Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/FqLM_cqUA988iqK5JRWx7Tn6vaI.roa
File: FqLM_cqUA988iqK5JRWx7Tn6vaI.roa (raw, json)
Hash identifier: dNBGpeX8lCY9g9cQSCbq9hiFbhUZBimjEVnixpJNQ9s=
Subject key identifier: 16:A2:CC:FD:CA:94:03:DF:3C:8A:A2:B9:25:15:B1:ED:39:FA:BD:A2
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A039B5765A1ABD7A020151ECFB5F341ACB
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/FqLM_cqUA988iqK5JRWx7Tn6vaI.roa
Signing time: Tue 25 Aug 2026 16:16:28 +0000
ROA not before: Tue 25 Aug 2026 16:16:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197924
IP address blocks: 31.77.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:b5:76:5a:1a:bd:7a:02:01:51:ec:fb:5f:34:1a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 25 16:16:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16a2ccfdca9403df3c8aa2b92515b1ed39fabda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:73:1e:fa:e9:d7:fe:ae:fa:cd:4f:c3:43:6b:
62:44:b6:82:80:1b:90:76:b6:22:9f:c5:87:58:89:
2a:b3:9b:80:58:31:cc:d3:ce:e0:3a:d2:ff:8c:f6:
e5:e8:97:08:70:c6:17:41:d8:78:85:c1:12:04:d0:
ba:5d:8f:75:f0:db:72:58:16:16:da:d7:ce:6d:c5:
69:77:73:58:64:37:70:b3:03:4d:d7:11:a0:a4:f4:
77:28:c4:31:48:a7:f0:60:a5:93:2e:47:b3:82:3b:
c5:db:44:f4:98:0a:49:28:a2:86:d7:fa:92:2b:8e:
b4:4a:4d:2f:12:d2:ac:9b:98:9c:fc:14:36:df:9c:
29:50:31:e0:66:b6:8b:38:c0:fe:93:9b:56:5a:40:
b3:c0:7a:d7:d3:50:b1:88:33:c9:78:2c:42:b1:7f:
8e:a5:65:2d:84:83:f8:d9:72:2b:e6:4c:c5:c5:a3:
b3:3a:87:e8:00:d9:fa:3b:d5:ed:96:ec:9c:0a:0e:
f3:44:23:85:1f:56:45:fa:94:a3:83:38:04:19:7e:
d2:ba:9a:4b:90:27:69:cb:dd:ce:e3:11:31:d8:7a:
c8:c8:f5:d3:8b:bc:a2:23:fa:51:ac:f0:9b:c7:18:
64:04:63:d7:39:f3:e8:b3:d5:32:07:18:1f:bc:26:
96:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A2:CC:FD:CA:94:03:DF:3C:8A:A2:B9:25:15:B1:ED:39:FA:BD:A2
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/FqLM_cqUA988iqK5JRWx7Tn6vaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.212.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:9c:93:f8:0b:a4:65:63:70:92:16:f4:ac:27:1f:3d:1b:00:
29:21:f3:04:d9:f9:e9:98:c1:9f:93:a0:8e:c4:d0:c8:c1:e5:
a7:d0:96:b5:13:fe:01:89:c7:93:2f:75:1b:a9:3b:3d:4a:8d:
60:25:06:ec:c8:74:e6:4e:9d:ab:86:ed:dd:87:fc:cf:5a:51:
94:f0:87:51:7a:46:03:5a:20:ea:df:a6:b5:9d:aa:12:02:b1:
70:75:8e:2b:2f:4e:b1:19:d0:cf:e2:bd:a2:41:43:26:0c:1d:
de:8d:9b:82:8b:41:3c:28:92:88:87:7d:e3:5f:d7:e3:a0:6c:
52:40:0b:b3:39:af:aa:43:be:c9:76:89:7c:4e:4f:53:82:a6:
3b:1c:a5:a4:7c:26:84:00:fb:a3:5d:93:57:b9:06:95:01:3a:
d6:47:f0:d1:2c:f0:3c:f1:57:74:6e:5e:0b:fc:01:51:e3:35:
f9:9d:da:65:16:0e:d8:eb:d3:b5:7e:1e:d6:05:77:ec:62:84:
2e:a5:13:a8:87:14:91:64:02:5c:d9:be:ca:5b:a2:4b:15:cf:
ff:70:07:7b:e1:b7:c5:c8:f5:f1:45:05:fb:ca:94:3e:73:ed:
5c:0b:61:57:62:e1:4d:cd:1c:90:29:9c:30:5e:85:a7:ca:c0:
29:89:7a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:27:09 2026 by rpki-client