Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/B8chHQ8Zob5GNeldbrxhJ2Gy04g.roa
File: B8chHQ8Zob5GNeldbrxhJ2Gy04g.roa (raw, json)
Hash identifier: TmDA0J8TCKhJH9lnhCfE+Oa1lC2gaBgWAVJOXVT65K0=
Subject key identifier: 07:C7:21:1D:0F:19:A1:BE:46:35:E9:5D:6E:BC:61:27:61:B2:D3:88
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F804BBFF1F7752F18CB95353E670853C5
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/B8chHQ8Zob5GNeldbrxhJ2Gy04g.roa
Signing time: Mon 20 Jul 2026 16:11:15 +0000
ROA not before: Mon 20 Jul 2026 16:11:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132776
IP address blocks: 31.77.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:80:4b:bf:f1:f7:75:2f:18:cb:95:35:3e:67:08:53:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 20 16:11:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07c7211d0f19a1be4635e95d6ebc612761b2d388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:28:36:97:b1:75:d6:d5:96:18:00:2c:ff:0f:
24:70:11:4b:9f:6f:cc:ee:68:ee:5b:91:bb:09:42:
f9:62:2a:d3:73:cb:2c:a3:53:2b:2d:3d:a5:7d:13:
c7:b1:a0:10:c8:ca:37:6f:bc:64:f1:91:3b:e0:cf:
40:fc:b9:b8:18:5c:99:a5:f9:0e:16:10:6d:3d:7a:
d1:c5:31:ad:63:40:d6:80:0e:ef:d1:f1:c5:7e:f5:
4e:91:19:ff:88:d0:27:55:bd:46:9d:16:06:f3:29:
ba:a2:6e:a0:0b:b3:c9:f6:e5:26:31:de:81:5b:03:
2d:2e:a6:e1:af:d8:c6:f9:8e:6e:6e:03:15:eb:5e:
d7:a0:53:fc:63:0c:0c:e9:f8:62:99:8d:7d:45:dd:
e9:a6:5c:7e:2d:c2:23:37:c3:e4:f9:56:be:70:08:
86:7a:eb:88:2c:e8:de:38:8d:c7:5e:58:52:e1:2b:
04:76:c1:6c:a8:18:ae:ed:7d:10:fe:f7:69:91:c1:
79:04:5f:03:b5:c3:13:63:44:90:bc:35:7c:12:88:
ea:c1:b2:9b:d8:ba:9b:13:c5:da:33:76:05:20:4b:
98:ac:3c:eb:5c:bc:b1:ed:6f:50:da:fd:cf:da:09:
bc:3a:e5:24:bf:7f:f6:fe:ec:2a:6f:4c:2b:83:d8:
39:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C7:21:1D:0F:19:A1:BE:46:35:E9:5D:6E:BC:61:27:61:B2:D3:88
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/B8chHQ8Zob5GNeldbrxhJ2Gy04g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.116.0/24
Signature Algorithm: sha256WithRSAEncryption
74:3b:e9:a7:1d:53:6e:63:cc:26:cb:2d:70:ac:d5:12:9f:89:
59:d6:02:9c:45:6c:4b:7d:75:6f:6d:6b:1d:02:a7:d3:86:ec:
ec:4d:2c:6a:91:af:8a:7d:a9:81:74:4f:08:76:da:af:6f:64:
1f:5f:c4:c3:fa:6f:f1:4b:7b:37:cf:8f:a2:06:b3:c0:f4:7d:
33:6f:79:f0:6d:90:9f:2b:b7:82:91:e1:0d:16:fc:c2:3d:2e:
58:d9:8d:e9:20:4e:c9:2f:7f:1b:2f:fd:e2:0b:09:03:f2:b7:
27:22:3a:7b:83:7f:f4:c3:99:9b:d0:ee:77:b4:f2:7d:a9:c4:
ae:d4:fe:8c:0b:82:fb:bf:af:c1:a2:25:e8:db:17:7a:d6:78:
85:e4:ee:3e:42:ad:0a:7a:7f:23:30:9a:67:fb:c9:05:50:d1:
e5:a1:1e:85:d2:11:bb:00:f3:68:2f:c7:3a:26:ef:6f:5b:00:
06:a8:8e:73:a4:14:9f:2c:33:c6:3c:80:e7:ce:33:9f:4c:9b:
72:6d:bd:77:1f:13:71:b1:6e:c0:0e:78:08:c8:5f:92:a0:08:
fb:7b:b2:cb:b7:ed:bf:ef:d8:8e:34:72:6f:de:b2:bc:f0:10:
62:25:4c:ff:cb:35:7a:b7:7e:31:d7:0a:b7:ec:8f:cb:73:48:
a4:74:d1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:27:06 2026 by rpki-client