Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8yCw21v_lmfIIk7tUR97D5P35Bo.roa
File: 8yCw21v_lmfIIk7tUR97D5P35Bo.roa (raw, json)
Hash identifier: C2foGLagiSg5cFKTmOzI5JcOsItLf73gLfYMfd4jszU=
Subject key identifier: F3:20:B0:DB:5B:FF:96:67:C8:22:4E:ED:51:1F:7B:0F:93:F7:E4:1A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A039B83755B5FCCE72449475377582BC09
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8yCw21v_lmfIIk7tUR97D5P35Bo.roa
Signing time: Tue 25 Aug 2026 16:19:29 +0000
ROA not before: Tue 25 Aug 2026 16:19:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402402
IP address blocks: 31.77.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:b8:37:55:b5:fc:ce:72:44:94:75:37:75:82:bc:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 25 16:19:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f320b0db5bff9667c8224eed511f7b0f93f7e41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:e1:9b:ce:4f:c4:cb:61:b8:53:f0:fe:8f:
ae:64:ba:1f:5d:6e:e3:c0:11:f8:e1:5f:6b:c1:38:
93:3b:5d:76:34:0c:fd:b2:33:c3:94:1b:e1:a4:d6:
97:31:39:c9:90:0f:50:b2:f9:8f:d5:f1:30:6a:40:
50:c8:69:f6:9b:c1:13:87:4f:58:af:d8:ab:7f:c3:
f6:c1:0c:cd:98:a9:d3:f0:a2:0f:45:91:3d:d6:40:
42:38:f2:f8:b3:9d:8f:96:0f:10:23:06:4a:9a:16:
f7:23:7a:ca:ef:eb:79:22:b2:a2:df:79:93:6e:24:
b6:37:7d:59:5d:77:28:fc:0a:37:7a:4a:6e:87:80:
43:48:86:96:bf:35:02:92:04:f9:a1:a3:eb:0e:74:
fc:74:0e:67:4c:1f:09:f5:af:ba:0a:ff:36:72:55:
64:1c:4a:6a:70:ec:31:1d:83:c0:79:a6:6e:fd:2b:
c5:bb:4e:7b:9d:e2:47:d2:02:e6:9d:75:94:ec:6b:
2b:37:72:16:d9:e6:11:b2:a5:de:d9:91:50:8f:47:
28:5e:74:14:08:c9:2b:c8:05:ed:b8:66:58:a3:fb:
7c:51:5d:74:2c:2e:f6:d1:07:ca:d6:6f:4d:16:83:
a5:b5:3e:da:54:8a:08:5c:dc:69:bf:c8:94:ee:f3:
e2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:20:B0:DB:5B:FF:96:67:C8:22:4E:ED:51:1F:7B:0F:93:F7:E4:1A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8yCw21v_lmfIIk7tUR97D5P35Bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.237.0/24
Signature Algorithm: sha256WithRSAEncryption
77:13:27:dd:e6:e3:6d:9e:34:ae:3c:61:fd:c6:86:f6:b9:2e:
5c:bf:df:6d:67:31:ee:7d:fa:c4:b2:e4:a0:a8:7c:9e:c5:7f:
ba:62:2b:9a:33:b2:16:1d:b6:c6:94:76:ee:31:22:b0:67:d7:
b2:3e:3b:d7:82:cd:70:ad:43:c2:59:57:0d:f5:24:b6:b0:76:
3b:ff:9d:7a:15:46:d6:90:7a:85:58:7d:40:8d:88:6b:6c:f0:
86:89:58:11:dd:77:4b:ba:93:7f:90:7a:b3:19:f0:3e:c4:27:
a3:e2:e6:34:9f:4f:ba:01:22:e7:67:94:be:90:97:35:01:7b:
f9:af:3c:41:3a:58:03:ae:e1:83:b6:54:ef:34:a6:b8:a7:48:
45:9c:f5:b2:76:5c:52:17:27:67:b8:51:d4:39:51:02:04:5f:
2c:94:45:13:97:2b:dd:ac:52:ac:b1:f1:c9:c9:3b:da:27:3b:
bb:a4:12:da:b3:64:4c:e2:a5:de:bc:60:35:75:a5:78:8d:34:
41:05:52:32:1c:6c:f2:b1:99:bc:19:a2:9b:b9:d8:54:a9:85:
a2:bf:0c:a0:3d:f6:95:ae:96:26:b2:22:f2:bf:45:4f:c6:8d:
5a:4c:f2:b7:5a:9a:e7:9b:71:2d:be:70:4d:6e:d6:48:aa:af:
7d:a5:ac:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA5uDdVtfzOckSUdTd1grwJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwODI1MTYxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzIwYjBkYjViZmY5NjY3YzgyMjRlZWQ1MTFmN2IwZjkzZjdlNDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDPhm85PxMthuFPw/o+uZLofXW7j
wBH44V9rwTiTO112NAz9sjPDlBvhpNaXMTnJkA9QsvmP1fEwakBQyGn2m8ETh09Y
r9irf8P2wQzNmKnT8KIPRZE91kBCOPL4s52Plg8QIwZKmhb3I3rK7+t5IrKi33mT
biS2N31ZXXco/Ao3ekpuh4BDSIaWvzUCkgT5oaPrDnT8dA5nTB8J9a+6Cv82clVk
HEpqcOwxHYPAeaZu/SvFu057neJH0gLmnXWU7GsrN3IW2eYRsqXe2ZFQj0coXnQU
CMkryAXtuGZYo/t8UV10LC720QfK1m9NFoOltT7aVIoIXNxpv8iU7vPixQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPMgsNtb/5ZnyCJO7VEfew+T9+QaMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvOHlDdzIxdl9sbWZJSWs3dFVSOTdENVAzNUJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH03tMA0G
CSqGSIb3DQEBCwUAA4IBAQB3Eyfd5uNtnjSuPGH9xob2uS5cv99tZzHuffrEsuSg
qHyexX+6YiuaM7IWHbbGlHbuMSKwZ9eyPjvXgs1wrUPCWVcN9SS2sHY7/516FUbW
kHqFWH1AjYhrbPCGiVgR3XdLupN/kHqzGfA+xCej4uY0n0+6ASLnZ5S+kJc1AXv5
rzxBOlgDruGDtlTvNKa4p0hFnPWydlxSFydnuFHUOVECBF8slEUTlyvdrFKssfHJ
yTvaJzu7pBLas2RM4qXevGA1daV4jTRBBVIyHGzysZm8GaKbudhUqYWivwygPfaV
rpYmsiLyv0VPxo1aTPK3Wprnm3EtvnBNbtZIqq99pawt
-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:25 2026 by rpki-client