Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5-831BZW9yzvZrZjcXDp3cIBpS8.roa
File: 5-831BZW9yzvZrZjcXDp3cIBpS8.roa (raw, json)
Hash identifier: Mzqy5hhlshsU670Awd4YtCu0dCtLk6whf0H50tr3oEU=
Subject key identifier: E7:EF:37:D4:16:56:F7:2C:EF:66:B6:63:71:70:E9:DD:C2:01:A5:2F
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F239524930C970E00E097DA48BE8CE452
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5-831BZW9yzvZrZjcXDp3cIBpS8.roa
Signing time: Thu 02 Jul 2026 16:06:44 +0000
ROA not before: Thu 02 Jul 2026 16:06:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201176
IP address blocks: 31.77.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:95:24:93:0c:97:0e:00:e0:97:da:48:be:8c:e4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 2 16:06:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7ef37d41656f72cef66b6637170e9ddc201a52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a7:d3:f1:34:a4:77:ca:b1:c4:9b:f8:f2:ce:
c3:66:54:dc:2f:3d:d4:98:16:51:23:16:a6:b6:81:
d2:61:59:26:9d:45:97:63:50:89:8c:ec:d6:22:d8:
c8:93:98:70:23:19:e0:51:84:fd:b6:99:b8:62:a4:
54:39:1c:35:31:e5:5f:4c:76:4d:ea:90:25:b6:1c:
ff:ea:eb:e6:90:3c:25:64:2a:0f:96:df:55:7c:39:
15:2b:7f:bf:a5:5f:cf:f3:f8:76:19:5d:7a:26:0b:
4f:03:11:02:f1:1d:07:2e:53:e1:86:77:40:95:5c:
2b:82:cc:98:32:be:0c:72:f1:2e:3e:63:56:cd:9d:
34:b3:49:f3:23:ea:80:9f:86:3b:30:75:bb:86:3d:
a5:e3:b7:1e:b4:1d:07:4f:7c:fd:40:0a:8d:c5:17:
02:87:5b:5f:02:ce:25:fd:b4:6d:31:6a:54:bf:ee:
79:b2:5e:ff:c5:d0:b1:c4:19:4e:85:25:57:12:a1:
69:24:99:ec:93:58:fa:c0:ce:86:ca:ba:b5:64:24:
7a:0b:f8:d0:e2:ca:1c:38:af:e6:39:34:e4:a6:35:
0b:22:ef:c2:e9:95:f5:03:2a:20:8b:19:63:ce:a8:
13:13:02:54:5f:6c:da:12:83:b4:25:44:c2:9d:7c:
db:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EF:37:D4:16:56:F7:2C:EF:66:B6:63:71:70:E9:DD:C2:01:A5:2F
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5-831BZW9yzvZrZjcXDp3cIBpS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.111.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:4a:4b:c0:29:38:5d:28:bb:de:c1:80:59:be:7c:85:84:ca:
82:c0:6b:a1:fb:5d:f8:f5:68:06:07:20:05:8a:a3:fd:5d:84:
05:0f:53:cd:51:bb:ed:51:b8:42:de:06:7c:af:e9:7d:48:ce:
89:07:95:60:17:07:4d:96:7a:6f:32:0d:0d:62:e6:6c:55:de:
77:13:dd:5a:bc:b1:8f:a9:f7:aa:25:3d:71:ad:81:4d:80:7e:
f0:4b:82:96:04:b9:86:b9:fc:72:a6:bd:1f:dc:da:37:52:0b:
7f:c7:39:4b:d7:c8:8b:59:a8:4b:86:0a:09:20:bb:75:1b:6e:
db:bc:0c:cc:d5:9f:70:91:e0:21:b7:dc:1d:29:6b:ef:7f:7c:
23:23:4a:b4:ac:2d:28:a4:7f:6d:49:82:38:13:3a:24:9e:39:
71:46:be:5e:e6:e6:b8:ff:39:71:7f:b8:00:8c:ad:cf:43:0d:
0d:eb:4b:56:5a:bd:1f:71:ea:ed:0e:20:e0:de:7a:f7:6b:c7:
c6:54:d9:7c:a7:a0:79:34:d4:5a:64:e0:0f:13:38:04:26:b2:
0b:67:83:34:1e:1b:ca:2b:fe:b2:9b:ef:ac:7f:0a:2c:ad:48:
f2:e8:80:73:57:36:07:55:2d:fc:6b:aa:67:ae:36:eb:9c:be:
82:b6:fd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:56 2026 by rpki-client