Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/kfep9YLl8Ti3EumiA8Ovb25157o.roa
File: kfep9YLl8Ti3EumiA8Ovb25157o.roa (raw, json)
Hash identifier: u7kCl+qT65Xu9SDU6TBgSXnyhYacLJLYBWpePc7I5bQ=
Subject key identifier: 91:F7:A9:F5:82:E5:F1:38:B7:12:E9:A2:03:C3:AF:6F:6E:75:E7:BA
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E6A3831968B3628043299CFEAF207F9F2
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/kfep9YLl8Ti3EumiA8Ovb25157o.roa
Signing time: Wed 27 May 2026 16:15:28 +0000
ROA not before: Wed 27 May 2026 16:15:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23532
IP address blocks: 31.77.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6a:38:31:96:8b:36:28:04:32:99:cf:ea:f2:07:f9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 27 16:15:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91f7a9f582e5f138b712e9a203c3af6f6e75e7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b6:80:83:22:44:67:66:41:5b:27:12:3d:52:
ab:5d:70:0d:42:39:05:89:f5:aa:3b:a2:01:bd:11:
1a:f9:12:78:4d:4c:bc:53:97:b3:03:61:6a:74:94:
dd:2d:46:25:f5:9a:de:2d:69:61:d5:f1:cc:13:92:
13:f6:6f:b9:be:da:14:96:dd:3f:d9:34:da:ba:d6:
26:19:0d:cd:6b:bf:69:51:9a:2a:97:99:a1:bd:a3:
a5:54:3f:80:45:aa:86:50:3f:3d:f2:b0:47:5f:16:
d7:af:0c:dd:0b:5b:6e:a5:53:24:4e:df:7b:0f:eb:
39:1b:6f:3e:d1:0d:be:a4:c6:0e:4c:5e:8e:25:52:
cd:e6:4f:4a:60:30:f4:1e:f1:12:a4:fa:b5:97:bb:
aa:38:b3:e5:e6:35:9d:a9:db:15:17:40:15:8d:76:
a3:85:0c:ec:28:95:ca:56:8d:85:ff:1d:9f:22:59:
87:a3:84:63:2c:01:ee:bf:f9:ad:72:37:5c:f4:75:
55:d5:b4:a9:12:42:b1:a8:8d:67:b7:55:2e:e2:7e:
e1:67:b5:67:a6:ca:ef:24:d1:83:1d:39:f3:77:dd:
01:47:8b:1c:fd:d9:20:07:05:51:67:50:94:6c:34:
15:67:04:8f:fb:fc:d3:cf:06:c8:73:66:e3:81:3c:
d2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F7:A9:F5:82:E5:F1:38:B7:12:E9:A2:03:C3:AF:6F:6E:75:E7:BA
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/kfep9YLl8Ti3EumiA8Ovb25157o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.104.0/24
Signature Algorithm: sha256WithRSAEncryption
56:d1:21:fa:62:f6:85:a5:c5:43:98:99:c8:7c:81:59:d0:94:
78:7c:d5:e0:8f:bf:62:d5:8a:e7:87:33:99:b4:6e:35:35:f2:
22:95:53:04:bc:3b:5a:85:f5:c1:6a:92:b8:48:4b:96:ae:7d:
57:68:b8:b4:32:99:f8:40:a0:26:80:0b:55:78:aa:75:ca:c3:
2c:ab:05:ac:2e:2d:32:45:f9:4b:54:f3:49:8e:b7:ca:44:fe:
08:fa:6e:9a:97:3f:2f:5e:45:f2:33:6d:a0:61:8d:56:f2:a3:
b4:9f:cd:d1:11:a8:12:bb:58:fb:00:00:03:36:6f:50:74:c3:
5c:27:42:48:37:72:4c:24:d1:e0:fb:c4:f8:4d:a1:19:9d:d7:
ae:91:4e:c1:d4:6a:d3:54:6f:37:da:06:9d:47:ff:f6:5b:0c:
cd:29:01:7a:56:b5:d6:25:c6:b9:45:4f:bc:64:51:be:2b:73:
3d:ec:bc:ea:77:50:32:61:ef:5a:e2:09:31:1f:a1:f7:c7:99:
97:00:10:05:66:08:f2:c3:7e:eb:3b:3c:32:22:b6:31:89:af:
6e:55:c2:46:d3:34:26:b1:6c:c3:60:f4:f6:fd:89:e2:de:6b:
15:23:a3:99:66:c3:b1:ae:bc:40:93:b4:a8:d5:2c:c7:33:bf:
d6:8b:cf:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:32 2026 by rpki-client