Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/yx4zRK596--GHdEwDu144-DnTyA.roa
File: yx4zRK596--GHdEwDu144-DnTyA.roa (raw, json)
Hash identifier: 0fPffMdLksTlgO5a9gFfzrwb0Pq7s2W+hby7mKjr+9k=
Subject key identifier: CB:1E:33:44:AE:7D:EB:EF:86:1D:D1:30:0E:ED:78:E3:E0:E7:4F:20
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E703A474024CDF0AD02535CBE96891649
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/yx4zRK596--GHdEwDu144-DnTyA.roa
Signing time: Thu 28 May 2026 20:15:27 +0000
ROA not before: Thu 28 May 2026 20:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198661
IP address blocks: 31.76.86.0/24 maxlen: 24
31.76.95.0/24 maxlen: 24
31.76.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:70:3a:47:40:24:cd:f0:ad:02:53:5c:be:96:89:16:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 28 20:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb1e3344ae7debef861dd1300eed78e3e0e74f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:0d:68:f5:03:b3:57:b3:53:30:d2:eb:a6:
7e:f7:ff:be:13:3a:69:6f:61:d8:3e:d9:98:75:d8:
77:02:bb:46:c8:88:33:f8:d9:f0:bf:3a:72:e6:2a:
69:a9:6b:ea:ef:c9:b6:8c:09:50:2f:8b:68:bb:c6:
23:8c:e1:8d:d9:96:a5:dc:e7:4f:53:15:ba:69:9c:
31:97:7f:78:df:40:dc:f0:39:91:87:b0:9e:08:cf:
c7:b1:d6:6c:3a:b3:07:d0:2c:35:38:db:b6:13:f5:
2c:fe:e5:d3:d4:82:fe:1b:05:84:9f:34:55:67:32:
a0:a8:3c:33:fe:9e:48:68:ce:8c:1f:53:f9:6e:cc:
73:7b:d8:31:39:95:dd:9b:85:54:56:2e:ce:8b:ef:
d1:cc:e8:63:72:db:d7:b0:94:eb:c2:20:b6:09:bb:
a0:7d:3a:d8:17:c6:e2:0e:31:02:3a:3f:01:7b:54:
0d:a7:21:48:f3:72:1b:0b:8f:29:a3:05:bc:3d:57:
84:a1:5f:2e:21:87:c6:0f:ac:9e:f1:19:ec:78:ec:
1c:d6:71:16:99:2c:6f:15:62:5d:69:26:07:7f:9f:
07:15:a2:d4:d4:d0:a0:fb:67:2b:5f:4c:8b:d3:24:
45:cf:aa:86:d9:16:d6:81:75:d3:65:1a:23:65:13:
be:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1E:33:44:AE:7D:EB:EF:86:1D:D1:30:0E:ED:78:E3:E0:E7:4F:20
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/yx4zRK596--GHdEwDu144-DnTyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.76.86.0/24
31.76.95.0/24
31.76.255.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:47:50:b7:ff:39:20:84:95:60:7e:4b:34:30:4a:4b:f9:a4:
0c:9b:13:a9:7b:06:6b:61:8a:00:12:21:44:6a:4b:53:a7:cc:
ef:e8:55:25:cc:2f:0a:02:34:6a:c2:fd:ac:2a:cb:67:e4:f5:
6e:35:90:27:a5:6b:8d:fd:2d:80:b0:6a:08:c1:03:45:39:59:
f8:b4:80:04:b1:80:97:57:a5:22:9e:b8:d4:63:8e:cc:05:fe:
64:82:fa:66:e0:73:34:31:dd:66:75:04:f8:d1:8f:42:e0:07:
e7:57:45:61:8a:f1:8a:7c:82:04:10:38:f8:b2:7c:c3:4d:f3:
32:5d:58:a2:34:29:aa:ab:1a:15:a0:37:32:2b:27:65:82:7c:
37:0f:3c:d4:01:bd:36:d9:02:8d:f6:d0:d5:62:d7:56:5c:d4:
7b:9f:39:85:af:45:46:89:43:6a:08:9a:66:b1:b9:42:70:77:
3d:87:d1:26:80:5d:21:eb:7b:55:34:02:3a:2b:17:6a:86:fc:
3e:81:dc:91:c9:c5:62:03:67:02:9a:bc:f3:0a:86:4a:3b:e3:
98:c6:97:f8:5f:de:cd:58:7d:47:58:cf:2d:29:e1:9e:2c:56:
cd:5a:a8:42:0a:16:2b:98:ea:5e:63:4f:62:81:2c:8a:f5:a8:
79:8b:d0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:19 2026 by rpki-client