fc:a2:6f:1c:d2:aa:
45:c2:63:50:f4:cd:a0:24:7f:fb:dc:4b:05:b2:84:
5d:76:1b:05:d2:d6:95:e0:49:42:c5:9b:d5:65:23:
ed:9b:84:1c:6c:ea:93:d5:07:78:69:c7:f4:e9:67:
67:af:c1:c8:3f:ca:30:92:34:66:31:5b:ff:cf:8a:
69:be:3d:4e:87:67:3d:2e:b4:a6:9b:81:32:89:f5:
17:eb:f0:b1:f6:7c:74:c0:2d:a2:8b:5c:de:57:10:
40:ba:a4:b5:03:40:4f:b9:1f:6b:06:51:93:3f:a1:
01:c8:c4:1a:a9:5d:47:f0:e7:84:86:e2:4b:58:49:
89:d7:84:2f:c5:e5:6a:4d:2e:9d:b0:50:2e:5b:53:
9b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:32:75:75:63:41:66:9B:D3:D5:40:6E:53:73:ED:07:47:3E:31:69
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OzJ1dWNBZpvT1UBuU3PtB0c-MWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.114.0/24
Signature Algorithm: sha256WithRSAEncryption
21:72:ed:33:5a:e3:6c:02:04:a6:57:e1:bb:07:1f:85:8c:0d:
01:b5:25:ed:a2:25:41:15:ab:65:e4:ee:46:f7:87:aa:90:b9:
47:8f:f0:5d:da:73:a6:26:fa:30:56:06:c0:f9:d8:6a:db:a5:
7f:9b:b2:85:c3:1e:fc:80:d0:ae:b4:9f:1c:52:44:d4:9d:d8:
c5:cf:fa:9a:7e:15:e6:f4:f4:00:92:fd:b2:fc:e9:f8:35:07:
57:d3:ca:6a:92:c8:1b:3c:c4:45:b8:47:4e:3a:a0:60:ea:34:
70:e2:34:4f:0e:2f:95:a3:83:35:d2:a0:63:4c:3d:3c:b0:e1:
db:68:ad:41:15:a7:33:17:80:b7:79:b2:70:b3:56:50:c5:ed:
0d:a3:14:23:55:2a:e2:e7:72:9b:c5:57:93:aa:96:24:24:da:
07:d9:59:b7:95:ca:6d:05:3b:46:02:d6:0e:19:e5:55:51:d8:
ab:cb:8a:ad:5c:76:5e:84:3f:24:91:92:fb:2d:69:a1:29:6a:
81:a9:7b:a9:f3:68:54:c6:e9:bc:8b:01:6f:2c:67:23:a6:f5:
79:8e:4e:6f:b0:2a:48:6d:1c:8a:4b:3a:34:82:3c:95:41:bd:
f3:a7:4b:7b:0a:ec:ab:72:ed:4e:a0:b3:98:ae:fc:79:6a:43:
3b:8d:cb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:21 2026 by rpki-client