Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3zVV5zpdMsTPzdwQEKZAPkKFZCg.roa
File: 3zVV5zpdMsTPzdwQEKZAPkKFZCg.roa (raw, json)
Hash identifier: Uj9OkPweZp5KTcuuXJDbbzukFday1Q1jFuBBpnEat+4=
Subject key identifier: DF:35:55:E7:3A:5D:32:C4:CF:CD:DC:10:10:A6:40:3E:42:85:64:28
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E37990EECE1AC0E66286AF68832B1B138
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3zVV5zpdMsTPzdwQEKZAPkKFZCg.roa
Signing time: Sun 17 May 2026 20:20:38 +0000
ROA not before: Sun 17 May 2026 20:20:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213529
IP address blocks: 31.76.126.0/24 maxlen: 24
31.77.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 May 2026 14:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:37:99:0e:ec:e1:ac:0e:66:28:6a:f6:88:32:b1:b1:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 17 20:20:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df3555e73a5d32c4cfcddc1010a6403e42856428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f5:e7:34:2b:ec:63:83:1e:86:6b:82:6b:14:
f4:e5:08:d8:6a:e1:d6:8f:19:a5:3b:23:34:68:4a:
4f:16:73:38:88:de:e0:d8:f7:c5:de:dd:7f:1d:4e:
2c:6e:63:d8:4b:0a:ba:92:f2:c8:56:9b:d8:49:cf:
be:60:35:54:77:3e:5c:42:fa:28:eb:8e:b5:6a:da:
83:b3:f7:82:66:5c:36:50:8e:97:aa:c7:66:ad:6a:
04:52:ec:92:52:43:27:f8:39:06:37:21:1b:97:45:
97:f7:32:45:b0:33:9f:ed:98:e9:58:25:00:0b:83:
ed:a5:2f:10:3c:20:82:5e:54:34:3f:18:20:ac:dd:
84:07:02:c8:1c:11:ba:3c:a3:72:73:6b:28:4c:63:
36:cc:0c:b0:14:ec:45:a3:6e:c2:2c:17:db:bb:be:
d0:f6:83:e3:57:c3:7e:9d:78:5b:a1:e3:34:bf:32:
9c:22:6d:a0:55:6c:f7:73:84:c5:10:e9:97:c8:ea:
fc:e1:4d:d3:b8:2b:3c:53:a6:b0:ed:db:e7:f8:21:
18:f1:ac:71:bc:45:47:16:55:b3:85:9a:61:e1:8a:
0d:51:cd:76:7d:2a:87:09:66:e2:69:30:93:be:c8:
76:4e:be:90:7b:ea:93:96:a9:28:92:eb:73:d0:79:
82:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:35:55:E7:3A:5D:32:C4:CF:CD:DC:10:10:A6:40:3E:42:85:64:28
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3zVV5zpdMsTPzdwQEKZAPkKFZCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.76.126.0/24
31.77.67.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:86:51:68:31:18:c4:98:1a:d2:5a:fd:87:74:c6:11:4f:83:
2a:24:01:9e:15:cd:cc:e3:d3:6c:89:90:91:1b:f3:48:95:00:
89:7c:71:d4:51:05:79:72:4a:fd:3c:e0:e1:43:8e:09:bb:bb:
e9:b9:57:64:2c:2e:47:e7:4b:fd:31:66:33:e9:db:0d:75:61:
9c:00:a1:67:57:6e:6f:aa:ec:c4:8f:de:2d:29:da:ec:57:a9:
02:49:5b:a0:de:c4:47:fc:bf:9a:ff:e9:d6:9e:80:1e:22:cd:
fc:e7:2b:e0:69:10:49:24:ce:47:47:e2:4e:62:83:e2:90:ee:
a1:23:d5:df:ef:be:62:6f:87:72:92:a2:b8:cd:83:60:a3:5a:
40:39:25:10:bd:b1:a0:6c:54:52:61:59:53:f0:19:76:57:87:
32:3f:53:ab:58:11:af:eb:1e:c2:50:11:18:95:2f:03:41:e7:
52:b3:dc:65:55:d6:15:d7:d4:29:68:8f:ac:62:e4:0b:b6:8a:
87:a2:7b:5c:7c:0e:7d:6a:fc:cf:bb:19:ee:ba:e4:61:6c:2a:
0f:a0:71:09:94:ba:4a:f0:3f:33:67:18:50:00:43:53:47:11:
77:1e:7e:66:14:72:b1:9a:e6:fe:b6:8e:d2:c7:50:cf:55:3a:
ce:0d:8f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 20 21:46:07 2026 by rpki-client