Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5jVXSF1vPRPl-4NpfiLuRU5DvFc.roa
File: 5jVXSF1vPRPl-4NpfiLuRU5DvFc.roa (raw, json)
Hash identifier: u4ugU7f5cCyGixn4YO8e04p6WY0OBWxjpvyRr71MY8Q=
Subject key identifier: E6:35:57:48:5D:6F:3D:13:E5:FB:83:69:7E:22:EE:45:4E:43:BC:57
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A010695E23F2AEB083053C4C89C74E8FDB
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5jVXSF1vPRPl-4NpfiLuRU5DvFc.roa
Signing time: Mon 17 Aug 2026 15:48:55 +0000
ROA not before: Mon 17 Aug 2026 15:48:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199412
IP address blocks: 31.77.48.0/24 maxlen: 24
31.77.53.0/24 maxlen: 24
31.77.54.0/24 maxlen: 24
31.77.190.0/23 maxlen: 24
179.254.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:69:5e:23:f2:ae:b0:83:05:3c:4c:89:c7:4e:8f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 17 15:48:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e63557485d6f3d13e5fb83697e22ee454e43bc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:db:bf:60:e5:cf:49:ec:e5:40:71:f1:54:
d5:26:ee:cc:86:b1:6b:b4:18:3f:a5:69:bc:1e:96:
08:a8:ef:62:b2:6b:f2:be:ed:5a:5c:b4:54:92:cd:
48:3b:34:6f:62:98:bd:a9:69:2e:b2:4a:75:b8:49:
98:b7:4e:85:f9:08:9c:e2:3a:84:12:85:a6:7e:75:
34:87:b1:45:c0:0d:80:e6:d2:59:b6:4d:6d:40:67:
82:ad:eb:09:11:db:b8:4b:e0:e0:03:42:c5:44:07:
ef:c6:4f:21:c8:42:5d:cb:cf:18:e1:0e:96:a8:6c:
83:c7:a3:bc:a5:a5:98:65:f2:43:3d:eb:41:bd:cb:
bd:6f:d9:69:98:c6:be:dd:54:eb:4d:ef:d1:23:4a:
15:c9:f0:c2:d6:11:00:93:fd:5a:77:80:09:1a:19:
b1:71:25:04:e3:b4:0a:a7:84:a1:cc:0e:dc:0b:39:
f4:e2:1e:31:23:f5:36:f5:97:c3:7f:78:b3:96:eb:
66:57:4e:d7:a2:8f:1a:36:b0:67:f1:4d:30:55:a1:
32:18:0d:5c:6b:0a:72:16:82:b2:cc:5d:88:8c:77:
22:f6:f2:db:b0:1d:59:66:ca:47:bb:b2:62:fb:1c:
b6:bf:7a:08:29:ab:b9:5f:4a:f4:2b:b9:06:89:f4:
24:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:35:57:48:5D:6F:3D:13:E5:FB:83:69:7E:22:EE:45:4E:43:BC:57
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5jVXSF1vPRPl-4NpfiLuRU5DvFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.48.0/24
31.77.53.0-31.77.54.255
31.77.190.0/23
179.254.124.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:35:12:04:90:50:5e:3f:45:92:46:87:1d:fb:f7:74:25:e2:
72:f2:7b:ec:7d:d1:01:65:1b:26:32:da:58:5a:0f:3a:0e:39:
ea:ef:33:82:01:d7:ae:82:96:9e:7b:27:df:8f:03:ae:c6:d1:
01:6f:0f:4e:7b:b3:d6:57:2f:a5:ed:15:d9:7d:fe:47:0d:65:
9d:94:57:e5:f8:03:58:4c:90:72:b0:6a:00:cb:4b:e5:1e:2a:
a8:67:3a:bd:dc:78:9e:44:e2:88:a7:2a:50:12:eb:f1:30:c2:
d4:bb:7c:e6:4c:b4:cb:20:10:f5:84:44:69:48:be:fd:01:39:
60:86:c6:4a:4e:c9:3e:dc:e0:4c:43:63:19:a6:b0:45:02:a3:
99:47:89:8e:3c:fb:8a:0c:58:c5:a2:3c:8c:e9:28:5e:49:29:
70:c0:ed:e8:c5:87:75:02:53:96:6c:46:28:ea:ea:c9:b0:e8:
41:0c:f7:af:0f:d8:20:4b:8a:31:ff:de:d8:f5:fb:98:23:ce:
f7:34:72:03:47:f3:bf:8e:5b:bf:d8:5e:c1:ba:d7:55:c1:1d:
58:79:ca:eb:d6:7b:10:93:09:73:9d:bb:68:a8:4e:ec:64:32:
8f:e0:32:60:8e:16:a0:ae:c4:6d:e3:66:76:29:18:dc:e4:7b:
33:ce:d8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:22:02 2026 by rpki-client