Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jidIHO0WuEiUfLRZOcxQvN_hudw.roa
File: jidIHO0WuEiUfLRZOcxQvN_hudw.roa (raw, json)
Hash identifier: DS28Zi25+oyVgOIjWw80scVPFtrgOHmOrwr0ZvdpUhs=
Subject key identifier: 8E:27:48:1C:ED:16:B8:48:94:7C:B4:59:39:CC:50:BC:DF:E1:B9:DC
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E7F51CE50EE1E03FED587EA041989DD57
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jidIHO0WuEiUfLRZOcxQvN_hudw.roa
Signing time: Sun 31 May 2026 18:35:28 +0000
ROA not before: Sun 31 May 2026 18:35:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197223
IP address blocks: 31.77.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7f:51:ce:50:ee:1e:03:fe:d5:87:ea:04:19:89:dd:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 31 18:35:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e27481ced16b848947cb45939cc50bcdfe1b9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:04:8d:8c:7b:be:8b:95:0d:27:19:2b:4d:62:
61:34:3b:c9:60:a7:ba:81:8e:f3:a2:3b:2b:22:24:
54:3d:93:f8:3a:fb:a0:f3:2f:88:d7:3d:1e:96:d2:
a2:93:da:f5:e8:14:0f:eb:c2:be:7d:ea:e9:ed:b3:
19:77:c1:a9:de:76:35:f4:06:3e:44:5f:80:7a:70:
8f:8d:9e:dd:7d:cd:82:83:9f:3f:93:a8:ae:52:b4:
9a:67:fd:84:c8:4f:48:ac:26:2c:83:96:38:52:79:
b0:a6:4e:0a:b7:9b:36:ed:ef:df:de:39:4e:d1:f3:
bc:48:21:70:28:83:ce:ec:5b:09:66:4b:22:10:c4:
d1:5d:b9:3d:13:91:2f:87:5f:e9:ef:de:8c:2b:55:
ad:60:f1:66:6b:71:e0:30:bd:3a:09:24:68:2d:9d:
f9:15:17:71:74:e1:86:5d:38:0b:ee:d7:25:e6:8f:
d0:60:01:3d:48:7d:e2:b8:2e:c9:ff:c2:87:a3:18:
cf:c3:fb:5b:f0:20:d0:70:61:39:5f:9f:db:8a:7c:
b2:d3:fe:7c:b2:a1:10:9e:6b:eb:3a:7c:6b:19:01:
67:0b:7c:d0:77:e0:a8:9c:7c:56:b8:59:43:d1:ca:
5b:37:76:37:e2:b0:6b:ef:f1:b7:a0:35:4c:36:fd:
98:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:27:48:1C:ED:16:B8:48:94:7C:B4:59:39:CC:50:BC:DF:E1:B9:DC
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jidIHO0WuEiUfLRZOcxQvN_hudw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.123.0/24
Signature Algorithm: sha256WithRSAEncryption
99:40:2c:8b:66:53:31:bd:f8:53:4e:33:f5:2f:39:21:03:ef:
a2:24:b8:04:f1:c1:74:35:96:55:85:0e:57:89:e1:c5:bd:a4:
f1:6f:22:ac:67:1f:17:88:2b:cf:a3:02:da:6c:3c:7e:d4:3d:
f7:39:d8:c3:07:60:39:f5:3b:02:ae:bd:3f:7d:3d:75:43:a2:
63:ac:90:7e:38:5f:c0:8a:e6:37:23:1f:f4:51:2d:65:93:76:
1c:05:c8:67:ac:a3:70:e4:c9:c2:4a:8d:78:22:35:90:fe:3c:
2d:73:51:df:a9:ac:62:9f:02:ff:d4:aa:46:eb:de:83:8c:8c:
13:53:91:33:e9:25:77:97:1e:db:1b:51:34:96:2e:c2:ce:f8:
5b:60:45:df:05:ca:d0:e3:d8:b1:cd:84:51:8b:7a:90:b1:46:
53:d4:68:14:dc:6e:c5:66:a9:c5:ba:31:2e:fa:d9:9b:92:aa:
4e:27:1f:6d:51:9b:df:f4:f5:3d:3d:70:e8:b0:1d:bb:13:8f:
74:21:e9:5f:6a:94:1b:f7:7f:ab:ee:82:12:f3:65:45:14:93:
8b:65:ce:2f:10:65:97:05:62:b0:31:18:e6:d6:01:b2:20:72:
15:fd:9d:d7:90:a5:34:8b:bd:db:e0:4a:76:9d:44:ee:b5:36:
7a:b0:a9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:02:21 2026 by rpki-client