Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/c9QgewKAH9dpQd3Go7pWYS4gMdg.roa
File: c9QgewKAH9dpQd3Go7pWYS4gMdg.roa (raw, json)
Hash identifier: rWGZcS7altQR2iT4abPTfyy3OCgUy8YAXJMXxpydPJc=
Subject key identifier: 73:D4:20:7B:02:80:1F:D7:69:41:DD:C6:A3:BA:56:61:2E:20:31:D8
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E60A3A52F168F8A2F4E061347ABE1FCD8
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/c9QgewKAH9dpQd3Go7pWYS4gMdg.roa
Signing time: Mon 25 May 2026 19:36:37 +0000
ROA not before: Mon 25 May 2026 19:36:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200084
IP address blocks: 31.77.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:60:a3:a5:2f:16:8f:8a:2f:4e:06:13:47:ab:e1:fc:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 25 19:36:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73d4207b02801fd76941ddc6a3ba56612e2031d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:98:b1:40:3d:e2:73:ea:c4:7b:e2:80:ff:63:
d5:67:e1:34:57:fe:11:01:5c:92:95:94:07:0c:bf:
85:07:16:75:e8:22:50:e1:4a:19:c0:9c:42:ac:79:
0e:70:c5:65:5c:5f:36:82:af:da:c5:fd:0c:10:0d:
03:3f:ab:9a:7c:c2:a7:68:0d:67:e7:6f:04:da:b3:
cb:20:55:c1:4c:81:c3:f7:eb:39:ee:38:2d:07:ed:
50:d0:bd:1f:a9:88:db:15:5e:1e:45:60:da:72:13:
8d:9d:22:e5:4f:92:07:d5:1b:18:19:42:19:e9:0c:
47:68:70:1e:e0:3f:88:e2:d7:ff:7a:db:24:54:3a:
8f:f0:07:94:11:89:8c:bf:33:28:b3:ef:da:92:2a:
5b:6a:00:57:8a:14:e2:50:16:c4:ee:1a:f8:78:91:
e3:73:ac:64:2c:80:4d:55:e4:b4:0f:c1:f0:60:25:
5e:ae:5d:df:9e:17:e3:72:60:b6:7b:f2:a7:fe:fe:
bd:58:90:17:1f:2f:2e:de:8e:06:0e:3a:88:c9:5e:
8c:55:26:74:18:77:b0:c4:57:0a:98:f0:5d:9f:34:
44:a1:6c:d1:f4:f8:72:84:0b:8e:4e:53:a0:87:d9:
ac:16:3d:91:bd:0e:a7:37:76:60:1b:92:98:45:74:
b6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D4:20:7B:02:80:1F:D7:69:41:DD:C6:A3:BA:56:61:2E:20:31:D8
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/c9QgewKAH9dpQd3Go7pWYS4gMdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.243.0/24
Signature Algorithm: sha256WithRSAEncryption
43:40:a6:24:e8:fd:c8:e4:35:40:25:6c:7f:e8:4f:f6:56:9f:
fb:16:5b:ad:41:10:9d:1f:d1:c2:d7:41:9f:ea:f0:d7:70:81:
6c:f7:52:56:28:c2:f3:5d:29:9c:e4:b0:f7:09:b0:53:67:43:
23:6e:65:65:e4:4a:4a:0a:d5:da:75:be:5b:a2:a7:57:8c:95:
30:8b:b1:4f:b1:05:de:f3:23:ff:e5:89:c6:83:f5:fc:ac:87:
e0:9a:0f:17:01:20:1f:fc:ce:7e:a7:26:6c:4f:ac:ce:aa:f7:
bb:30:92:23:e9:09:9a:49:52:c3:28:7d:09:38:8e:6c:2d:da:
6e:25:82:18:af:61:4c:42:c0:f3:fc:95:e1:30:e1:de:b4:1e:
55:fb:45:fb:79:1c:dc:9f:eb:2c:f5:e1:22:d7:bc:1b:8b:c8:
16:8b:52:2a:b4:d3:60:b1:50:db:0e:94:2d:26:a1:87:dd:4d:
cf:9c:00:73:63:a8:08:f5:c4:f4:2c:a5:cd:0f:82:ba:6a:b5:
01:6a:8a:95:8b:a2:79:84:57:07:2f:bd:60:86:70:bb:1d:03:
ea:ca:ae:57:c6:e8:1f:5e:26:85:58:a5:60:61:8a:12:14:07:
15:f1:5d:5f:e7:96:09:86:3d:e9:7b:d5:c6:63:fa:1a:de:a3:
f8:b3:1b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:35 2026 by rpki-client