Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JEwA-NnxzwXxeQZ9CHQcPF6mdAc.roa
File: JEwA-NnxzwXxeQZ9CHQcPF6mdAc.roa (raw, json)
Hash identifier: 5KtEOasMtAGruQxk29Gp6BP1CB1GVKP3E6hdluzuRhI=
Subject key identifier: 24:4C:00:F8:D9:F1:CF:05:F1:79:06:7D:08:74:1C:3C:5E:A6:74:07
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A065804C5CEEF878147758154B132711D7
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JEwA-NnxzwXxeQZ9CHQcPF6mdAc.roa
Signing time: Thu 03 Sep 2026 04:21:42 +0000
ROA not before: Thu 03 Sep 2026 04:21:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139659
IP address blocks: 31.77.184.0/23 maxlen: 24
31.77.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:65:80:4c:5c:ee:f8:78:14:77:58:15:4b:13:27:11:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 3 04:21:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=244c00f8d9f1cf05f179067d08741c3c5ea67407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:13:85:8c:ae:e4:69:5e:cf:22:27:fa:c1:79:
30:50:73:e8:d5:ff:ec:cf:ac:77:69:95:44:aa:a3:
eb:5a:f3:a0:3c:c1:f4:43:48:69:93:75:f5:a0:9d:
b7:bd:02:c2:8e:cf:56:43:be:fc:e1:83:a7:80:53:
b5:c0:66:a5:89:59:55:e1:8f:6e:91:6f:95:32:bd:
26:95:0b:b7:b8:db:21:92:ae:20:44:f1:7e:5e:2c:
48:aa:81:e8:1d:6d:84:e1:39:ff:f8:4a:89:16:24:
bc:73:15:c3:c9:48:3c:2b:44:55:93:7f:d9:d1:d1:
c0:d7:2c:a5:d9:c6:af:c1:a2:0f:c6:9a:97:27:51:
ba:3a:3f:a0:4b:71:b3:cd:b9:b3:f1:bb:d0:0d:6f:
e5:12:79:6b:7b:66:ad:bc:11:c2:3c:b3:87:30:47:
7c:e8:07:bd:8b:3b:3c:f3:eb:e9:d1:d0:ae:18:14:
e4:94:aa:10:70:8a:ec:38:1b:7a:be:d8:08:2d:82:
be:6e:38:a7:1c:de:5f:69:2d:01:6f:72:e5:2b:a2:
d4:8c:88:ea:f3:25:55:e6:24:de:7e:dc:f9:67:0c:
3a:5f:73:bd:6c:ec:01:7d:6e:49:05:4c:00:f9:a9:
78:6b:bb:e5:41:38:70:56:f7:32:ed:a5:b1:be:6c:
90:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4C:00:F8:D9:F1:CF:05:F1:79:06:7D:08:74:1C:3C:5E:A6:74:07
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JEwA-NnxzwXxeQZ9CHQcPF6mdAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.184.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:0e:8f:7b:59:0a:25:2b:88:d5:d5:9f:41:2c:b6:69:cf:9a:
39:6e:d5:c8:f4:b1:b9:db:03:1e:48:77:f4:ca:92:7e:67:02:
3d:39:0a:46:3c:9c:19:90:7c:9e:da:17:28:ea:8a:f7:b9:40:
d4:d9:ad:1b:f6:da:b7:32:fe:5b:57:08:d2:a2:3d:b2:41:44:
78:e8:47:bf:67:e0:5d:71:03:81:1c:b6:39:bf:6f:b1:b0:14:
30:61:b5:ba:31:04:16:df:35:22:62:be:2a:17:c5:2b:46:26:
ac:e8:ad:c8:56:d3:d1:4d:ab:e8:88:76:55:3f:8f:43:9c:f7:
44:53:5a:e5:7f:3d:d7:a7:54:c0:a9:34:4e:e7:42:ba:c1:1b:
9d:e6:27:7c:65:56:c5:bd:93:6a:df:f6:c1:7a:1e:da:4d:da:
25:0f:9a:aa:35:80:13:e5:b9:8e:94:97:2e:aa:bf:db:2e:19:
9b:6f:fd:89:73:cd:af:74:e5:87:45:7b:61:33:4c:55:04:45:
41:3d:c7:45:6f:f8:33:2d:d3:55:9f:73:1c:19:5f:9e:79:93:
d4:db:09:2d:44:59:64:96:cf:33:d6:62:1e:32:a0:94:97:a1:
54:2e:cd:20:f9:97:07:ee:98:fc:f5:1f:7a:b9:ae:94:33:2c:
fd:b9:d6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:28:12 2026 by rpki-client