Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/F710I1_OYVRHPjD6lEId354EhVg.roa
File: F710I1_OYVRHPjD6lEId354EhVg.roa (raw, json)
Hash identifier: Yam7E0WVyHGv8u2KuLOYEmqKgO7S6zv7LyCSYv/qD5Y=
Subject key identifier: 17:BD:74:23:5F:CE:61:54:47:3E:30:FA:94:42:1D:DF:9E:04:85:58
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0F335FF7673C56D5804112A18D06DD6C2
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/F710I1_OYVRHPjD6lEId354EhVg.roa
Signing time: Wed 30 Sep 2026 16:46:37 +0000
ROA not before: Wed 30 Sep 2026 16:46:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216070
IP address blocks: 31.77.70.0/24 maxlen: 24
179.253.161.0/24 maxlen: 24
179.253.165.0/24 maxlen: 24
179.253.172.0/24 maxlen: 24
179.253.178.0/24 maxlen: 24
179.253.183.0/24 maxlen: 24
179.253.191.0/24 maxlen: 24
179.254.113.0/24 maxlen: 24
201.10.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:35:ff:76:73:c5:6d:58:04:11:2a:18:d0:6d:d6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 30 16:46:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17bd74235fce6154473e30fa94421ddf9e048558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:70:b0:5e:99:d6:b4:3d:a4:fa:d7:8a:25:92:
b7:fb:96:74:59:08:3a:dd:c2:d9:c9:b8:41:0c:33:
f9:26:7b:15:de:0b:9a:e1:c4:2e:e1:34:d6:bd:69:
34:f0:fd:05:b6:37:bc:19:ba:86:ca:6a:a2:b3:4e:
70:4e:99:64:a7:2e:a5:02:9c:0f:5d:ed:bf:08:a2:
e2:53:61:10:f2:12:be:8b:d6:43:99:62:38:a2:78:
b6:2b:6d:28:45:47:96:41:73:d9:f3:9b:15:89:99:
eb:a3:8b:8a:0a:39:4d:0b:37:27:4b:e1:1a:d2:8e:
50:cc:0a:31:f2:b6:af:ee:eb:d3:eb:9a:41:e9:bb:
0b:d8:de:9e:d5:10:68:2c:b6:04:92:39:96:57:cd:
59:da:94:c3:5f:e7:c7:1e:d6:7e:92:c4:e9:ef:15:
0f:37:aa:d8:3c:f2:7a:88:4d:4b:31:33:ba:f7:5c:
5b:4d:67:f3:85:23:cc:a4:47:a9:70:21:4b:61:81:
8c:92:b4:ef:8b:8c:b5:60:cd:2b:22:e9:e9:b0:3f:
14:e5:4f:cb:59:63:d6:2b:f6:7b:0a:45:2b:60:6a:
82:65:6d:57:d4:5d:91:04:41:b8:74:98:d5:ad:60:
63:46:8c:49:5f:33:b4:f7:b0:4a:5d:e2:ac:9a:88:
15:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BD:74:23:5F:CE:61:54:47:3E:30:FA:94:42:1D:DF:9E:04:85:58
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/F710I1_OYVRHPjD6lEId354EhVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.70.0/24
179.253.161.0/24
179.253.165.0/24
179.253.172.0/24
179.253.178.0/24
179.253.183.0/24
179.253.191.0/24
179.254.113.0/24
201.10.86.0/24
Signature Algorithm: sha256WithRSAEncryption
16:d9:36:c1:ea:99:4d:8a:7b:46:d4:18:cd:1b:11:4c:57:f9:
98:55:f8:41:17:d2:35:d0:4b:b9:0b:39:00:b4:12:2e:7c:38:
e1:1b:d7:2c:8b:8e:3b:97:0e:77:e5:56:b8:eb:13:22:da:98:
d5:6f:f7:41:69:25:15:b2:af:94:23:3a:34:cf:9c:d6:c1:cb:
af:2f:4c:68:4b:cf:33:f9:c5:04:f6:ef:b1:6e:f5:21:ca:30:
83:0b:94:f1:8e:5f:f4:7c:f0:f4:44:07:70:8d:3a:01:d5:bf:
82:92:92:0b:18:0e:ac:5d:ee:74:05:1a:99:f7:dd:3f:99:cf:
05:3a:8e:e4:87:5c:f2:90:57:ae:6b:f2:b9:2d:b4:fe:bc:78:
6c:53:5a:90:57:04:b9:41:a9:3c:39:e9:c4:95:76:15:48:85:
ce:62:8f:88:0c:5b:6a:52:ad:8e:15:4b:f1:f9:ee:cd:9f:d4:
87:2f:42:54:88:0e:e4:f9:cd:13:04:5c:21:7d:1f:77:3d:99:
46:25:02:cf:4a:f7:12:9e:e0:44:d8:de:ec:0a:d2:fa:0c:cf:
b6:1e:a8:52:0e:eb:e2:46:5a:79:09:66:00:89:db:3f:8c:8c:
c7:6f:9b:0d:fe:cd:6b:c6:b2:93:e6:92:9c:aa:51:cf:62:ea:
e2:ee:17:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:59:32 2026 by rpki-client