Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3qaKdFSoDx9RfCc4hJVMA__Yf-Y.roa
File: 3qaKdFSoDx9RfCc4hJVMA__Yf-Y.roa (raw, json)
Hash identifier: h0MMEGksQKnyCmIf49l1a2E1/dpUBIVvKl0+MlwrItk=
Subject key identifier: DE:A6:8A:74:54:A8:0F:1F:51:7C:27:38:84:95:4C:03:FF:D8:7F:E6
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FD89C6284D97F2DCE73938D188802DA25
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3qaKdFSoDx9RfCc4hJVMA__Yf-Y.roa
Signing time: Thu 06 Aug 2026 19:45:55 +0000
ROA not before: Thu 06 Aug 2026 19:45:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214716
IP address blocks: 31.77.62.0/24 maxlen: 24
201.10.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d8:9c:62:84:d9:7f:2d:ce:73:93:8d:18:88:02:da:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 6 19:45:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dea68a7454a80f1f517c273884954c03ffd87fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:32:41:40:32:85:df:c1:6d:0d:28:2c:e6:
86:1b:d5:96:41:b5:07:ad:05:00:34:d4:68:df:b8:
e6:63:27:87:f3:10:59:f4:bf:7a:b8:0d:7f:35:1e:
fc:5b:5a:a7:ce:5c:87:ae:53:66:65:4e:b0:6e:6a:
c8:10:dd:30:3a:1d:58:e3:a1:2c:b9:2b:9b:2c:be:
50:f8:5d:40:7d:2b:7c:fc:b4:52:ed:00:73:c0:1e:
13:50:18:cb:8b:e7:7c:48:23:eb:af:da:d1:65:35:
e6:d5:16:06:e1:b9:f2:e7:dc:83:bd:40:8f:53:9a:
16:4c:31:52:be:89:19:37:e0:fa:10:04:9a:56:31:
70:6f:e9:48:40:ed:8b:38:db:92:2a:10:97:7e:30:
79:1f:5e:fa:1e:c5:92:75:23:52:fa:d8:8a:24:5c:
2f:cc:ee:68:6c:42:a3:c0:a4:1b:7f:88:9f:49:f0:
26:b3:a9:a6:a2:66:91:6a:28:3f:77:c4:25:35:1f:
db:02:52:15:87:fe:da:64:83:ce:92:77:05:7b:1a:
ff:d3:44:56:9e:28:e1:3d:b0:cf:da:33:f0:75:12:
78:62:9f:2f:e8:dc:14:41:c6:59:a3:2b:f3:d3:04:
08:65:11:11:bc:e4:56:f0:1b:bc:b5:0a:09:bc:48:
ad:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A6:8A:74:54:A8:0F:1F:51:7C:27:38:84:95:4C:03:FF:D8:7F:E6
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3qaKdFSoDx9RfCc4hJVMA__Yf-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.62.0/24
201.10.94.0/24
Signature Algorithm: sha256WithRSAEncryption
01:7b:52:d6:9f:75:c3:e8:95:6c:82:95:1a:5c:21:de:3c:18:
6c:0b:cd:3d:95:76:64:24:9c:9f:4b:c8:d2:d0:e7:66:2a:5a:
58:f1:f6:3a:b2:03:d1:6e:e7:0d:1d:34:6c:d4:21:39:2c:25:
f4:2a:37:e6:f6:b8:65:d3:39:19:33:51:7f:b3:e4:7d:3b:b4:
de:ec:5e:9c:c3:a1:dc:87:ac:76:71:2b:4a:7f:ef:8d:8d:77:
53:0e:43:11:50:b8:0e:17:01:60:dd:81:c1:6d:2c:62:25:f5:
f4:b6:e7:de:cd:e4:83:5c:dd:c0:27:38:e7:60:e1:f0:61:a9:
1b:47:de:ab:57:4b:94:b2:7d:1a:7d:1e:57:aa:5b:23:a3:af:
93:8b:48:66:1a:96:82:49:6c:17:d3:af:6a:76:19:7a:5f:9d:
63:d6:11:66:a4:60:73:1a:6e:af:ac:26:9f:b5:4a:f7:b2:a6:
42:96:04:78:66:20:51:3e:f4:b2:eb:27:75:26:40:d8:87:46:
a5:e1:d1:14:de:c7:12:2a:23:85:a5:85:cf:66:44:a9:bd:3b:
bf:01:bc:08:2a:14:94:a8:36:c5:d0:1d:86:62:19:52:a0:62:
22:18:79:06:0f:80:11:08:ad:59:01:87:4a:cc:35:fe:42:d2:
d9:4b:3f:4a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/YnGKE2X8tznOTjRiIAtolMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwODA2MTk0NTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWE2OGE3NDU0YTgwZjFmNTE3YzI3Mzg4NDk1NGMwM2ZmZDg3ZmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszgyQUAyhd/BbQ0oLOaGG9WWQbUH
rQUANNRo37jmYyeH8xBZ9L96uA1/NR78W1qnzlyHrlNmZU6wbmrIEN0wOh1Y46Es
uSubLL5Q+F1AfSt8/LRS7QBzwB4TUBjLi+d8SCPrr9rRZTXm1RYG4bny59yDvUCP
U5oWTDFSvokZN+D6EASaVjFwb+lIQO2LONuSKhCXfjB5H176HsWSdSNS+tiKJFwv
zO5obEKjwKQbf4ifSfAms6mmomaRaig/d8QlNR/bAlIVh/7aZIPOkncFexr/00RW
nijhPbDP2jPwdRJ4Yp8v6NwUQcZZoyvz0wQIZRERvORW8Bu8tQoJvEitDQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFN6minRUqA8fUXwnOISVTAP/2H/mMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvM3FhS2RGU29EeDlSZkNjNGhKVk1BX19ZZi1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAH00+AwQA
yQpeMA0GCSqGSIb3DQEBCwUAA4IBAQABe1LWn3XD6JVsgpUaXCHePBhsC809lXZk
JJyfS8jS0OdmKlpY8fY6sgPRbucNHTRs1CE5LCX0Kjfm9rhl0zkZM1F/s+R9O7Te
7F6cw6Hch6x2cStKf++NjXdTDkMRULgOFwFg3YHBbSxiJfX0tufezeSDXN3AJzjn
YOHwYakbR96rV0uUsn0afR5Xqlsjo6+Ti0hmGpaCSWwX069qdhl6X51j1hFmpGBz
Gm6vrCaftUr3sqZClgR4ZiBRPvSy6yd1JkDYh0al4dEU3scSKiOFpYXPZkSpvTu/
AbwIKhSUqDbF0B2GYhlSoGIiGHkGD4ARCK1ZAYdKzDX+QtLZSz9K
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:30:28 2026 by rpki-client