Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/mVvb-wtFFuu1kKP8LQJ4AFHinXk.roa
File: mVvb-wtFFuu1kKP8LQJ4AFHinXk.roa (raw, json)
Hash identifier: hHW8ZXbwOnefio8R7LG/DmOzZNqK62Zyid+iaWkhUQs=
Subject key identifier: 99:5B:DB:FB:0B:45:16:EB:B5:90:A3:FC:2D:02:78:00:51:E2:9D:79
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E9E00C4F4E66846078F1ECC0BC4821D47
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/mVvb-wtFFuu1kKP8LQJ4AFHinXk.roa
Signing time: Sat 06 Jun 2026 17:35:11 +0000
ROA not before: Sat 06 Jun 2026 17:35:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 31.77.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9e:00:c4:f4:e6:68:46:07:8f:1e:cc:0b:c4:82:1d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 6 17:35:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=995bdbfb0b4516ebb590a3fc2d02780051e29d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:99:f3:54:5a:3c:e6:89:08:63:48:fb:7a:
21:6f:47:e9:51:e0:87:18:dc:fb:5a:57:9c:61:3a:
ab:a9:63:d5:eb:95:7d:24:d9:f4:89:af:71:4d:53:
ab:eb:7c:cb:d0:d0:08:0c:bb:ad:0f:89:ae:7e:6a:
1b:91:2b:38:d6:d3:5b:be:6b:80:75:73:04:0e:02:
ee:81:05:d8:c9:44:11:ec:d2:13:49:0c:3c:4a:68:
c3:d9:26:b0:90:d7:48:c9:f1:ca:33:dd:7a:07:a0:
e6:a1:92:4a:9e:40:da:15:6d:7c:1c:53:db:e1:89:
28:7f:13:ab:1a:00:44:19:40:99:5a:1f:45:c5:1a:
f6:f4:04:06:70:bb:9a:ce:a8:1d:31:34:9a:df:e9:
22:2c:c4:7d:46:be:5a:21:c8:78:70:bd:b0:75:dc:
e8:35:9d:c4:c3:46:3d:98:96:e7:f9:5c:06:5a:18:
79:d8:59:3c:21:e6:b9:1e:30:e5:a7:31:6e:91:85:
b0:8a:ed:9f:af:40:3b:73:4b:1d:c4:71:9f:de:c8:
6f:6e:3e:c2:8b:53:fa:fe:e3:35:04:61:a8:a3:80:
5b:cb:36:71:e5:48:c0:81:b8:26:19:88:97:bc:ae:
89:06:a3:bf:0b:10:74:e8:d8:5a:98:c6:b1:84:9f:
94:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5B:DB:FB:0B:45:16:EB:B5:90:A3:FC:2D:02:78:00:51:E2:9D:79
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/mVvb-wtFFuu1kKP8LQJ4AFHinXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.104.0/24
Signature Algorithm: sha256WithRSAEncryption
77:13:83:4a:d9:1a:28:fd:c5:69:f3:c2:cb:f4:f0:41:2b:f2:
a7:a2:f5:01:02:1c:b3:7c:53:a1:2e:c1:3a:17:db:ab:b2:1b:
9b:7e:32:4f:89:12:f0:06:26:ae:26:79:ba:51:fd:f5:1e:ac:
b9:20:8e:a7:04:56:20:3a:24:f9:e8:0f:d8:5f:2c:e6:d1:b0:
28:f9:86:50:80:da:95:d9:b9:fd:f9:ab:fb:5b:3c:33:df:e2:
e6:7e:94:19:19:b1:f7:f0:bb:c3:57:55:6b:75:30:14:1a:09:
bb:5c:0a:19:21:09:7d:28:ce:90:ec:39:6d:87:31:dd:a4:f9:
66:f1:cb:56:2e:08:85:76:e5:44:58:05:44:3e:97:37:ac:dd:
82:6f:c9:9b:e9:67:e4:a4:4c:3a:9d:36:16:61:11:d1:c7:78:
e8:c2:68:a2:90:b9:58:b7:84:ab:b5:29:01:cf:b6:9d:56:04:
73:c4:66:8d:c2:96:f0:23:4b:1d:f8:d0:8d:55:a8:e4:52:69:
c9:1b:60:6d:9f:b1:53:8f:11:7e:39:2f:e0:db:3c:d4:ea:58:
e7:76:18:49:a5:7d:60:72:6e:e0:9b:ab:35:45:06:16:91:a7:
59:23:6f:72:04:14:6c:ce:da:7c:1b:bb:79:06:08:b6:69:14:
63:f6:cb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:05:00 2026 by rpki-client