Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/pJ4dC0vMc0RmV9a3AhoM-Jxsfpc.roa
File: pJ4dC0vMc0RmV9a3AhoM-Jxsfpc.roa (raw, json)
Hash identifier: m+I9WM2cL8zL2rDHTFK9JTOee4Lr2mPWj1blzH+wzG0=
Subject key identifier: A4:9E:1D:0B:4B:CC:73:44:66:57:D6:B7:02:1A:0C:F8:9C:6C:7E:97
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0B80EBBA9056362D08991DB9375C2638C
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/pJ4dC0vMc0RmV9a3AhoM-Jxsfpc.roa
Signing time: Sat 19 Sep 2026 05:06:08 +0000
ROA not before: Sat 19 Sep 2026 05:06:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 31.77.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b8:0e:bb:a9:05:63:62:d0:89:91:db:93:75:c2:63:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 19 05:06:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a49e1d0b4bcc73446657d6b7021a0cf89c6c7e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b7:cc:00:d0:04:22:92:d9:14:5b:e6:a6:19:
9e:f9:49:d8:2f:3c:d0:7a:54:d6:f7:47:a6:60:29:
c9:51:a3:56:cf:13:0c:99:d5:43:92:63:91:bb:49:
02:d1:6d:b0:dd:54:d2:cb:85:d7:18:7b:ea:2f:29:
57:fa:c3:50:14:5c:cb:2e:84:3b:f7:55:b4:0c:b1:
d3:c3:6b:9c:f2:a9:2c:0a:f1:ba:25:8b:24:0b:89:
a0:e6:00:0c:5f:79:04:23:8e:43:bb:e1:96:64:9e:
7d:19:2b:aa:28:b5:ef:0a:0a:b2:aa:8b:c3:e0:37:
a5:d8:7e:42:e7:b5:e3:c3:a1:af:41:0f:b4:f9:e3:
4a:19:2e:e7:a4:87:ec:65:cf:8f:4b:63:2f:4f:d8:
b3:61:52:7e:aa:84:c0:7a:cb:49:84:b0:3d:1c:05:
38:cd:0b:bd:47:91:1b:5d:15:93:18:8a:9d:9d:80:
75:b8:a3:2b:ad:e6:32:d0:88:fe:bc:ae:bc:ed:9c:
5f:e3:70:c6:21:c7:7a:ef:23:1d:6e:73:97:17:6f:
6d:c4:c4:94:7e:cf:0e:3d:90:a3:1a:27:b6:90:7e:
6c:e9:06:77:0b:3e:5f:0e:00:0c:82:e1:f3:bf:ce:
71:a0:77:03:02:94:7c:b8:54:3c:bd:e3:c3:92:81:
a3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9E:1D:0B:4B:CC:73:44:66:57:D6:B7:02:1A:0C:F8:9C:6C:7E:97
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/pJ4dC0vMc0RmV9a3AhoM-Jxsfpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.104.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:94:b2:2e:82:49:4a:b0:52:bc:c6:0b:20:52:dd:c9:f0:23:
e8:b9:69:de:cd:92:a3:fd:62:fb:f1:a3:1e:bf:7c:62:19:3d:
6d:9e:0a:a3:01:6d:d8:ea:e3:ff:25:47:c1:2e:c0:b8:d4:3a:
3e:f7:46:28:78:55:ca:be:04:c1:d2:c1:92:2a:34:e6:67:e7:
04:0b:83:93:26:a7:5b:c0:fc:3f:2a:5e:f7:a1:ce:dd:0c:b9:
f2:36:16:11:57:07:52:9f:b2:b4:18:33:ba:11:68:f1:54:fa:
45:41:d4:c1:f3:0a:aa:0d:07:74:35:3b:08:a5:d3:b1:ee:77:
16:83:d7:9a:73:df:1b:5c:a5:d0:04:db:0a:7d:2c:5f:1a:18:
f2:3c:d0:bb:a1:7f:61:ea:49:bf:88:ba:74:eb:07:34:ec:01:
46:33:34:87:b4:67:14:dc:2e:ac:8d:d7:ff:f2:09:92:4f:33:
8c:85:0f:52:43:5d:2b:a2:95:78:cc:12:eb:97:b7:9f:28:05:
32:ec:f1:10:98:02:51:06:60:fe:1c:4d:ac:75:01:0d:1f:ef:
a1:28:4a:1a:59:65:fe:19:74:88:73:5c:68:6a:38:04:f2:91:
cf:cc:98:9b:18:98:b1:e4:d7:0e:c6:2f:71:93:9f:88:a7:20:
2a:40:fa:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaC4DrupBWNi0ImR25N1wmOMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwOTE5MDUwNjA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDllMWQwYjRiY2M3MzQ0NjY1N2Q2YjcwMjFhMGNmODljNmM3ZTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbfMANAEIpLZFFvmphme+UnYLzzQ
elTW90emYCnJUaNWzxMMmdVDkmORu0kC0W2w3VTSy4XXGHvqLylX+sNQFFzLLoQ7
91W0DLHTw2uc8qksCvG6JYskC4mg5gAMX3kEI45Du+GWZJ59GSuqKLXvCgqyqovD
4Del2H5C57Xjw6GvQQ+0+eNKGS7npIfsZc+PS2MvT9izYVJ+qoTAestJhLA9HAU4
zQu9R5EbXRWTGIqdnYB1uKMrreYy0Ij+vK687Zxf43DGIcd67yMdbnOXF29txMSU
fs8OPZCjGie2kH5s6QZ3Cz5fDgAMguHzv85xoHcDApR8uFQ8vePDkoGjlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKSeHQtLzHNEZlfWtwIaDPicbH6XMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvcEo0ZEMwdk1jMFJtVjlhM0Fob00tSnhzZnBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH01oMA0G
CSqGSIb3DQEBCwUAA4IBAQCalLIugklKsFK8xgsgUt3J8CPouWnezZKj/WL78aMe
v3xiGT1tngqjAW3Y6uP/JUfBLsC41Do+90YoeFXKvgTB0sGSKjTmZ+cEC4OTJqdb
wPw/Kl73oc7dDLnyNhYRVwdSn7K0GDO6EWjxVPpFQdTB8wqqDQd0NTsIpdOx7ncW
g9eac98bXKXQBNsKfSxfGhjyPNC7oX9h6km/iLp06wc07AFGMzSHtGcU3C6sjdf/
8gmSTzOMhQ9SQ10ropV4zBLrl7efKAUy7PEQmAJRBmD+HE2sdQENH++hKEoaWWX+
GXSIc1xoajgE8pHPzJibGJix5NcOxi9xk5+IpyAqQPrZ
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:13:54 2026 by rpki-client