Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0sW15S0VSzSwUoWSdmCQHxCzvWo.roa
File: 0sW15S0VSzSwUoWSdmCQHxCzvWo.roa (raw, json)
Hash identifier: faMKJdbj/33YsKCxSCrYuVO8dSvlcLGwNIWz7LrAAzI=
Subject key identifier: D2:C5:B5:E5:2D:15:4B:34:B0:52:85:92:76:60:90:1F:10:B3:BD:6A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FDDF16263FAAA2C8E402819105A0E82FB
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0sW15S0VSzSwUoWSdmCQHxCzvWo.roa
Signing time: Fri 07 Aug 2026 20:36:51 +0000
ROA not before: Fri 07 Aug 2026 20:36:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198364
IP address blocks: 31.77.227.0/24 maxlen: 24
77.239.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dd:f1:62:63:fa:aa:2c:8e:40:28:19:10:5a:0e:82:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 7 20:36:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2c5b5e52d154b34b05285927660901f10b3bd6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:2a:00:2b:8e:42:fc:09:c0:ab:d8:7b:58:
5e:07:28:10:16:9f:0a:99:e9:6d:db:1c:cc:c5:8c:
b4:25:ea:d4:a0:fc:86:cd:83:0b:11:e1:c1:e2:14:
7c:0d:d7:d3:34:d0:d1:a0:cb:d9:a3:13:bf:7c:22:
06:1f:8b:0b:7b:47:44:b3:b5:6c:d7:41:59:3f:1e:
6c:82:37:2f:84:2d:29:33:7b:49:79:49:7d:63:3a:
a0:90:04:16:da:ce:46:a8:71:7c:74:9a:bd:c2:e0:
ef:27:ec:03:28:be:c9:63:f5:a5:26:9c:5f:4e:93:
ff:28:6e:01:e6:5e:22:da:4e:1c:41:c9:37:a4:5e:
85:5d:c4:da:c6:01:9b:6a:1e:bd:94:b6:59:eb:1d:
1d:69:b9:15:8b:cd:40:f9:4c:2a:65:19:80:80:f7:
81:4f:9a:9b:19:b5:12:c0:0d:81:a9:11:be:41:42:
ab:16:ad:56:75:4e:41:cc:9f:42:96:ae:12:94:65:
00:2d:c5:94:03:a2:d9:a6:54:62:02:fe:a9:47:51:
95:84:79:5c:ab:5b:87:7c:1b:0c:60:34:72:ea:47:
54:c3:2f:91:d3:ea:e9:87:fa:6d:28:4e:c1:8c:cf:
4a:7d:5e:c8:42:48:0d:62:c4:db:ae:14:17:3c:04:
05:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C5:B5:E5:2D:15:4B:34:B0:52:85:92:76:60:90:1F:10:B3:BD:6A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0sW15S0VSzSwUoWSdmCQHxCzvWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.227.0/24
77.239.124.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:7d:de:cc:1a:02:9f:9a:36:fc:8c:da:60:44:41:02:8b:17:
f3:dd:2f:b1:fe:47:8b:53:48:b3:1a:80:80:34:0b:23:5a:91:
63:58:f9:ee:40:61:5c:19:ee:ae:4a:80:ae:74:2b:6e:10:f3:
73:09:16:cd:79:5e:e1:26:00:33:b1:10:f0:3b:05:d8:ab:ec:
f6:ff:2c:60:4d:91:6f:6e:8f:f4:1b:56:68:18:96:5b:72:23:
7c:b6:0d:13:b9:d5:af:21:b3:63:43:db:7f:a8:e0:f9:ba:25:
36:59:2c:14:a7:f5:b3:3e:e8:3a:4c:58:54:66:fa:29:86:c2:
d2:8d:f0:e1:eb:d9:10:9a:96:c8:bc:da:48:84:67:e8:d1:b7:
6b:86:dc:df:1a:29:01:af:50:59:9b:80:3d:3e:0c:3a:b0:15:
2e:4b:44:2a:23:f3:e8:4a:f2:c2:de:5a:24:d3:29:86:af:db:
5f:cd:35:08:e6:ee:12:13:90:c8:23:33:50:5d:67:63:ba:da:
15:ed:bf:3d:06:47:4f:4a:79:7e:44:46:0f:e9:05:55:d2:68:
90:5c:93:1c:17:64:dc:2f:e6:39:cf:71:bb:7e:04:b7:d6:7c:
d0:ca:11:c9:3f:7f:20:c8:89:3b:6f:0b:46:7e:d8:d0:70:02:
a0:3d:17:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:49 2026 by rpki-client