Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/BEulL53dVzOiN_ea1pe2AZ5WU14.roa
File: BEulL53dVzOiN_ea1pe2AZ5WU14.roa (raw, json)
Hash identifier: pCUO8jcFj/IByrOUyU6ds+olCTHmzAb978gaH2etrlc=
Subject key identifier: 04:4B:A5:2F:9D:DD:57:33:A2:37:F7:9A:D6:97:B6:01:9E:56:53:5E
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1409EEEA5E996C8324ABC4F8883C28174
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/BEulL53dVzOiN_ea1pe2AZ5WU14.roa
Signing time: Thu 15 Oct 2026 17:31:59 +0000
ROA not before: Thu 15 Oct 2026 17:31:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 31.76.124.0/24 maxlen: 24
31.76.253.0/24 maxlen: 24
31.77.30.0/24 maxlen: 24
191.217.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:9e:ee:a5:e9:96:c8:32:4a:bc:4f:88:83:c2:81:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 15 17:31:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=044ba52f9ddd5733a237f79ad697b6019e56535e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bc:25:3a:11:b6:58:9f:45:c3:ae:04:04:10:
59:e4:b1:2d:5e:7d:36:6c:10:8f:f6:ae:98:82:25:
7c:17:c2:32:04:e8:c1:5b:b4:b5:e3:40:9d:76:00:
3d:1d:70:57:48:3d:a0:27:bc:9a:22:d3:ae:1f:71:
d8:e4:68:cf:34:a8:0d:96:1c:3b:06:be:c2:a3:3f:
c2:03:ed:88:c6:88:61:22:39:cd:06:f3:ab:3e:2a:
05:b4:72:6d:e2:cc:d9:f2:85:f5:c4:28:62:d9:25:
78:cd:38:1e:69:64:56:d8:cc:5c:47:49:81:66:6f:
93:d3:94:21:b6:2d:4a:56:09:18:b3:2f:5c:fd:5a:
ad:b2:f6:a9:29:09:cf:91:e0:69:13:d3:fd:2c:f1:
ec:fd:ee:65:b9:6b:93:d2:8b:9d:08:52:e5:ea:77:
8b:3c:9b:a7:7e:66:fa:42:d8:ff:31:51:8d:43:67:
a4:0c:b8:9a:e2:ef:d3:25:e2:22:da:25:b5:da:57:
e0:55:0e:14:8a:17:f7:6c:0f:00:08:e9:29:12:df:
73:e9:5b:87:bf:d4:07:77:68:b5:f9:00:4d:96:0b:
c8:a3:60:c1:94:a4:3e:ad:5b:33:5c:e7:7f:7e:46:
e2:9e:90:f4:ca:99:c6:25:b8:c0:61:04:3c:9a:0e:
89:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4B:A5:2F:9D:DD:57:33:A2:37:F7:9A:D6:97:B6:01:9E:56:53:5E
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/BEulL53dVzOiN_ea1pe2AZ5WU14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.76.124.0/24
31.76.253.0/24
31.77.30.0/24
191.217.208.0/24
Signature Algorithm: sha256WithRSAEncryption
41:68:8f:7c:59:1e:56:2c:5b:11:5d:a5:9e:51:15:98:8c:bc:
bc:db:a2:6c:df:ce:ff:cf:7e:cf:42:33:65:b8:4c:22:ae:ad:
ce:dc:b8:9e:fa:08:26:da:7b:be:46:f5:ae:7a:05:e2:26:26:
bd:43:45:58:45:5f:a3:81:82:1e:c6:bf:13:c0:c6:6e:04:8b:
da:c4:62:4a:6c:db:6d:08:b6:88:e9:e1:68:a6:2b:be:9c:cf:
d4:47:8a:9c:75:36:91:86:cd:49:1f:a4:a1:4f:18:4e:77:7e:
a7:19:30:68:9a:72:64:1b:1f:bc:f3:77:ac:c2:1c:ec:ea:79:
0a:bd:f4:62:6c:89:41:22:17:2c:4b:dd:d9:c9:14:32:80:53:
c1:95:db:e0:50:27:14:7e:c3:e0:e3:5d:a2:67:d3:30:31:3c:
44:27:63:88:af:ee:52:2f:95:4f:16:94:01:2d:b9:c4:d3:5d:
6a:c9:31:bd:7f:0a:6b:db:ec:73:ec:d9:a9:60:89:31:27:d9:
fd:62:21:7c:b1:a8:e7:27:93:d5:91:d0:d8:ec:d5:64:2f:ee:
da:67:18:81:af:29:71:56:97:73:bc:7d:da:aa:f6:c4:3b:1e:
49:4a:c4:d2:b3:7e:72:fb:41:4e:6e:ab:54:d4:77:a1:17:49:
7c:66:bf:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:02:31 2026 by rpki-client