Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-sGAxsNlX-tilzKtCwo4SMJCsbM.roa
File: 1-sGAxsNlX-tilzKtCwo4SMJCsbM.roa (raw, json)
Hash identifier: I6jgXkmfDKQyoYsFKOG5ZJBnaFb9o4ZugvHK4KtUvgA=
Subject key identifier: FA:C1:80:C6:C3:65:5F:EB:62:97:32:AD:0B:0A:38:48:C2:42:B1:B3
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FB9B295C8ECCF850C0692E703E3F5B821
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-sGAxsNlX-tilzKtCwo4SMJCsbM.roa
Signing time: Fri 31 Jul 2026 19:41:56 +0000
ROA not before: Fri 31 Jul 2026 19:41:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216039
IP address blocks: 2.27.7.0/24 maxlen: 24
31.76.108.0/22 maxlen: 24
31.76.246.0/24 maxlen: 24
31.77.100.0/24 maxlen: 24
144.31.220.0/24 maxlen: 24
144.31.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b9:b2:95:c8:ec:cf:85:0c:06:92:e7:03:e3:f5:b8:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 31 19:41:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fac180c6c3655feb629732ad0b0a3848c242b1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:de:9b:b6:fb:18:1c:8a:48:bc:e1:2d:44:ce:
30:ef:b9:f1:9c:a4:74:d0:c9:92:27:31:27:64:39:
cf:5c:3a:ca:19:eb:e2:d2:2e:05:d0:12:ba:fa:e7:
7c:8e:99:34:69:08:d7:85:45:d1:b5:fb:11:db:55:
52:d4:15:f0:8e:c7:3d:55:65:95:6e:24:0f:e9:13:
5b:97:8d:09:24:f3:4e:cf:8a:c6:4f:70:24:62:68:
ea:10:03:24:28:2b:ac:b2:76:d6:2c:01:87:d5:49:
bd:3c:f5:02:6a:68:91:e7:04:39:58:c6:e3:c3:32:
15:e9:89:96:03:c1:82:db:98:68:78:b0:b9:7c:00:
c9:c6:f9:2c:b4:8d:43:b9:29:5a:fe:8c:56:1c:5f:
9a:67:ee:5b:1f:e8:89:98:5c:b1:09:4b:2d:c6:82:
22:b4:fa:3e:4e:53:b7:4f:4e:c1:17:96:fa:7a:b9:
c6:4e:d3:47:c3:02:65:82:3e:6a:d5:54:47:24:16:
02:7a:d4:98:55:eb:00:3a:bb:98:36:f3:60:23:e6:
a1:78:b2:ad:3a:98:a8:41:57:15:99:f0:7a:b4:53:
b3:69:c2:ba:b3:07:d0:5a:7c:5f:db:38:8a:f2:a8:
3a:8e:28:18:41:98:74:a0:a1:6b:7a:8c:1e:66:42:
ce:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C1:80:C6:C3:65:5F:EB:62:97:32:AD:0B:0A:38:48:C2:42:B1:B3
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-sGAxsNlX-tilzKtCwo4SMJCsbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.7.0/24
31.76.108.0/22
31.76.246.0/24
31.77.100.0/24
144.31.220.0/24
144.31.225.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:cb:2b:be:d1:50:be:75:07:48:b6:8f:52:86:47:13:54:bc:
75:fb:9e:8c:3c:50:3e:47:5e:e3:0e:7b:f8:db:9e:f4:38:2b:
9d:55:f9:28:69:b9:ba:ec:af:4a:29:da:16:bb:1b:c1:7e:d4:
7e:c6:a6:60:87:c4:4f:1f:d3:2c:8f:2d:f6:0c:02:7e:ae:48:
2f:bf:19:16:53:55:b8:6b:0e:7f:e6:1c:13:c9:ec:ec:86:96:
ce:9b:d5:4c:5c:41:73:e4:bb:29:5d:6f:86:01:20:2a:61:09:
ad:da:4e:1a:5a:63:f1:26:a0:50:f3:22:69:b6:ef:69:e9:69:
a1:a0:02:c8:0e:b9:42:2b:1a:ac:f7:19:c4:4d:29:5e:fd:da:
f6:ef:b8:1d:e7:07:ec:a9:0a:21:9b:a5:1a:8e:68:5e:af:71:
2c:67:36:77:5f:f6:31:75:88:bd:7a:05:81:29:e3:27:e2:e8:
34:6d:e8:e1:f4:35:67:b2:73:a5:2d:54:0b:d2:2b:0f:5d:74:
0b:bd:35:69:0c:a5:29:90:a6:18:6c:a7:48:67:fe:7a:32:18:
c7:14:17:d9:07:e3:a5:5a:f9:2f:94:f2:31:ca:5c:0a:33:ca:
cc:ba:6b:0f:1c:42:30:49:5d:38:41:1b:53:31:68:a7:d4:02:
53:7a:b7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:51:41 2026 by rpki-client