Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3awTcynzyLYbTWhyrk3IDMUfnoo.roa
File: 3awTcynzyLYbTWhyrk3IDMUfnoo.roa (raw, json)
Hash identifier: TZ6k3VNrPzStFKe/dVPhl/MA0sot8ue8Yr7Zk1skbqo=
Subject key identifier: DD:AC:13:73:29:F3:C8:B6:1B:4D:68:72:AE:4D:C8:0C:C5:1F:9E:8A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A13BBF47099F80CE22DB806AAB5881F7A2
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3awTcynzyLYbTWhyrk3IDMUfnoo.roa
Signing time: Wed 14 Oct 2026 18:49:13 +0000
ROA not before: Wed 14 Oct 2026 18:49:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213915
IP address blocks: 31.77.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:bf:47:09:9f:80:ce:22:db:80:6a:ab:58:81:f7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 14 18:49:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddac137329f3c8b61b4d6872ae4dc80cc51f9e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:e4:90:02:50:cf:b8:d8:41:4d:c2:9e:cd:
b3:f2:bc:e1:d0:07:27:48:b7:d9:f1:81:9d:32:42:
b7:db:3b:b5:03:df:da:1b:ad:2d:80:a2:0b:f7:c9:
3d:cf:95:74:cc:fa:d9:cf:5d:fc:58:9f:4a:f5:e4:
65:60:dd:14:8f:5f:38:dd:17:21:4d:21:2e:ec:b1:
3a:db:b7:05:22:2e:79:7b:3b:38:ce:cc:32:2d:95:
a6:77:2b:1f:e2:36:f3:24:41:15:28:8f:c6:05:be:
b8:90:bf:f0:cb:41:5c:8f:5b:90:be:a0:e2:78:42:
01:7b:1d:ef:86:0f:a5:26:a5:ea:3e:72:81:04:c1:
f2:f6:81:4a:07:ca:9b:6e:d8:82:35:50:4a:85:88:
f1:8d:65:c8:fe:f6:99:7f:2d:50:42:53:1d:ad:f4:
6f:04:4a:ef:87:e6:38:10:65:28:51:fe:69:10:ca:
8f:b8:a5:0d:14:e1:fa:d0:44:e4:7e:24:c2:d0:72:
5f:24:c3:83:d9:62:65:b0:1d:3e:52:9a:a6:5c:a2:
31:70:00:94:31:1d:c2:05:82:7b:e2:8f:e4:54:52:
30:1d:ac:fc:85:bd:05:4a:34:3f:c6:14:c1:1d:2c:
e1:38:0d:32:aa:4b:66:b2:ef:cd:e7:93:a6:20:ee:
76:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AC:13:73:29:F3:C8:B6:1B:4D:68:72:AE:4D:C8:0C:C5:1F:9E:8A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3awTcynzyLYbTWhyrk3IDMUfnoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.45.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:21:f4:a4:e0:ba:34:0a:79:93:2c:9b:07:a8:1f:ae:95:d9:
80:3d:68:58:0e:03:28:d2:6f:e7:be:0f:95:98:a5:64:12:49:
fe:74:86:88:27:b2:b7:f0:98:b0:d1:48:2d:e9:ec:96:a0:8b:
1c:e5:99:51:f6:e5:ad:7a:20:d1:13:01:8e:7e:02:00:10:9e:
de:5e:57:c7:5d:2d:b0:77:cc:8f:1d:ce:86:c5:b9:bb:3a:32:
91:f9:f1:2a:e9:fb:a7:6b:9a:95:d8:ab:cd:b6:4d:5c:f7:70:
a3:5f:ad:8a:a8:02:5b:e5:76:aa:80:80:f0:f8:10:8e:35:88:
90:34:a3:5c:36:ed:3a:c6:b1:10:4d:e9:e3:cf:d6:9f:d3:46:
ec:73:6c:b2:59:c6:f0:2d:77:13:26:86:70:60:eb:f9:26:4f:
c0:85:b8:95:1c:48:a8:f3:c4:44:17:b0:be:2c:41:c1:04:29:
5c:81:b1:70:ea:cf:ad:0f:64:24:03:9a:c2:48:34:3c:de:07:
79:35:81:ee:e5:4b:06:27:84:ec:08:a8:d1:b9:d8:59:1f:bd:
50:54:04:0e:f2:2f:c8:0c:10:14:18:3c:81:44:af:4a:41:cc:
55:d1:aa:59:10:9c:bd:a4:fb:a0:13:14:aa:5c:71:a9:03:51:
3b:28:51:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:16:13 2026 by rpki-client