Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Gh0Ry1ZOuanU-AlATmiShbZgS6s.roa
File: Gh0Ry1ZOuanU-AlATmiShbZgS6s.roa (raw, json)
Hash identifier: DG1KB6Lgf9QW8zy4D7LEYzLAQzSXtIqqTFJTiogTPQM=
Subject key identifier: 1A:1D:11:CB:56:4E:B9:A9:D4:F8:09:40:4E:68:92:85:B6:60:4B:AB
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DDF58C3F0B26B6765FD4633628D3B75D3
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Gh0Ry1ZOuanU-AlATmiShbZgS6s.roa
Signing time: Thu 30 Apr 2026 17:03:49 +0000
ROA not before: Thu 30 Apr 2026 17:03:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210176
IP address blocks: 31.77.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:df:58:c3:f0:b2:6b:67:65:fd:46:33:62:8d:3b:75:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 30 17:03:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a1d11cb564eb9a9d4f809404e689285b6604bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bf:b1:f3:e5:54:71:b0:77:0d:c3:42:83:d3:
a0:a2:8a:3b:48:fe:ad:9b:fe:25:66:75:59:f2:05:
a6:a2:4a:36:a7:51:7a:4a:0d:91:c0:cb:4a:48:71:
89:6b:d8:fb:41:46:80:e4:12:5e:93:35:09:62:71:
41:9b:8d:b0:00:d1:f3:19:91:9c:8f:6b:5c:79:42:
de:d7:36:58:a3:d9:ec:56:29:f9:6e:34:8f:36:f1:
cf:86:42:6c:7c:3a:c4:2a:42:f2:16:73:06:33:a0:
24:af:60:60:f5:4f:2a:2a:ca:7f:94:7d:43:66:df:
e4:4e:d6:7c:e7:67:88:23:a9:ce:4a:d7:fa:23:c2:
ed:b1:f9:f7:12:6c:95:30:6c:aa:7e:64:ba:fc:17:
43:69:db:43:0e:17:ff:e0:65:1b:6b:c7:f4:56:cb:
cc:8c:27:b3:1f:fa:2e:9b:45:b0:d5:91:f1:9a:a7:
3d:c8:11:27:fb:63:d0:fc:44:fd:19:c4:1d:c3:ed:
bc:6c:26:1b:2a:a2:78:cd:34:5c:28:c8:a8:62:12:
f5:44:0f:aa:c5:48:5e:dd:7a:c5:8c:7f:c4:79:01:
24:1e:0b:26:d5:70:59:06:55:44:b6:fc:31:ee:af:
00:50:ac:49:f6:04:d9:a1:c9:01:32:0c:10:c5:17:
4f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1D:11:CB:56:4E:B9:A9:D4:F8:09:40:4E:68:92:85:B6:60:4B:AB
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Gh0Ry1ZOuanU-AlATmiShbZgS6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.209.0/24
Signature Algorithm: sha256WithRSAEncryption
47:e7:90:8c:3a:99:92:d3:e1:d8:49:4b:93:99:67:1f:7b:9b:
a2:4d:f9:f3:45:26:c4:b9:dd:54:07:f1:6d:ae:a0:ca:12:09:
3c:97:41:be:62:4a:4a:bd:fa:c3:a1:cf:46:0d:9c:00:14:bf:
fa:47:25:1c:ba:a0:b5:3d:ab:49:8e:30:f3:f0:11:ab:88:9d:
fd:e1:a5:aa:6f:2d:21:95:0b:ce:fb:66:a9:cb:c2:77:cf:e7:
19:28:9e:20:5d:1f:39:59:e4:d1:1f:a2:d7:6b:73:54:c0:f4:
84:df:57:e1:ff:10:9a:6f:59:64:59:60:8d:9e:39:83:b8:12:
fd:77:58:ec:1d:6c:3c:0f:ff:e7:b4:b7:1d:60:3f:36:5d:8b:
07:5c:57:30:ef:50:69:d6:45:e3:1c:a6:b0:4b:71:67:b7:db:
d9:ba:fb:c9:e3:e5:e3:2c:16:55:60:aa:21:ae:26:17:8f:50:
de:e1:b0:d5:d8:3d:b5:dc:bc:0a:55:05:21:23:f7:c3:a6:cf:
f8:61:fa:e7:f0:67:ac:87:f9:74:f4:13:87:ec:64:4f:11:3f:
68:f1:44:08:cc:40:30:64:23:0e:b7:7f:40:eb:f9:0d:c9:f6:
82:15:3f:39:62:45:f8:41:e3:3e:1a:14:bf:8e:ab:04:51:da:
58:ed:c4:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ3fWMPwsmtnZf1GM2KNO3XTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNDMwMTcwMzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTFkMTFjYjU2NGViOWE5ZDRmODA5NDA0ZTY4OTI4NWI2NjA0YmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7+x8+VUcbB3DcNCg9Ogooo7SP6t
m/4lZnVZ8gWmoko2p1F6Sg2RwMtKSHGJa9j7QUaA5BJekzUJYnFBm42wANHzGZGc
j2tceULe1zZYo9nsVin5bjSPNvHPhkJsfDrEKkLyFnMGM6Akr2Bg9U8qKsp/lH1D
Zt/kTtZ852eII6nOStf6I8Ltsfn3EmyVMGyqfmS6/BdDadtDDhf/4GUba8f0VsvM
jCezH/oum0Ww1ZHxmqc9yBEn+2PQ/ET9GcQdw+28bCYbKqJ4zTRcKMioYhL1RA+q
xUhe3XrFjH/EeQEkHgsm1XBZBlVEtvwx7q8AUKxJ9gTZockBMgwQxRdPZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBodEctWTrmp1PgJQE5okoW2YEurMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvR2gwUnkxWk91YW5VLUFsQVRtaVNoYlpnUzZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH03RMA0G
CSqGSIb3DQEBCwUAA4IBAQBH55CMOpmS0+HYSUuTmWcfe5uiTfnzRSbEud1UB/Ft
rqDKEgk8l0G+YkpKvfrDoc9GDZwAFL/6RyUcuqC1PatJjjDz8BGriJ394aWqby0h
lQvO+2apy8J3z+cZKJ4gXR85WeTRH6LXa3NUwPSE31fh/xCab1lkWWCNnjmDuBL9
d1jsHWw8D//ntLcdYD82XYsHXFcw71Bp1kXjHKawS3Fnt9vZuvvJ4+XjLBZVYKoh
riYXj1De4bDV2D213LwKVQUhI/fDps/4Yfrn8Gesh/l09BOH7GRPET9o8UQIzEAw
ZCMOt39A6/kNyfaCFT85YkX4QeM+GhS/jqsEUdpY7cSU
-----END CERTIFICATE-----
Generated at Tue May 5 16:49:06 2026 by rpki-client