Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_90mwH5qzfAnYmhp3_y3W7-If_4.roa
File: _90mwH5qzfAnYmhp3_y3W7-If_4.roa (raw, json)
Hash identifier: Zj3QOXj01maUIdWDlE4/mT5pQMTHIVk3MZWma4N4+jQ=
Subject key identifier: FF:DD:26:C0:7E:6A:CD:F0:27:62:68:69:DF:FC:B7:5B:BF:88:7F:FE
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E98C72E853796B2504523FDB90C419DC1
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_90mwH5qzfAnYmhp3_y3W7-If_4.roa
Signing time: Fri 05 Jun 2026 17:14:10 +0000
ROA not before: Fri 05 Jun 2026 17:14:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197715
IP address blocks: 31.77.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:98:c7:2e:85:37:96:b2:50:45:23:fd:b9:0c:41:9d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 5 17:14:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffdd26c07e6acdf027626869dffcb75bbf887ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c5:b3:61:76:23:b8:42:df:4a:3a:a2:05:63:
06:cc:fd:dc:99:ab:2a:e7:60:af:5d:22:c5:c3:7c:
45:fe:59:f6:45:60:73:7e:12:cc:0f:a1:52:6a:63:
9d:86:59:95:c3:52:b4:3a:84:4a:b7:f9:39:a5:32:
c5:fb:d2:12:97:32:d5:50:a7:0d:ea:48:01:fc:8e:
8d:c4:21:0b:a2:28:4c:ce:ce:55:5f:8d:d0:c8:25:
94:8e:06:23:ce:cd:23:81:36:d4:31:b9:3e:ba:18:
ff:84:be:b8:ab:22:38:6f:90:c1:2e:dc:89:bf:90:
1c:11:74:54:59:3e:71:38:ce:78:81:9a:e9:64:91:
5b:cd:94:35:17:15:a7:81:d3:a7:6b:a4:65:56:09:
4c:cc:46:ef:e5:c1:b4:05:e8:0b:a8:93:67:46:b9:
96:6a:f8:7c:cb:0b:ac:a2:08:0b:46:cd:86:d0:ef:
35:48:28:dc:fb:c3:c9:7e:18:72:64:2b:70:84:ba:
f7:ca:97:fe:23:9d:35:a3:98:81:20:a2:f3:c2:8d:
76:e7:a5:7d:7c:d7:27:47:b8:61:65:c5:6a:13:bc:
71:6b:46:21:f8:08:c4:d5:42:ca:54:dd:d9:31:37:
14:e3:a6:a0:f6:22:ed:7d:40:73:44:7f:98:08:8b:
81:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DD:26:C0:7E:6A:CD:F0:27:62:68:69:DF:FC:B7:5B:BF:88:7F:FE
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_90mwH5qzfAnYmhp3_y3W7-If_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.172.0/24
Signature Algorithm: sha256WithRSAEncryption
79:63:e3:b0:90:25:5e:b6:1b:b8:bb:75:1a:86:21:87:83:ba:
bf:54:8c:53:44:d0:3f:1f:ea:e5:41:21:b2:e4:bd:1c:0b:aa:
9a:91:d3:98:f6:51:97:4e:96:2c:61:77:40:9c:ec:bf:57:bc:
fb:e7:14:cd:e0:ca:33:84:1e:cc:24:69:86:b3:cb:e9:99:3a:
f4:31:2c:8c:db:70:45:b2:5e:e8:97:96:7e:fc:4f:ff:99:f7:
af:bd:4b:2a:47:9c:eb:a2:b2:06:68:cf:91:3e:60:ae:49:5c:
00:5d:e0:a4:ee:b5:70:e4:03:21:30:7a:0b:5c:21:7f:01:ae:
82:c8:5c:b4:8f:e5:85:94:0e:0a:ec:66:22:08:c6:29:ae:be:
55:f3:c6:dc:9c:9f:76:25:85:21:26:1a:6a:3c:a9:17:dd:e0:
d5:b3:1d:83:41:8e:11:a0:e2:6d:e5:53:91:bc:6b:63:d8:19:
4c:81:08:4c:73:98:33:81:e9:e0:6e:9f:8a:cd:e9:dd:cf:17:
8c:4f:7a:fd:2f:5a:23:cd:06:85:e4:11:19:3d:8b:10:19:20:
d6:b5:b4:1a:ae:08:e1:24:4a:9d:ae:fc:51:03:72:4e:3b:5c:
df:ce:22:b1:8b:db:f9:ac:3c:3d:57:4d:e2:c1:03:91:72:87:
1f:71:26:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:16 2026 by rpki-client