Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/eQzoVfHZngt4putXGSgLOvG4WG0.roa
File: eQzoVfHZngt4putXGSgLOvG4WG0.roa (raw, json)
Hash identifier: pLw8AroqhQG3ZZ6JKgqgtkHGZqHK5spvyDa15gLM4/Y=
Subject key identifier: 79:0C:E8:55:F1:D9:9E:0B:78:A6:EB:57:19:28:0B:3A:F1:B8:58:6D
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E4B9ADC169580094A63CD12419EC706BF
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/eQzoVfHZngt4putXGSgLOvG4WG0.roa
Signing time: Thu 21 May 2026 17:35:00 +0000
ROA not before: Thu 21 May 2026 17:35:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402475
IP address blocks: 31.77.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4b:9a:dc:16:95:80:09:4a:63:cd:12:41:9e:c7:06:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 21 17:35:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=790ce855f1d99e0b78a6eb5719280b3af1b8586d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:42:a2:bf:64:d0:8d:b8:13:a7:af:ff:ff:8e:
59:2a:35:e8:33:df:bb:3e:49:42:b2:0f:00:eb:66:
42:9f:9b:9c:6d:25:d2:19:93:3c:a1:32:29:ec:5e:
b0:5b:7c:37:96:05:d0:4a:1e:37:34:dd:c9:e8:d3:
75:19:64:7f:e5:3d:ca:0c:72:4a:60:5e:9d:dc:bc:
41:a4:e4:ea:26:24:d4:60:b8:db:22:7d:24:03:3d:
fd:d9:50:0c:9f:b8:11:f5:1b:e5:b2:3a:fe:98:4a:
14:3b:2c:df:46:09:fa:26:3a:71:1f:6a:49:d3:d1:
81:fa:51:3a:57:54:ab:75:90:91:d7:2c:19:4c:02:
7a:0d:63:61:42:34:1b:e4:85:08:12:4b:af:bf:8c:
b9:00:d3:54:43:16:39:54:fb:8d:92:87:4d:3b:7b:
67:02:27:62:6f:5e:08:07:78:61:5e:e8:fd:5b:b0:
38:19:ef:21:e8:6d:b1:3e:fa:d9:93:9a:62:11:92:
b4:47:f7:21:67:06:d0:0d:6e:2b:aa:a2:c9:9d:4a:
17:b7:ba:46:36:15:48:99:61:e0:28:3c:0a:56:56:
a7:24:8a:96:4d:cf:de:71:04:2b:76:97:6a:cc:68:
a3:41:6e:1d:f5:0a:67:63:2f:4a:cb:a5:c1:34:c8:
11:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0C:E8:55:F1:D9:9E:0B:78:A6:EB:57:19:28:0B:3A:F1:B8:58:6D
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/eQzoVfHZngt4putXGSgLOvG4WG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.244.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:74:8c:75:eb:78:d7:5e:b1:80:57:9e:e1:de:09:03:90:7c:
1c:87:82:d4:ac:5b:06:8c:89:da:e8:18:8a:cd:74:71:02:43:
e8:d0:88:8a:be:e0:8a:d3:3e:0c:97:9c:74:65:e9:85:5b:fe:
1a:c9:42:97:57:98:ca:e0:ea:55:33:9c:48:c1:06:8c:68:af:
79:d0:d6:21:9d:6d:50:ea:01:f7:4f:fa:31:bb:68:02:87:ae:
7b:d7:a2:61:bc:be:0e:db:99:2c:6e:90:46:5e:be:4d:1b:a2:
d1:62:8c:ee:0c:1b:9b:be:9a:21:19:da:da:f2:18:43:4f:67:
31:9f:02:50:f0:c2:35:ad:f1:f1:ac:90:70:54:b6:cc:f2:52:
8c:ec:99:d1:9e:9c:b2:63:ea:51:a5:73:14:a3:91:19:08:a0:
01:99:5b:e4:a1:dc:ad:77:30:11:fa:af:92:a7:42:c9:aa:a4:
e9:00:ad:b6:f2:0d:99:60:23:2b:a8:35:89:ce:f2:23:be:c1:
cb:85:9c:72:8d:c7:d3:07:0c:ad:13:75:7f:fd:71:77:8b:d5:
1e:b9:6b:b5:73:5d:c9:22:84:1e:57:58:32:66:76:c8:d0:40:
68:8f:d0:c0:d5:48:1f:5f:7d:bf:4c:29:75:11:97:8c:7a:32:
e0:24:57:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:08:17 2026 by rpki-client