Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/AD0YZa1RBWf-UzJB1CLhYPvyMY4.roa
File: AD0YZa1RBWf-UzJB1CLhYPvyMY4.roa (raw, json)
Hash identifier: aoTt8ZDrsz7Xi/5AAPjF/JiFuV+K8cCVd0oxiSo+sXg=
Subject key identifier: 00:3D:18:65:AD:51:05:67:FE:53:32:41:D4:22:E1:60:FB:F2:31:8E
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E6F6FF2CF882B181838F8AAF75A303505
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/AD0YZa1RBWf-UzJB1CLhYPvyMY4.roa
Signing time: Thu 28 May 2026 16:34:28 +0000
ROA not before: Thu 28 May 2026 16:34:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153671
IP address blocks: 31.77.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6f:6f:f2:cf:88:2b:18:18:38:f8:aa:f7:5a:30:35:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 28 16:34:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=003d1865ad510567fe533241d422e160fbf2318e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:30:a9:37:56:50:e5:b8:86:b6:fc:56:78:3e:
bc:06:ec:fd:fe:ba:e5:61:cb:75:10:fc:9c:2c:55:
7c:d8:db:9d:4b:57:77:7a:93:6f:20:cb:02:ea:da:
b8:57:95:6a:84:e4:f6:e9:3f:34:c7:0f:0b:8a:53:
f9:3b:54:21:9a:24:bc:11:51:12:fc:5b:8a:6e:4b:
39:3e:d0:fa:ce:e8:af:cb:80:3c:8c:c4:0a:87:e7:
5c:87:de:b8:36:56:58:4a:05:87:27:be:01:94:e7:
63:a4:97:75:98:c7:80:bd:3f:c5:2c:e5:c7:da:3c:
a0:31:64:5a:09:66:08:3a:f4:68:2e:8b:fc:0b:47:
bd:26:18:70:00:c6:9a:7c:96:7b:97:7a:d9:44:04:
1e:0b:e0:f1:2b:04:9a:e8:89:99:dc:11:87:fb:b1:
f3:fe:01:cd:c9:80:e9:07:5b:38:68:08:c9:67:57:
10:87:a2:dd:47:ed:ed:ac:c0:39:51:3b:24:d7:c7:
da:f9:95:dd:87:ff:c8:a6:ab:65:2e:fa:df:dd:41:
a7:42:50:7d:08:c9:d0:da:8e:9e:c6:7c:4f:f2:c1:
b0:ed:54:50:7d:6d:e7:66:3f:5f:7b:d7:a6:03:84:
93:d8:cf:de:16:58:53:85:71:ee:e3:22:b0:e0:34:
3e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3D:18:65:AD:51:05:67:FE:53:32:41:D4:22:E1:60:FB:F2:31:8E
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/AD0YZa1RBWf-UzJB1CLhYPvyMY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.240.0/24
Signature Algorithm: sha256WithRSAEncryption
05:11:36:ad:d6:51:f2:62:68:ed:dd:47:fc:89:17:73:ba:9b:
6d:d2:98:1c:bd:37:4a:57:b7:db:73:a7:8e:b9:4d:8e:33:52:
4d:75:70:ca:cc:70:cc:ce:5f:b0:9b:07:a4:c8:e6:30:2e:6e:
79:c7:11:4e:cc:b4:98:c2:41:e0:8f:9d:cb:df:99:91:33:3d:
01:92:93:f4:64:aa:ea:49:2d:de:41:34:94:df:32:d8:c2:6b:
b3:12:fa:83:ef:5e:f6:18:be:6a:b2:2c:5a:ee:02:f4:5c:2f:
1d:3e:21:37:4b:9d:72:51:60:70:e0:e9:89:96:25:8e:4b:bd:
e9:19:e3:c1:8e:8f:60:25:06:a3:70:ba:c3:0d:7f:9c:5b:85:
fe:4b:30:36:1c:ad:2c:f5:14:8b:c8:2f:80:44:76:16:92:8d:
bb:0c:98:b2:1c:65:1b:ff:fd:3b:74:63:dc:e3:cf:4e:88:b8:
ff:6a:ae:dc:7c:14:26:b3:b8:ad:24:8d:a5:3b:a3:e3:f5:fa:
b3:32:18:39:7d:ef:48:04:29:7a:b0:02:fd:fa:57:29:71:5c:
7a:c1:e6:a4:13:0c:0e:e0:51:03:3e:31:d2:c7:d1:ee:29:b5:
a4:ee:ef:f8:e5:b2:ad:9e:1b:23:7a:6a:8e:1b:95:c6:b0:2a:
1a:ed:4c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:26:05 2026 by rpki-client