Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5kKcXhdRWwWrPVu4YPkvkcFSvhY.roa
File: 5kKcXhdRWwWrPVu4YPkvkcFSvhY.roa (raw, json)
Hash identifier: OeIQu8s/rjes9uxr6gGC9VYndBtrihWJN2GBPURHqA0=
Subject key identifier: E6:42:9C:5E:17:51:5B:05:AB:3D:5B:B8:60:F9:2F:91:C1:52:BE:16
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019EC7D2FB0CF5A8596ED0EBDE33C1E60B60
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5kKcXhdRWwWrPVu4YPkvkcFSvhY.roa
Signing time: Sun 14 Jun 2026 20:29:13 +0000
ROA not before: Sun 14 Jun 2026 20:29:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50049
IP address blocks: 31.77.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c7:d2:fb:0c:f5:a8:59:6e:d0:eb:de:33:c1:e6:0b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 14 20:29:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6429c5e17515b05ab3d5bb860f92f91c152be16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4a:bf:45:d4:86:4e:72:10:2d:02:ea:a6:77:
1e:bf:81:bf:15:19:c7:ea:2c:0e:6c:72:64:61:50:
97:4e:55:0e:a1:5d:d7:34:98:94:8f:17:97:e7:43:
5b:ce:67:98:ad:4e:e7:55:9a:20:64:62:7e:fa:61:
56:cb:63:0b:8f:b3:72:7f:22:0c:f1:5b:c7:64:9c:
f0:8c:f6:33:b7:df:5f:03:cd:c3:48:94:e4:28:6c:
8a:81:90:16:6f:7a:c3:1d:f6:dc:7c:a2:8f:35:17:
8a:7d:d6:6b:df:15:9b:5f:0b:67:c1:5a:63:55:29:
4a:94:52:1a:ce:fc:f4:37:02:28:da:10:95:2b:3b:
74:a0:8b:e1:a6:66:14:e5:36:24:bb:01:07:d4:b4:
46:f5:10:35:c8:8f:1c:3f:9b:b8:ca:39:ae:c1:7f:
03:94:03:a0:db:6f:5b:ea:eb:17:3a:98:48:23:e3:
5a:ba:27:e1:94:cc:13:87:5d:54:df:69:1d:36:92:
3a:69:23:49:5f:91:f5:33:21:31:0e:28:e3:45:54:
43:78:27:96:2e:fd:80:5e:b5:10:54:6c:a4:0a:93:
73:7a:e3:9c:18:df:6d:22:97:48:23:43:13:ab:80:
aa:2b:f4:95:b0:9f:5a:cc:11:64:04:d2:d8:1f:da:
87:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:42:9C:5E:17:51:5B:05:AB:3D:5B:B8:60:F9:2F:91:C1:52:BE:16
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5kKcXhdRWwWrPVu4YPkvkcFSvhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.255.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:91:6f:11:d2:9b:4f:03:57:b3:43:a0:5c:df:dc:ff:9e:65:
90:cc:fd:d1:85:05:31:6e:7d:b5:66:3c:c7:c6:67:3b:25:1e:
70:c5:8e:1b:3f:9e:b1:9e:c0:db:e1:cb:26:28:b2:da:98:c2:
15:fa:ff:0e:f9:72:cf:c5:0a:4e:62:2c:44:0d:f1:1a:20:70:
21:e7:6a:b8:b1:90:d0:a5:fb:ce:92:5b:05:94:96:fd:9d:02:
cf:c7:4f:96:46:2e:86:f2:35:51:d3:83:44:54:be:45:4a:49:
da:b4:19:4e:fd:5b:45:ec:73:ea:98:05:9f:aa:01:87:87:13:
3b:bc:5c:0f:6d:b3:35:62:61:83:cd:29:25:7b:e1:2e:b2:27:
21:66:e1:12:81:b2:ee:c3:fb:48:1f:c3:0f:ad:f5:c1:66:f9:
2f:74:88:6b:a3:e9:da:c7:5f:30:02:27:11:76:ff:95:b1:c8:
16:12:a6:83:98:5f:f9:8e:c0:56:b8:f6:5e:be:01:d6:59:d8:
96:ae:fc:3f:d0:21:e7:28:60:e6:f7:0d:fd:09:14:6b:a4:65:
b5:73:45:98:31:cc:f5:50:9b:64:98:cd:85:f8:19:4e:42:c1:
86:a6:bd:37:27:b6:a9:d4:ef:8c:e6:35:90:0f:79:5f:e8:a1:
b3:95:91:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:04:36 2026 by rpki-client