Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/DDWJFo6qtdVHi3S7saEVaEklaa4.roa
File: DDWJFo6qtdVHi3S7saEVaEklaa4.roa (raw, json)
Hash identifier: ldXMcoHdxJGlaFpNiKBQMbQPgIMhH6xjU+cSsEWbL9w=
Subject key identifier: 0C:35:89:16:8E:AA:B5:D5:47:8B:74:BB:B1:A1:15:68:49:25:69:AE
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A086E9DE5897C4A4F9CB8394BF46A08947
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/DDWJFo6qtdVHi3S7saEVaEklaa4.roa
Signing time: Wed 09 Sep 2026 16:04:28 +0000
ROA not before: Wed 09 Sep 2026 16:04:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214790
IP address blocks: 31.77.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:e9:de:58:97:c4:a4:f9:cb:83:94:bf:46:a0:89:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 9 16:04:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c3589168eaab5d5478b74bbb1a11568492569ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:49:c4:0d:b1:6c:ee:57:f8:41:b9:1b:8b:30:
be:1a:45:fb:ac:9d:d4:5d:35:0c:11:7a:0d:e5:8c:
18:2d:af:3c:f1:04:00:09:51:57:be:33:fa:42:2f:
27:62:9c:10:69:ca:8a:aa:4c:3c:c9:cb:24:ce:fb:
f6:d4:e4:b5:26:22:89:df:cd:79:52:df:b4:fa:45:
bb:7f:a8:44:d6:55:85:07:05:50:b7:35:58:b0:9e:
87:78:5d:db:14:6f:e2:42:a8:cd:a2:e0:2b:90:4a:
20:cd:f5:f8:f1:05:fd:9a:81:27:db:18:af:c9:4f:
ee:95:b0:8b:15:96:3a:cf:53:91:9c:1b:31:a5:bd:
81:e4:d6:96:ef:4b:25:54:7a:37:bc:04:5b:d7:8d:
65:db:81:ef:7e:c6:6d:a0:a2:61:30:16:26:5a:40:
e3:c4:9a:29:20:eb:60:5a:5b:c9:2c:fb:74:7a:ee:
21:c2:40:af:8f:39:09:b1:97:55:0e:fd:1c:66:a2:
51:21:66:47:ba:43:98:f1:a8:95:9a:78:4e:8f:18:
6f:e2:17:00:64:8b:54:13:e9:b6:47:9b:d6:df:e1:
1f:9b:78:99:c7:62:22:e6:ca:6e:6e:d8:c4:83:b1:
3c:95:80:7f:89:39:02:59:6a:d9:2b:5c:bb:50:68:
44:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:35:89:16:8E:AA:B5:D5:47:8B:74:BB:B1:A1:15:68:49:25:69:AE
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/DDWJFo6qtdVHi3S7saEVaEklaa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.68.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:a0:ae:5b:9f:c6:a2:28:bc:dc:8f:32:47:89:41:e0:15:71:
57:23:ab:6b:fe:7d:f1:da:8a:bd:32:22:f3:b0:9e:af:5d:6e:
3a:e6:70:c1:03:e0:0a:c6:18:3c:2f:62:2c:00:ff:7f:a5:2a:
bf:fb:4d:dd:6c:bb:d7:86:4a:5b:e3:2f:b8:d9:7c:db:91:32:
91:8f:8d:6b:a7:73:71:2f:fd:5e:d4:a8:70:73:8d:8c:b8:2a:
e8:7b:35:a1:04:2a:64:5c:d7:ad:55:e9:1b:41:b5:76:55:b6:
66:ac:38:be:69:51:b3:74:61:ce:0b:84:58:24:f6:e1:07:9e:
d8:c3:8b:31:9a:0c:21:56:50:98:6c:26:bd:26:e5:1e:5c:fd:
61:a8:71:f5:d3:dc:56:0f:00:c3:1e:f8:eb:fa:2b:7e:9e:b9:
b1:e0:bb:6a:1d:11:be:9f:4e:56:a2:95:cc:3c:4a:89:13:1a:
22:fa:af:97:1a:17:66:ee:f2:90:35:55:cb:31:d2:50:26:8c:
82:64:a3:4a:c3:17:87:18:fb:c8:c2:ff:7c:52:35:8f:da:3c:
e0:91:a0:17:96:22:4e:47:33:7c:35:a7:23:34:db:a8:88:74:
66:c7:f9:49:08:bf:16:53:47:9c:43:65:49:86:48:d5:8a:b0:
57:73:3f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:51:59 2026 by rpki-client