Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/F6D7nu-pPxzP_gRrQvo2KE60VrU.roa
File: F6D7nu-pPxzP_gRrQvo2KE60VrU.roa (raw, json)
Hash identifier: jHBln9Oju7dPXEqzSBAPO8vfaXaW2wC8aQMF4KI+zyM=
Subject key identifier: 17:A0:FB:9E:EF:A9:3F:1C:CF:FE:04:6B:42:FA:36:28:4E:B4:56:B5
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FAEEC659DF4023B653198C6B5A60ED302
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/F6D7nu-pPxzP_gRrQvo2KE60VrU.roa
Signing time: Wed 29 Jul 2026 17:29:15 +0000
ROA not before: Wed 29 Jul 2026 17:29:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153947
IP address blocks: 31.77.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:ec:65:9d:f4:02:3b:65:31:98:c6:b5:a6:0e:d3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 29 17:29:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17a0fb9eefa93f1ccffe046b42fa36284eb456b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:86:54:15:ba:15:67:c3:02:87:14:31:dc:dc:
e6:ae:b8:46:e6:22:e2:fc:b7:8d:f4:a4:c7:3c:ea:
b3:86:2d:ad:93:49:91:f0:bf:1d:63:c8:11:76:05:
a9:77:6a:4e:d0:07:85:4c:5a:e8:9e:31:ff:35:b7:
3f:53:ef:23:7a:85:94:7f:7c:fc:d0:9e:11:2e:3b:
3b:9b:3e:ca:09:42:e5:5d:23:89:81:e4:d4:ee:60:
78:1b:19:dd:9b:3a:e9:2c:51:0e:05:82:07:b9:72:
50:5e:22:0c:bb:45:c7:d2:8c:67:2b:7f:5f:03:cf:
aa:1b:4a:e6:92:1b:05:e1:11:32:d6:ef:68:b0:42:
80:0c:d5:88:1a:08:ba:b8:4c:f8:b6:cb:e7:98:69:
a7:57:00:6c:88:8c:5a:e8:da:5a:9e:01:6a:cd:06:
37:d0:37:4d:6f:52:e6:1f:29:ff:6c:78:89:55:f0:
66:02:0d:63:4f:83:18:51:b7:2d:21:4f:fe:03:dd:
42:4b:05:2e:43:89:b2:2d:bb:19:ff:b9:5d:71:28:
71:97:bc:3a:4d:e2:6e:96:c4:bf:d4:ce:8f:1e:1b:
cf:86:01:21:08:47:f5:1b:e2:6b:b9:c0:b8:66:45:
52:53:1d:91:91:dc:ff:bd:c5:eb:62:f1:59:d4:b6:
b5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A0:FB:9E:EF:A9:3F:1C:CF:FE:04:6B:42:FA:36:28:4E:B4:56:B5
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/F6D7nu-pPxzP_gRrQvo2KE60VrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.96.0/24
Signature Algorithm: sha256WithRSAEncryption
94:32:3e:19:54:3d:44:9b:d4:c9:31:76:13:23:08:9e:04:d0:
88:dc:77:9e:95:0f:99:c8:41:60:b1:1c:f0:9a:2a:eb:41:0e:
4b:46:e5:dd:a7:05:ee:69:98:0b:f1:be:3a:42:bb:25:24:a5:
0f:8d:c9:ad:fe:aa:93:23:6d:1b:1b:ca:b7:0e:42:7f:53:85:
06:93:89:c3:65:32:28:53:11:05:67:2b:57:e9:56:ea:d1:9d:
6f:bf:5d:e9:02:70:15:a4:60:65:d6:b5:90:ad:1d:41:22:7f:
cc:03:b6:29:89:d1:57:06:20:64:ce:92:98:b4:e4:dd:3d:37:
a0:03:de:f1:cf:98:59:2a:52:ee:68:fc:df:2b:81:29:da:11:
31:64:63:75:bb:2c:99:31:7f:b5:01:e1:09:84:23:0c:31:24:
eb:d4:40:54:04:8c:b5:4c:48:da:11:cc:b4:49:a2:e7:37:d1:
11:1c:4e:3c:35:3c:eb:22:3c:25:51:eb:b9:ef:0b:e9:32:6e:
dc:cf:9d:b9:f5:24:d9:cf:73:eb:d3:78:1c:c8:d2:22:b0:84:
55:ad:0f:99:5a:61:bd:5f:f2:f5:02:3e:78:a2:aa:56:e0:ce:
fa:64:67:2a:7f:d9:80:27:90:56:75:a4:85:f3:31:4d:80:61:
b1:32:90:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:52:38 2026 by rpki-client