Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HaWvsggNQGh8G6HFSFgeIV14KLM.roa
File: HaWvsggNQGh8G6HFSFgeIV14KLM.roa (raw, json)
Hash identifier: KdDFiIIhTFJ4hTW7zfnBbjJxH63nax4TBgECK3GUCjw=
Subject key identifier: 1D:A5:AF:B2:08:0D:40:68:7C:1B:A1:C5:48:58:1E:21:5D:78:28:B3
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A068163672CA6DFC7632E7627B29125298
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HaWvsggNQGh8G6HFSFgeIV14KLM.roa
Signing time: Thu 03 Sep 2026 16:24:41 +0000
ROA not before: Thu 03 Sep 2026 16:24:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215102
IP address blocks: 31.77.0.0/24 maxlen: 24
31.77.139.0/24 maxlen: 24
201.10.80.0/24 maxlen: 24
201.10.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:16:36:72:ca:6d:fc:76:32:e7:62:7b:29:12:52:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 3 16:24:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1da5afb2080d40687c1ba1c548581e215d7828b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:57:cd:db:88:6f:d1:e3:41:e1:f1:ba:db:c7:
24:fa:b7:ff:e4:e5:fd:f5:35:d2:6d:d3:2d:e2:d3:
d8:42:cf:59:d2:e4:0b:cb:20:92:1f:0c:c0:c1:08:
f7:b1:78:8a:d3:fe:84:66:a5:9a:dd:c6:b1:d5:86:
92:28:9b:92:7b:40:74:7a:ae:55:7f:c7:55:24:7d:
84:d9:01:3f:a4:4a:eb:69:82:11:f2:fd:34:53:c6:
14:55:db:c4:e8:23:d0:b2:a7:58:24:8e:31:bf:b8:
21:5b:ed:d3:5e:5e:c3:11:d7:e9:40:3e:e5:ba:ef:
df:bc:c0:ac:93:3f:1b:09:ca:4c:37:91:c8:8e:a8:
f3:22:19:0c:5e:6d:d5:79:fb:37:9d:c9:0f:ca:bb:
5c:b4:73:e3:a7:31:70:b3:56:9f:88:28:70:a6:98:
63:93:cb:62:4f:74:8c:5c:33:20:0e:3b:51:48:10:
60:bb:2f:61:09:21:f7:a4:66:de:1f:c8:12:ce:70:
73:3d:b1:d3:ab:4a:fd:d2:b1:eb:d7:75:ab:7c:da:
85:47:c7:46:10:04:92:08:b6:67:5f:01:88:63:75:
74:96:94:3d:10:7e:ac:ad:6a:95:bc:cf:fc:43:9a:
85:4a:b6:cb:1a:cc:44:e8:d2:2f:01:f7:69:fb:75:
a6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A5:AF:B2:08:0D:40:68:7C:1B:A1:C5:48:58:1E:21:5D:78:28:B3
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HaWvsggNQGh8G6HFSFgeIV14KLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.0.0/24
31.77.139.0/24
201.10.80.0/24
201.10.87.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:5f:37:f3:08:6d:f4:43:d2:56:db:2f:d1:07:10:fa:eb:b2:
04:b0:b9:96:42:43:ad:e9:78:40:c1:37:b7:2c:da:87:74:ae:
8e:ab:c6:6c:65:13:2a:45:40:10:a1:e4:c9:7a:7b:86:99:5f:
c5:d2:b9:f9:03:ba:86:de:4b:3e:d8:b1:24:f5:d5:cc:49:3f:
26:d4:d6:47:5f:28:5e:04:86:c1:5d:18:71:fc:8d:4a:d7:d1:
e6:2d:98:04:46:3c:ae:05:44:8b:4c:52:4c:7c:20:31:6c:91:
65:a2:48:ad:72:7d:db:bd:a9:0f:9c:a3:c5:b0:48:a3:f2:69:
99:60:df:ee:94:57:72:62:72:34:02:d1:5f:75:db:92:4f:b7:
6e:3e:34:7c:d5:31:22:11:b3:53:92:4e:0a:37:19:b5:ec:31:
e6:18:ee:14:56:5a:bf:e7:ae:b2:57:b5:d6:48:41:17:fd:05:
36:75:d5:65:1e:00:92:6b:41:fc:45:1b:cd:ea:f3:c1:34:8a:
6a:66:40:15:ec:01:93:2a:ac:ec:f0:99:f0:74:9c:94:e5:a4:
64:1e:d5:4c:80:85:1f:33:f3:5b:18:36:25:cc:02:0e:e6:55:
13:e6:b9:3a:df:c0:70:e9:d0:9a:56:d4:9f:ac:30:39:da:d6:
d3:5d:cc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:30:35 2026 by rpki-client