Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Taf9L2oMa3DZfCG_k0xJBvmCYgw.roa
File: Taf9L2oMa3DZfCG_k0xJBvmCYgw.roa (raw, json)
Hash identifier: HG87FGVJ1RGNkLqhzPmJ6lZlpr/NqlFHh4Q0/vvAhwY=
Subject key identifier: 4D:A7:FD:2F:6A:0C:6B:70:D9:7C:21:BF:93:4C:49:06:F9:82:62:0C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E8F4DF444901C3DABC47894C9223EF547
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Taf9L2oMa3DZfCG_k0xJBvmCYgw.roa
Signing time: Wed 03 Jun 2026 21:05:11 +0000
ROA not before: Wed 03 Jun 2026 21:05:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197462
IP address blocks: 31.76.33.0/24 maxlen: 24
31.76.35.0/24 maxlen: 24
31.76.112.0/24 maxlen: 24
31.76.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8f:4d:f4:44:90:1c:3d:ab:c4:78:94:c9:22:3e:f5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 3 21:05:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4da7fd2f6a0c6b70d97c21bf934c4906f982620c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4f:8e:90:e7:56:01:92:00:f4:89:09:5f:2c:
6a:12:bc:a8:77:4f:8d:a9:d0:ba:a6:7e:8b:96:07:
73:88:a8:34:4c:54:d8:3c:a5:53:41:b7:fb:94:f6:
d2:d2:b8:7e:06:31:73:30:bc:18:3f:f6:6d:85:24:
f5:57:85:f8:64:33:a2:bd:75:bf:c1:ba:35:70:0e:
31:1b:83:d0:43:fb:fc:3f:46:77:c3:26:85:71:37:
05:c2:35:a8:ed:01:23:3a:92:09:b1:d9:06:8e:2a:
84:a9:70:89:a2:1b:2e:9a:7a:b9:9f:82:d3:6b:c5:
e6:aa:05:bd:47:9e:01:9f:36:91:20:f7:0e:57:db:
71:a3:7b:23:e1:02:19:a3:66:cf:ed:14:6d:ce:8f:
17:d9:ee:77:18:d5:3d:0d:6e:9b:a7:86:74:87:6d:
0a:93:a8:37:01:7a:15:68:2a:de:02:c6:5b:56:06:
68:77:20:cf:a8:81:58:1d:48:0f:2c:42:83:cc:ed:
d1:ce:4d:21:5c:bc:3e:6b:ce:7a:aa:66:4b:c3:e8:
ef:4d:79:2a:5a:f9:73:4d:db:30:7d:d2:c0:fa:29:
c5:cb:52:be:b1:64:cb:ca:e1:0b:d4:90:bb:b7:6f:
fe:d4:d5:86:cf:ff:f6:b6:04:60:d9:07:37:94:95:
ef:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A7:FD:2F:6A:0C:6B:70:D9:7C:21:BF:93:4C:49:06:F9:82:62:0C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Taf9L2oMa3DZfCG_k0xJBvmCYgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.76.33.0/24
31.76.35.0/24
31.76.112.0/24
31.76.116.0/24
Signature Algorithm: sha256WithRSAEncryption
22:83:d3:66:7c:3f:d9:2c:43:fa:12:c7:cd:7f:0c:e1:8a:ae:
e9:5b:83:37:ee:81:7a:5d:8a:b5:4c:90:ed:bc:8e:e0:a8:43:
ad:02:69:64:ec:42:f2:b7:85:0b:a6:8f:c5:d0:5b:3a:55:53:
3f:96:ac:99:8b:ce:8b:5c:ae:1f:d8:8b:57:1c:87:59:30:cb:
7c:7a:5e:0e:b9:34:d3:90:9f:42:86:84:67:3b:b8:2d:03:8c:
9b:c8:a2:ee:0c:90:52:d1:0b:c9:b7:8b:43:d3:9f:a1:d8:ff:
6e:43:51:45:16:c6:51:29:9d:84:c8:53:2e:28:94:ec:2c:14:
47:a3:df:30:f0:fd:03:1f:1b:92:82:68:cd:f2:8b:40:0d:a9:
cf:dc:9f:2d:25:32:cd:4f:81:7c:98:86:ed:9b:a5:56:f6:cb:
11:1d:4c:10:de:0b:97:11:b9:54:bd:22:86:27:5e:42:29:4d:
78:d1:2c:18:91:ff:50:6c:39:4a:d6:85:e1:56:84:7c:e3:91:
6d:75:08:28:21:3b:e7:4c:65:aa:1b:33:1b:a1:ea:b3:fb:c0:
b0:8b:82:34:76:d3:e8:ea:67:54:aa:fd:1a:6e:7c:8c:4c:72:
d4:00:10:f5:b1:89:87:fa:2b:b5:b9:44:d1:32:11:f0:1b:4c:
1e:ba:42:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:04:45 2026 by rpki-client