Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/npqWiPF9HIq3qxOtAsObrj_y8Fw.roa
File: npqWiPF9HIq3qxOtAsObrj_y8Fw.roa (raw, json)
Hash identifier: JnrGGtrIohWmfwZoNyaUFgkWwmOOWOYLjoDlwxNPUnA=
Subject key identifier: 9E:9A:96:88:F1:7D:1C:8A:B7:AB:13:AD:02:C3:9B:AE:3F:F2:F0:5C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E989A52C2A4584AEA81F8B7FB137ED508
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/npqWiPF9HIq3qxOtAsObrj_y8Fw.roa
Signing time: Fri 05 Jun 2026 16:25:10 +0000
ROA not before: Fri 05 Jun 2026 16:25:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200221
IP address blocks: 31.77.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:98:9a:52:c2:a4:58:4a:ea:81:f8:b7:fb:13:7e:d5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 5 16:25:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e9a9688f17d1c8ab7ab13ad02c39bae3ff2f05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:14:2c:c1:68:0e:60:65:d7:bd:45:59:ea:
99:ed:2e:7d:1a:a0:6b:92:24:d7:14:d7:9d:86:7c:
3c:78:79:8f:6d:7c:60:2c:8b:f0:35:97:f0:2b:85:
15:63:ab:ed:b6:ba:9a:19:0d:95:8d:d3:c8:08:8d:
04:6e:4f:03:e6:58:1d:34:33:9f:e6:40:c6:34:48:
a7:8e:5c:20:2a:4f:ce:94:2d:c8:e5:08:d8:7c:12:
47:41:62:74:44:e4:30:2b:b3:7a:78:3e:42:3b:27:
9c:3e:b9:7b:48:78:c6:79:76:9c:62:27:26:de:af:
ba:06:98:72:f5:32:82:5a:43:d6:40:ef:53:2f:1d:
a4:72:4d:88:1a:30:08:bd:b0:d3:a2:fb:73:b1:02:
c7:a1:26:65:e6:91:e8:a3:d4:1e:36:71:dd:4b:2a:
0f:03:3e:79:32:85:ab:c4:f5:de:86:ca:59:2e:71:
5c:50:4c:30:95:8c:e7:70:c9:ce:9c:c2:49:55:a5:
cf:da:fc:a7:cf:f5:65:a1:aa:b9:5c:3d:a1:f8:2b:
5c:a8:09:69:13:0e:72:1e:6e:13:8b:97:3e:7e:63:
fd:a6:b4:1f:2d:4e:45:c0:cb:d5:25:fe:d8:fd:0d:
40:15:dd:84:a6:2d:da:d7:ba:52:7d:22:c3:3c:18:
58:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9A:96:88:F1:7D:1C:8A:B7:AB:13:AD:02:C3:9B:AE:3F:F2:F0:5C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/npqWiPF9HIq3qxOtAsObrj_y8Fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.219.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:37:f4:b6:b7:6e:b7:d8:45:c0:4b:ba:ec:0a:4e:82:7e:25:
69:38:a9:61:33:00:73:4d:f0:f6:60:5e:2b:ce:ed:55:99:04:
ed:ac:21:6d:52:09:06:34:46:6b:9c:f4:e8:47:e8:fc:02:50:
93:f1:ac:c6:84:c4:be:dd:c1:9a:54:42:67:e7:cd:4a:fb:4f:
96:39:fd:31:70:d5:35:5d:0b:93:07:0b:1a:99:b7:ad:5d:5f:
78:de:09:98:14:94:6a:8b:0c:b4:a2:5c:4f:8e:eb:4b:40:85:
80:da:9e:14:d6:d9:d0:bb:16:91:db:ee:49:c8:47:b2:a2:fb:
30:c1:1c:bc:72:63:ec:3d:98:08:ec:57:1f:10:98:44:e8:00:
11:80:54:de:82:c3:7b:d8:9d:aa:4a:2b:1d:c7:08:23:90:9c:
0f:8f:b6:05:4a:b1:11:02:ee:90:ca:f8:ec:3c:1a:dc:dd:81:
d9:a4:b1:96:a2:c7:79:94:6a:1b:62:46:93:9c:7d:78:fd:7b:
d4:4d:c9:34:35:a1:1f:67:ea:37:78:2d:69:62:34:fd:e4:79:
4d:16:23:38:35:3e:5d:70:bb:88:13:8c:9c:4b:81:7b:3f:38:
45:85:e7:ca:48:d3:1d:1d:cb:22:f8:3d:64:8a:e7:b8:02:f5:
40:57:27:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:45 2026 by rpki-client