Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/361H2v8gbqc0gDeY-IsLzliBkgQ.roa
File: 361H2v8gbqc0gDeY-IsLzliBkgQ.roa (raw, json)
Hash identifier: exkl6S7GciKzN1X+nzFenUIFemQifjXTG2oSzLkb36k=
Subject key identifier: DF:AD:47:DA:FF:20:6E:A7:34:80:37:98:F8:8B:0B:CE:58:81:92:04
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E237C1E925FA4B5854DF8239FC31CD96C
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/361H2v8gbqc0gDeY-IsLzliBkgQ.roa
Signing time: Wed 13 May 2026 22:36:37 +0000
ROA not before: Wed 13 May 2026 22:36:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213164
IP address blocks: 31.76.104.0/22 maxlen: 24
31.76.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:23:7c:1e:92:5f:a4:b5:85:4d:f8:23:9f:c3:1c:d9:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 13 22:36:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dfad47daff206ea734803798f88b0bce58819204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5c:31:64:de:19:f3:c0:70:e9:e5:c2:65:bd:
c2:8a:45:cd:fe:9d:f4:aa:69:63:ba:fb:11:ba:ac:
44:21:13:49:3f:df:95:57:0e:0a:23:76:20:42:2c:
06:78:3e:5e:3e:a3:9d:1b:06:fb:82:78:05:80:97:
84:3c:f5:a8:89:67:06:3c:10:1a:30:29:1d:82:13:
2a:e8:2c:93:a5:13:7b:19:39:b1:ab:76:2d:50:90:
53:35:ba:b2:1b:aa:9c:40:02:85:3c:1d:b6:b2:90:
b0:aa:a9:00:b7:2d:b1:92:af:94:4c:d4:27:f2:fd:
0f:30:43:c5:d8:c7:0f:6f:36:e3:04:ba:a4:b7:3e:
f4:cc:fe:e5:10:de:ac:b8:cf:5f:5d:56:f5:74:03:
2b:e1:11:37:e7:8c:dd:04:0b:e9:2d:b1:46:37:bc:
ce:fb:e0:37:65:df:1a:ab:2e:45:9f:35:fb:b4:58:
f5:7e:12:39:98:30:e6:10:5c:ca:b0:e7:2b:e7:ba:
42:4e:a1:9f:1c:33:0a:35:f8:4a:99:e9:19:7c:a0:
a0:7c:48:f8:59:22:fa:b8:ba:d9:34:5d:68:83:8d:
dc:2c:9c:73:39:06:60:26:bd:72:e3:03:dd:ce:db:
6b:b9:3b:4c:42:c4:1e:71:74:9d:14:2f:b3:0b:b4:
fb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AD:47:DA:FF:20:6E:A7:34:80:37:98:F8:8B:0B:CE:58:81:92:04
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/361H2v8gbqc0gDeY-IsLzliBkgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.76.104.0/22
31.76.122.0/24
Signature Algorithm: sha256WithRSAEncryption
22:1d:a3:b1:fa:94:8b:64:a7:37:29:ad:fb:2f:f1:e0:74:3a:
6b:43:8d:31:aa:7f:6f:09:72:ae:cd:a5:e8:a4:04:a7:15:5c:
6f:a2:27:dd:14:83:ce:61:83:32:2e:d2:5e:03:70:0d:1f:bf:
40:27:42:8f:06:d9:da:81:a0:c0:59:99:22:d2:33:45:5c:d5:
ad:28:70:40:e6:5a:51:ea:00:a9:29:77:4b:29:31:e6:cb:52:
9b:98:ef:d7:12:c7:85:dc:b6:fe:7b:15:ca:f2:ed:66:a3:e5:
fd:39:2a:39:ee:94:7a:37:c2:f6:4c:d9:17:12:48:44:a6:40:
da:1a:a8:b2:07:ea:65:87:6a:51:72:87:ed:a9:06:4f:c8:e6:
7b:f9:9f:98:51:b4:ab:39:1c:e6:e9:bb:92:7d:e6:c7:0d:e8:
28:8b:4f:db:a3:41:86:65:f2:b6:3e:82:db:fa:92:a8:9a:5d:
7c:5e:c0:18:e3:ee:56:35:2e:ac:3e:92:9d:f3:93:09:fb:ce:
7d:be:6a:dc:42:1b:4d:dd:35:1e:d5:7e:30:7a:ff:28:7c:c5:
0c:e6:fb:49:24:ac:01:97:ad:b0:08:51:94:59:c9:43:0e:97:
df:a7:3e:80:52:52:be:8b:fd:40:8a:29:a8:dc:67:38:fa:ed:
78:fc:17:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 09:57:11 2026 by rpki-client