Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/22Gc0MlSXRODvciuVx1zTyOzf9E.roa
File: 22Gc0MlSXRODvciuVx1zTyOzf9E.roa (raw, json)
Hash identifier: 6X/UXJ+cMEoLhZOYhE4WM2Foy9RyoADVG9aEfGIEjNY=
Subject key identifier: DB:61:9C:D0:C9:52:5D:13:83:BD:C8:AE:57:1D:73:4F:23:B3:7F:D1
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A091C1BF8777B6A414B356652DCD4C8040
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/22Gc0MlSXRODvciuVx1zTyOzf9E.roa
Signing time: Fri 11 Sep 2026 18:36:28 +0000
ROA not before: Fri 11 Sep 2026 18:36:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209604
IP address blocks: 31.77.167.0/24 maxlen: 24
179.254.94.0/24 maxlen: 24
179.254.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:c1:bf:87:77:b6:a4:14:b3:56:65:2d:cd:4c:80:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 11 18:36:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db619cd0c9525d1383bdc8ae571d734f23b37fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:80:d8:b6:f7:ea:0b:02:8b:c2:69:b0:13:78:
24:db:8b:81:c3:ab:f6:ef:80:f9:6f:d6:23:a6:b5:
46:29:79:ff:1a:a8:d3:cc:60:e8:ab:63:86:9e:63:
78:31:e4:ea:1f:93:28:2e:9a:9a:e1:b9:4d:87:0c:
65:b2:2a:e7:4e:f7:b4:21:99:af:1a:69:93:31:a4:
06:78:90:b8:8a:74:8a:77:87:14:50:81:d7:c4:73:
81:7a:45:d9:72:5a:02:6f:b5:81:08:ae:d2:dd:70:
f3:32:99:60:96:6e:db:5e:1c:45:2c:ae:ad:6f:b3:
0e:dc:ba:0c:f2:f6:d2:b5:d1:f1:8a:c1:ab:0c:64:
b3:20:3d:70:da:0d:54:c0:16:c9:43:77:f9:e6:bc:
ab:87:57:8e:cf:b5:5f:28:b2:90:a9:af:37:fc:08:
0f:78:f6:b1:9c:af:30:90:f1:c5:77:05:d4:0a:4a:
80:3c:c8:96:09:fa:ca:6c:ba:fb:d3:23:91:a9:da:
8b:96:3e:db:81:b0:0d:c4:cf:be:70:90:fa:92:33:
74:ae:16:58:cb:ad:bc:0a:2d:10:77:12:ed:e8:84:
e9:27:24:9d:89:9e:f1:fd:c4:44:1d:24:68:46:ea:
e3:27:de:42:30:46:5c:d9:34:51:dd:28:b4:3f:70:
f4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:61:9C:D0:C9:52:5D:13:83:BD:C8:AE:57:1D:73:4F:23:B3:7F:D1
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/22Gc0MlSXRODvciuVx1zTyOzf9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.167.0/24
179.254.94.0/24
179.254.112.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:15:17:b4:fd:b4:88:6b:e4:78:8d:f9:eb:cc:4a:fe:e4:8b:
9a:b2:3c:f1:81:20:c4:ff:2f:a2:b6:b7:a8:12:67:be:3e:92:
68:54:3c:d0:b5:15:76:bc:ff:b4:ae:e1:3d:bc:6d:ab:aa:cc:
ae:46:a5:e9:d1:99:b6:cc:63:9f:47:3c:bd:da:f7:e0:25:63:
04:6e:8c:7e:19:91:eb:e6:26:51:12:d2:ed:f7:fc:d3:5f:bd:
79:6b:b9:4b:dd:83:69:e2:55:d5:eb:a9:b2:43:2d:0c:14:a7:
94:aa:fa:fe:37:60:bf:75:65:8d:a3:6a:aa:8d:8f:16:5a:c6:
df:e7:ad:59:e6:7f:d8:50:59:47:47:2a:be:a1:d6:45:65:89:
88:4e:c2:d5:bd:45:d8:4d:7b:56:22:a9:fa:eb:2f:c8:42:1e:
c6:ac:cf:e3:6c:12:af:20:69:8e:e6:38:b0:96:c3:d8:58:f8:
e7:bc:10:15:10:93:d0:80:80:05:01:4e:9a:04:e6:05:a6:ee:
6e:ed:cf:ec:8f:7f:7c:3f:40:9e:e0:38:c6:25:00:81:c8:7c:
94:78:e6:ca:62:c9:0d:86:c2:06:fb:1c:c1:2d:f5:fa:2d:d6:
30:df:5d:4c:45:6a:25:2d:2f:15:58:12:39:ea:8b:26:21:19:
d2:b0:a1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:27:18 2026 by rpki-client