Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/aKyU54QOvs0S-bTn1XebdUOyJn0.roa
File: aKyU54QOvs0S-bTn1XebdUOyJn0.roa (raw, json)
Hash identifier: EN9PeLy6Pg/Gaews08mn6pZxyngIItV/zOsz0+tvOvs=
Subject key identifier: 68:AC:94:E7:84:0E:BE:CD:12:F9:B4:E7:D5:77:9B:75:43:B2:26:7D
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E419AB27D1CBFD17E82012FB1B3122EC8
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/aKyU54QOvs0S-bTn1XebdUOyJn0.roa
Signing time: Tue 19 May 2026 18:58:37 +0000
ROA not before: Tue 19 May 2026 18:58:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402402
IP address blocks: 31.77.224.0/24 maxlen: 24
31.77.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:41:9a:b2:7d:1c:bf:d1:7e:82:01:2f:b1:b3:12:2e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 19 18:58:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68ac94e7840ebecd12f9b4e7d5779b7543b2267d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:16:30:ff:b8:ca:54:5b:13:39:0b:2d:0d:fc:
e4:ac:2a:06:f1:63:b0:78:57:be:76:3e:8b:7b:dc:
87:22:02:c1:dc:ba:aa:26:36:62:2b:7f:d2:eb:23:
ee:ab:74:6c:66:fe:d7:16:83:57:6f:4b:53:3d:2e:
f8:15:1d:98:d8:b8:2f:9d:51:dd:76:8c:9a:1c:6e:
82:6d:79:56:8b:b3:a0:cf:2e:d7:d8:fb:f2:e5:b3:
3b:f4:f5:8e:40:4d:21:b3:a5:eb:a0:35:4e:84:63:
e7:99:b1:6b:41:68:ae:11:10:49:96:7a:5d:23:75:
2d:85:e3:a7:96:05:91:dc:66:a8:35:71:6d:70:82:
4a:e7:12:38:a8:cb:07:d2:85:4d:08:c2:62:37:f0:
98:23:1b:77:aa:ce:1b:a3:58:10:52:da:bf:a1:c7:
5f:e5:db:33:bf:7e:14:bb:79:64:44:07:99:6d:65:
f9:d7:00:89:60:04:9b:cb:45:b0:78:2e:ba:00:3d:
d2:d8:e2:2e:fd:8b:41:42:93:14:69:15:f1:15:4a:
e8:0d:02:ec:bc:e9:db:02:71:04:b9:a1:02:86:24:
54:f6:9a:d7:26:21:a1:f6:7f:48:b6:2c:c3:1e:cd:
be:57:8d:95:85:53:87:26:ff:cc:bb:02:2e:cb:a9:
c4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AC:94:E7:84:0E:BE:CD:12:F9:B4:E7:D5:77:9B:75:43:B2:26:7D
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/aKyU54QOvs0S-bTn1XebdUOyJn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.224.0/24
31.77.237.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:43:5b:7e:23:e3:6f:09:76:64:af:7c:44:67:06:fa:d0:f5:
ff:79:85:de:73:41:97:0e:16:e7:a1:30:95:b3:74:9d:6b:40:
60:2c:96:c6:cd:33:85:ec:94:e0:d4:84:b7:12:53:ca:a1:c5:
01:87:6f:64:69:d4:60:65:ce:60:b1:1f:f6:ee:16:58:b7:50:
5a:18:00:8d:49:a1:b5:53:02:ff:32:82:20:8e:0a:5c:e3:cc:
d8:d1:7f:6d:79:5b:c1:50:1e:b9:e2:f2:d2:fc:ac:e5:a2:07:
90:fc:2a:b2:45:4c:f8:e2:91:53:b6:55:f3:61:70:f7:55:ab:
e4:7c:a5:3e:8f:4f:01:96:14:be:e8:75:43:c4:e6:99:ac:0c:
83:c4:58:34:fe:c3:1c:23:a4:44:54:55:43:de:4c:e4:73:fc:
5e:f8:ae:a4:48:84:e9:8c:10:4b:59:b2:17:3e:50:28:93:0c:
53:a0:31:21:76:22:d6:6c:cb:87:22:cc:fc:93:f4:71:1d:c1:
cd:b9:20:d8:39:56:e6:04:54:bd:6a:58:08:76:de:76:6a:07:
66:98:b6:5e:f4:06:10:71:e3:d3:47:ee:48:13:dc:21:32:91:
99:d5:ee:aa:39:d7:1e:21:a0:47:11:80:46:b6:54:18:e9:57:
6d:16:1c:38
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ5BmrJ9HL/RfoIBL7GzEi7IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNTE5MTg1ODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGFjOTRlNzg0MGViZWNkMTJmOWI0ZTdkNTc3OWI3NTQzYjIyNjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRYw/7jKVFsTOQstDfzkrCoG8WOw
eFe+dj6Le9yHIgLB3LqqJjZiK3/S6yPuq3RsZv7XFoNXb0tTPS74FR2Y2LgvnVHd
doyaHG6CbXlWi7Ogzy7X2Pvy5bM79PWOQE0hs6XroDVOhGPnmbFrQWiuERBJlnpd
I3UtheOnlgWR3GaoNXFtcIJK5xI4qMsH0oVNCMJiN/CYIxt3qs4bo1gQUtq/ocdf
5dszv34Uu3lkRAeZbWX51wCJYASby0WweC66AD3S2OIu/YtBQpMUaRXxFUroDQLs
vOnbAnEEuaEChiRU9prXJiGh9n9ItizDHs2+V42VhVOHJv/MuwIuy6nEVwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGislOeEDr7NEvm059V3m3VDsiZ9MB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvYUt5VTU0UU92czBTLWJUbjFYZWJkVU95Sm4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAH03gAwQA
H03tMA0GCSqGSIb3DQEBCwUAA4IBAQCmQ1t+I+NvCXZkr3xEZwb60PX/eYXec0GX
DhbnoTCVs3Sda0BgLJbGzTOF7JTg1IS3ElPKocUBh29kadRgZc5gsR/27hZYt1Ba
GACNSaG1UwL/MoIgjgpc48zY0X9teVvBUB654vLS/KzlogeQ/CqyRUz44pFTtlXz
YXD3VavkfKU+j08BlhS+6HVDxOaZrAyDxFg0/sMcI6REVFVD3kzkc/xe+K6kSITp
jBBLWbIXPlAokwxToDEhdiLWbMuHIsz8k/RxHcHNuSDYOVbmBFS9algIdt52agdm
mLZe9AYQcePTR+5IE9whMpGZ1e6qOdceIaBHEYBGtlQY6VdtFhw4
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:29 2026 by rpki-client