Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/J8zaKFHTk093X2YDqYw5YyYcDn0.roa
File: J8zaKFHTk093X2YDqYw5YyYcDn0.roa (raw, json)
Hash identifier: e4JiWj3P+lQwh7/12raMvBZ2WfOIa6E6eNcUyBEiNkc=
Subject key identifier: 27:CC:DA:28:51:D3:93:4F:77:5F:66:03:A9:8C:39:63:26:1C:0E:7D
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0AB1BEB5731511CD730C44A38BACB66E1
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/J8zaKFHTk093X2YDqYw5YyYcDn0.roa
Signing time: Wed 16 Sep 2026 16:45:28 +0000
ROA not before: Wed 16 Sep 2026 16:45:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203545
IP address blocks: 31.77.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ab:1b:eb:57:31:51:1c:d7:30:c4:4a:38:ba:cb:66:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 16 16:45:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27ccda2851d3934f775f6603a98c3963261c0e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cc:c0:0e:53:2e:ca:94:ef:b1:e4:b8:11:86:
68:e1:dd:c4:99:30:c0:1e:bc:bf:a8:0e:46:67:32:
49:70:9f:a1:d8:c5:b5:2a:2f:86:68:b9:7f:12:e1:
5c:ed:a2:81:0a:77:a4:b2:d3:78:2d:d4:0e:35:16:
a3:5e:aa:5a:6c:28:d6:a5:a1:c4:99:4f:e6:fe:09:
13:ad:fd:cf:63:ce:12:89:be:9e:9f:30:48:88:a0:
f1:55:1a:c7:0e:be:20:d1:aa:fd:d1:6c:86:ca:84:
ad:9a:76:2c:09:b6:8b:63:52:b3:e0:47:be:7a:45:
07:9d:c1:06:a2:11:63:6a:77:e9:a8:d8:2b:61:f5:
7a:45:52:d7:27:57:81:7e:8f:73:3f:6c:a2:b9:d8:
4d:3d:17:97:7c:9c:19:e5:02:73:7a:45:9f:2c:80:
57:60:1b:2e:a8:7a:ff:ac:ad:b3:7d:d1:bc:ff:79:
39:6a:15:9e:9e:8d:46:dc:27:62:96:fd:e3:3e:1c:
01:c4:4b:cf:4b:42:28:d6:04:37:3e:5e:8c:4b:8c:
98:39:aa:15:68:77:b8:01:20:cb:30:f1:58:27:8e:
1e:c4:9f:b2:89:54:a1:2b:af:a9:f4:ff:07:64:a6:
89:29:19:ed:83:d8:8e:da:6c:aa:e8:51:7e:83:fe:
0a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CC:DA:28:51:D3:93:4F:77:5F:66:03:A9:8C:39:63:26:1C:0E:7D
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/J8zaKFHTk093X2YDqYw5YyYcDn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.55.0/24
Signature Algorithm: sha256WithRSAEncryption
14:fd:28:71:4a:f5:83:51:db:84:92:20:37:6a:af:48:f3:40:
7d:30:3b:b6:0a:d5:a9:2a:c9:1d:9e:f1:81:41:d4:1f:83:fc:
7c:31:15:5d:c9:8e:71:1e:95:51:56:c1:0d:67:b1:ff:b0:17:
6d:e8:20:51:5f:3b:1d:4a:89:88:37:82:8f:3c:53:2b:99:70:
d6:f8:d3:7e:74:ea:54:24:d5:ca:9d:22:47:d6:f9:16:fe:f6:
3c:53:23:ac:52:b9:69:f1:63:8f:ba:cc:8f:2e:f1:f2:53:77:
be:b4:2b:e0:72:46:c5:3b:97:fa:0f:57:dc:f2:a8:77:0d:bd:
23:f8:38:3f:ab:ce:31:ee:5c:7f:c2:a5:c2:42:40:ea:03:42:
fa:eb:41:a9:2e:4d:63:20:e1:4c:35:07:e2:c8:f1:bf:f9:fb:
a3:db:41:ae:bf:3f:76:a2:39:16:dd:48:3b:55:8e:f6:f3:e9:
a1:1b:3e:52:fd:4b:a1:ba:42:93:cd:15:76:32:d0:81:48:6e:
bd:94:32:02:62:95:f0:9c:6f:22:96:72:cd:eb:25:32:09:43:
2e:6c:78:b2:4d:97:50:b1:df:e2:98:61:d3:42:7d:fb:4c:7b:
7c:8b:cc:f0:da:7f:fb:53:08:fd:a8:c8:5f:b9:ae:4d:ad:46:
18:8e:b2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:27:07 2026 by rpki-client