Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HPK-QazvMSvszHM-Gu1Dd3RXd7Q.roa
File: HPK-QazvMSvszHM-Gu1Dd3RXd7Q.roa (raw, json)
Hash identifier: Ky3p8pWd5irfco8CMqJWPUQKkzFagGIK4crb+l0dfno=
Subject key identifier: 1C:F2:BE:41:AC:EF:31:2B:EC:CC:73:3E:1A:ED:43:77:74:57:77:B4
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F5C3FAE262D00A55C3F5303250C8A1987
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HPK-QazvMSvszHM-Gu1Dd3RXd7Q.roa
Signing time: Mon 13 Jul 2026 16:11:44 +0000
ROA not before: Mon 13 Jul 2026 16:11:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135402
IP address blocks: 31.77.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5c:3f:ae:26:2d:00:a5:5c:3f:53:03:25:0c:8a:19:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 13 16:11:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1cf2be41acef312beccc733e1aed4377745777b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:05:30:34:ed:4d:d5:25:4d:7c:a0:e2:a7:37:
16:a3:0b:b8:ba:29:9f:47:bd:1f:40:83:63:d7:6b:
32:68:41:92:83:df:4c:c7:c7:97:2e:bb:9d:4a:a2:
91:f4:a3:3e:a0:e8:49:e5:4c:63:d6:30:da:e8:7b:
cc:a8:cb:55:f1:34:4b:e8:98:00:3c:66:1a:98:a4:
c5:9e:b5:bc:52:28:29:79:fa:38:f0:58:d4:4e:a3:
07:b7:98:a0:90:b6:b6:25:c6:5a:a2:ad:8c:5d:9c:
c5:62:9e:f0:92:41:ea:68:67:51:5e:97:a8:e2:57:
38:fd:24:81:18:94:30:bf:f9:b5:bb:ef:86:34:0b:
3b:f0:52:90:e6:a0:8f:e0:c5:cc:49:1b:92:17:73:
27:58:d8:9c:3e:ea:93:db:72:03:bb:51:65:d4:1d:
28:5c:49:61:0a:47:fd:8a:32:64:0d:b5:05:7f:15:
5b:ba:d8:09:cb:50:c1:9f:ab:22:8b:ac:0c:a1:8e:
74:c3:8b:6a:13:a0:c8:50:e5:fb:1e:5f:07:e9:49:
b6:d5:40:57:25:97:6b:8e:72:cd:d7:92:dc:a4:96:
64:0b:ff:dd:80:0b:09:18:bc:bb:78:e9:14:36:bb:
75:fa:8a:3e:67:4d:46:b8:2a:89:9a:2b:6f:2f:7e:
c1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F2:BE:41:AC:EF:31:2B:EC:CC:73:3E:1A:ED:43:77:74:57:77:B4
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HPK-QazvMSvszHM-Gu1Dd3RXd7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.125.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:5f:95:65:b7:cc:fb:7e:26:18:00:8b:4a:2f:8d:2e:1b:f8:
cc:f6:10:0a:c3:cb:a5:d3:e2:43:91:ef:4f:25:40:ee:2e:3e:
c6:00:13:7f:62:67:84:2c:3f:3d:d8:e3:9d:7a:61:56:d4:c9:
8b:6d:01:fe:66:5c:1d:33:f3:1a:1f:6e:3e:30:22:c4:1b:05:
13:8e:c5:bc:82:01:5e:36:88:12:78:6c:31:24:01:f7:34:bb:
61:13:de:dc:9d:8e:19:45:a7:04:af:06:81:77:e2:01:d8:f0:
8c:c0:75:23:cd:32:2a:7f:ce:7d:76:41:e4:34:dd:10:15:4a:
4f:db:12:9d:67:ae:88:76:22:d6:6e:02:ea:f3:9d:17:1b:b0:
0d:84:93:e5:85:ab:b3:06:21:16:36:40:40:f1:09:05:d1:fb:
97:53:6f:21:5b:07:97:88:4f:b6:50:49:12:e5:bb:83:ab:73:
5d:03:ee:35:ab:34:27:52:e4:11:93:56:92:e9:6e:59:c2:da:
75:50:d0:09:4c:78:90:35:cf:7f:a0:cc:f6:c6:99:37:c6:8e:
fe:f8:cc:8b:f0:a5:de:2e:f9:e8:80:d8:c6:bf:ab:33:b4:95:
a1:5f:cb:26:5e:6f:51:32:0a:1a:16:73:b0:ae:46:81:c5:f1:
93:56:f6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:41:32 2026 by rpki-client