Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/31s38qTNO6yt_t2cWViMVU8rzT8.roa
File: 31s38qTNO6yt_t2cWViMVU8rzT8.roa (raw, json)
Hash identifier: hHBR9FRB8VGB5NgdUu2OjlV3tCFxVK0wgLqKuADUEY4=
Subject key identifier: DF:5B:37:F2:A4:CD:3B:AC:AD:FE:DD:9C:59:58:8C:55:4F:2B:CD:3F
Certificate issuer: /CN=77c80054e1330ca71b4900d615c2cf2c3ce6cf04
Certificate serial: 019F23690D360B6AC215CB217619B51F0825
Authority key identifier: 77:C8:00:54:E1:33:0C:A7:1B:49:00:D6:15:C2:CF:2C:3C:E6:CF:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/31s38qTNO6yt_t2cWViMVU8rzT8.roa
Signing time: Thu 02 Jul 2026 15:18:34 +0000
ROA not before: Thu 02 Jul 2026 15:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216475
IP address blocks: 194.238.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0d:36:0b:6a:c2:15:cb:21:76:19:b5:1f:08:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c80054e1330ca71b4900d615c2cf2c3ce6cf04
Validity
Not Before: Jul 2 15:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df5b37f2a4cd3bacadfedd9c59588c554f2bcd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1e:25:8a:04:72:8a:d6:c2:d5:ed:a9:de:ec:
8f:db:b7:2f:6c:22:84:97:0a:0f:d1:31:0a:7b:5f:
02:77:38:16:a2:0f:df:29:97:5c:16:ca:ab:53:1b:
3a:7d:98:6f:6d:ba:6d:ca:6b:b0:2e:88:d1:cc:83:
48:ec:75:2a:f9:f4:d0:aa:de:5e:8e:72:b7:e6:11:
13:07:02:91:76:36:cf:10:39:da:b1:2d:fb:48:62:
f3:d2:95:31:17:cd:c2:1d:7f:83:c0:a0:d6:6f:4a:
7d:d6:09:c1:41:c6:68:4e:f5:0d:00:9a:0b:13:59:
5c:73:da:ee:dc:87:d3:d4:73:da:6f:f1:71:1b:f7:
ba:9a:3b:1f:39:8c:08:2c:27:60:d0:d2:ec:2a:78:
12:68:ac:3e:4d:b1:26:d5:59:21:a7:c0:18:16:59:
3d:f7:c4:70:71:9c:95:48:44:06:72:f5:13:f0:9f:
23:8e:2f:43:fc:4a:c7:b8:09:f6:34:cb:8c:b6:83:
76:f5:e7:1a:8e:7d:8f:99:a9:2e:20:ce:c8:0a:12:
18:e5:d7:e1:52:80:ce:68:6e:c2:fe:48:ae:98:11:
40:57:41:4d:2b:c8:84:b6:bb:02:44:ee:34:b7:18:
6e:32:29:e7:5b:9b:63:cd:40:dc:f2:9c:13:9f:23:
18:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5B:37:F2:A4:CD:3B:AC:AD:FE:DD:9C:59:58:8C:55:4F:2B:CD:3F
X509v3 Authority Key Identifier:
keyid:77:C8:00:54:E1:33:0C:A7:1B:49:00:D6:15:C2:CF:2C:3C:E6:CF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/31s38qTNO6yt_t2cWViMVU8rzT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.238.56.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:af:3d:e2:8f:d3:7a:b1:08:3d:db:7d:79:24:1d:7e:58:ff:
27:90:cb:6c:68:ca:bf:5a:20:17:e8:2a:8c:94:35:4f:45:3b:
23:4e:1e:04:e2:8d:11:64:82:63:31:37:13:82:c3:e3:66:3c:
38:80:31:cb:1e:04:e9:42:81:b7:05:1d:43:d0:97:6c:d2:48:
ba:51:b6:21:0a:39:ea:33:9a:4c:30:c7:66:5f:fb:ef:7c:d6:
f9:32:a9:61:4c:55:71:34:ef:b5:57:58:de:53:a7:c2:05:39:
ff:8f:9f:14:82:17:ec:2e:1f:22:a9:37:9e:d8:97:c6:db:dc:
fe:aa:a7:64:10:ba:56:5b:b2:68:2d:b0:d5:fc:96:93:cb:a1:
20:bc:cd:e4:a6:d7:01:11:7e:fc:52:79:ea:85:9c:de:4d:d8:
74:fb:72:a6:9f:fa:fb:7a:34:c8:43:28:ee:3b:14:5e:3b:87:
f9:0d:78:8c:a8:89:30:82:ad:e8:7d:83:c5:7a:f8:b0:60:33:
31:90:c4:2f:f1:2f:54:b5:fc:64:d5:e2:f8:e9:c6:fc:69:fd:
1e:de:e9:6c:0b:11:34:3d:37:43:b5:ad:0c:c2:b2:18:04:f4:
ff:c8:98:6a:d9:ff:ff:53:e3:7e:67:97:de:66:19:1f:f4:f3:
12:cc:dd:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaQ02C2rCFcshdhm1HwglMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzgwMDU0ZTEzMzBjYTcxYjQ5MDBkNjE1YzJjZjJjM2Nl
NmNmMDQwHhcNMjYwNzAyMTUxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjViMzdmMmE0Y2QzYmFjYWRmZWRkOWM1OTU4OGM1NTRmMmJjZDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph4ligRyitbC1e2p3uyP27cvbCKE
lwoP0TEKe18CdzgWog/fKZdcFsqrUxs6fZhvbbptymuwLojRzINI7HUq+fTQqt5e
jnK35hETBwKRdjbPEDnasS37SGLz0pUxF83CHX+DwKDWb0p91gnBQcZoTvUNAJoL
E1lcc9ru3IfT1HPab/FxG/e6mjsfOYwILCdg0NLsKngSaKw+TbEm1Vkhp8AYFlk9
98RwcZyVSEQGcvUT8J8jji9D/ErHuAn2NMuMtoN29ecajn2PmakuIM7IChIY5dfh
UoDOaG7C/kiumBFAV0FNK8iEtrsCRO40txhuMinnW5tjzUDc8pwTnyMYOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN9bN/KkzTusrf7dnFlYjFVPK80/MB8GA1UdIwQY
MBaAFHfIAFThMwynG0kA1hXCzyw85s8EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhnQVZPRXpES2NiU1FEV0ZjTFBMRHptendRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9jNGQwNWYtMTBkNS00ZjhmLTlhMzct
ZTUyMjlhZDUyMTRlLzEvMzFzMzhxVE5PNnl0X3QyY1dWaU1WVThyelQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9jNGQwNWYtMTBkNS00ZjhmLTlhMzctZTUyMjlhZDUyMTRl
LzEvZDhnQVZPRXpES2NiU1FEV0ZjTFBMRHptendRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwu44MA0G
CSqGSIb3DQEBCwUAA4IBAQCLrz3ij9N6sQg92315JB1+WP8nkMtsaMq/WiAX6CqM
lDVPRTsjTh4E4o0RZIJjMTcTgsPjZjw4gDHLHgTpQoG3BR1D0Jds0ki6UbYhCjnq
M5pMMMdmX/vvfNb5MqlhTFVxNO+1V1jeU6fCBTn/j58UghfsLh8iqTee2JfG29z+
qqdkELpWW7JoLbDV/JaTy6EgvM3kptcBEX78UnnqhZzeTdh0+3Kmn/r7ejTIQyju
OxReO4f5DXiMqIkwgq3ofYPFeviwYDMxkMQv8S9Utfxk1eL46cb8af0e3ulsCxE0
PTdDta0MwrIYBPT/yJhq2f//U+N+Z5feZhkf9PMSzN1S
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:56:47 2026 by rpki-client