Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/D_bYqCU103Hkhz6bqeRSMuJWfQc.roa
File: D_bYqCU103Hkhz6bqeRSMuJWfQc.roa (raw, json)
Hash identifier: phrSjHxmwtef7dkINV++TvdM7B3i8ukxNMlGqs0eSUE=
Subject key identifier: 0F:F6:D8:A8:25:35:D3:71:E4:87:3E:9B:A9:E4:52:32:E2:56:7D:07
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FBF1473F2EB83B93C592ACA0E33BB6DD1
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/D_bYqCU103Hkhz6bqeRSMuJWfQc.roa
Signing time: Sat 01 Aug 2026 20:46:56 +0000
ROA not before: Sat 01 Aug 2026 20:46:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197283
IP address blocks: 31.76.31.0/24 maxlen: 24
31.76.101.0/24 maxlen: 24
179.198.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bf:14:73:f2:eb:83:b9:3c:59:2a:ca:0e:33:bb:6d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 1 20:46:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ff6d8a82535d371e4873e9ba9e45232e2567d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3d:04:ad:de:41:7d:e7:c1:e8:00:3a:f1:ac:
78:2c:b0:97:43:76:f4:09:78:85:38:81:88:7c:d3:
8f:73:5e:a6:16:fe:64:5a:da:c6:6d:eb:c5:3f:cb:
f3:bf:b3:0a:cc:c2:bc:56:11:7a:fe:de:ac:c1:65:
70:e3:79:d4:7a:55:37:b8:39:93:76:2e:a5:42:de:
29:7f:f5:82:d9:b8:96:e5:b6:59:7c:18:d5:20:42:
0e:fa:f2:59:ab:b4:10:65:0e:0e:61:99:04:52:c6:
63:a8:09:22:ef:81:6d:40:91:47:2c:3c:2c:3d:ce:
2c:5c:a4:bd:42:0c:1e:d5:5a:b2:66:01:77:11:53:
47:2c:f5:9d:71:11:a5:d1:73:1a:95:19:a6:20:f8:
ed:08:8d:f2:7d:b7:6d:c8:65:fa:00:62:a4:24:26:
eb:4b:29:c2:34:c1:95:50:70:45:7e:af:0a:de:06:
17:88:3f:7a:29:e7:38:ff:b4:6d:7c:17:81:42:3c:
de:95:3d:42:b1:61:3f:cd:fc:7f:ed:9b:d5:6b:3d:
4e:e2:4c:3d:b7:2e:aa:e1:12:57:ed:a9:78:fc:5f:
22:ec:aa:97:98:9f:51:78:52:82:88:22:8c:75:8b:
79:82:51:d6:17:2e:30:d9:9d:08:15:32:e4:22:56:
17:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F6:D8:A8:25:35:D3:71:E4:87:3E:9B:A9:E4:52:32:E2:56:7D:07
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/D_bYqCU103Hkhz6bqeRSMuJWfQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.76.31.0/24
31.76.101.0/24
179.198.49.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:ca:dc:76:57:62:22:75:20:ce:a9:ed:af:9c:e1:51:fa:ea:
d5:e2:c2:18:72:f7:27:54:2a:96:82:ea:65:7b:b2:ec:f2:3d:
05:72:4a:75:9f:a8:a8:c3:cc:48:d6:dd:00:01:bc:f6:39:44:
74:37:50:f9:dd:2a:bd:3c:f8:b8:23:15:95:2a:3e:df:79:39:
e5:95:73:5c:8c:dc:b4:ed:8a:61:cc:3d:91:cb:c5:14:4b:8e:
bc:7d:01:29:c7:08:f3:ee:11:61:8e:c2:a9:4c:76:57:68:bd:
38:37:07:4d:d2:ad:e3:82:ec:4a:2e:4b:bd:2b:44:4a:90:aa:
9a:67:c5:8b:ec:08:88:00:5c:80:8c:4a:13:25:c4:75:c2:15:
51:56:34:3f:61:69:fd:e8:e8:78:bb:4e:d3:cc:f1:27:5d:f1:
9d:3b:6c:cd:9d:61:8c:05:42:8d:24:56:f5:d6:58:54:83:66:
3e:1d:cc:6d:57:9f:ea:89:e1:d0:e5:81:6a:b2:db:59:e6:33:
48:11:25:21:c1:85:ee:6e:d8:e7:54:ba:6f:7c:bf:ae:3f:fa:
3d:21:45:45:4d:d2:dd:18:5b:4b:ab:c6:21:28:98:80:40:4b:
87:c7:7c:78:7a:b0:ab:1f:b2:88:9c:16:1f:ba:80:e6:1f:79:
9d:50:c1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:51:00 2026 by rpki-client