Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/VTUdVnoslcglVD0DTHtLVOJ04Qo.roa
File: VTUdVnoslcglVD0DTHtLVOJ04Qo.roa (raw, json)
Hash identifier: Z4lyaKzulHND6rsKnyjMEOVdllktM4w4HtJJzQhqMv8=
Subject key identifier: 55:35:1D:56:7A:2C:95:C8:25:54:3D:03:4C:7B:4B:54:E2:74:E1:0A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E510A1D2EEC72C806126223D790E8C888
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/VTUdVnoslcglVD0DTHtLVOJ04Qo.roa
Signing time: Fri 22 May 2026 18:54:37 +0000
ROA not before: Fri 22 May 2026 18:54:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153169
IP address blocks: 31.77.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:51:0a:1d:2e:ec:72:c8:06:12:62:23:d7:90:e8:c8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 22 18:54:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55351d567a2c95c825543d034c7b4b54e274e10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b4:dd:b3:85:38:43:28:10:16:f9:65:61:9d:
77:3f:be:13:e4:45:f7:4d:a2:8b:48:69:af:8c:00:
48:1a:70:f3:96:b9:a6:53:6c:05:2e:d7:eb:20:79:
5c:c3:a0:f8:7a:56:ec:88:da:dd:d1:29:7b:dc:c1:
26:f9:3a:8e:8f:f9:f0:cf:94:fe:d1:e0:b8:71:01:
18:26:8f:18:66:44:3f:f2:7f:11:5a:43:f0:9e:47:
e9:e3:3d:b0:9e:af:ba:de:2a:19:63:40:0f:0a:fc:
d7:c3:8e:d8:44:a5:6c:62:83:68:8e:12:87:61:56:
e2:f3:25:ef:68:86:05:42:40:96:06:62:41:c3:b8:
bb:bb:6d:b7:25:d0:b8:f3:71:df:6e:29:c2:31:9c:
76:c8:ae:97:1b:7f:e7:80:5b:47:d3:06:73:05:eb:
42:b6:26:01:47:2d:f6:38:22:b8:d1:d4:8c:78:3e:
72:3b:5c:a0:7c:51:02:93:55:6b:20:f7:ce:ec:fb:
fa:d0:53:db:84:aa:78:f3:f3:93:70:4d:76:c7:c4:
d5:5f:d5:62:00:2c:fe:f2:26:a6:6f:1d:db:73:29:
91:d0:77:5a:c7:ed:83:52:f9:26:4d:86:a5:ba:ac:
67:d4:b9:39:bf:82:ad:98:e3:e7:e3:1d:ac:8f:d2:
90:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:35:1D:56:7A:2C:95:C8:25:54:3D:03:4C:7B:4B:54:E2:74:E1:0A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/VTUdVnoslcglVD0DTHtLVOJ04Qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.242.0/24
Signature Algorithm: sha256WithRSAEncryption
32:09:e8:4c:c4:30:d5:dd:c2:55:37:92:50:4e:61:0d:49:63:
c1:d6:8d:67:a8:0f:11:b6:ab:d8:16:fd:32:63:15:77:84:3a:
05:67:44:86:a4:52:cc:09:68:a9:51:65:31:dc:73:48:c5:ee:
ea:07:55:9d:a0:b6:cc:5f:d4:a4:30:03:34:95:c6:49:12:58:
97:e8:9b:0e:f8:c9:6e:3b:f7:fa:0d:28:fb:f2:d4:e1:d6:ad:
f7:5f:76:12:51:47:c6:da:fb:6c:58:88:06:85:73:04:71:e3:
c9:51:82:3c:a3:7d:6c:09:86:51:9d:c0:59:81:de:5f:da:15:
e3:1c:a1:c0:54:d4:4a:0b:1d:f5:94:42:5f:5e:d9:58:d8:ff:
dd:04:e3:75:82:fb:6b:3a:94:5c:ce:7f:aa:dd:32:c2:af:5d:
dc:11:3c:d0:80:c0:63:de:49:42:3b:db:ae:70:18:fc:78:ec:
2b:93:0e:fe:08:d7:5b:b3:6f:68:85:09:9e:00:ae:7e:69:5b:
02:f7:7b:b6:ff:51:97:7d:9b:c2:60:61:1f:97:e5:47:e3:c6:
f1:6a:91:62:ae:06:fd:79:da:cb:e6:6e:1f:75:72:4f:e8:87:
b1:94:2c:5f:52:01:1e:31:6b:18:9d:f9:28:4c:c8:cd:6a:81:
bc:4c:48:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:07:15 2026 by rpki-client