Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JZ1A2K2vQyfun2Woot_cN-RELxw.roa
File: JZ1A2K2vQyfun2Woot_cN-RELxw.roa (raw, json)
Hash identifier: E0xi6CFme6avVo3ZpNt/1cKrXzOdrg8TpEsbArrci/g=
Subject key identifier: 25:9D:40:D8:AD:AF:43:27:EE:9F:65:A8:A2:DF:DC:37:E4:44:2F:1C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0B07540D11EBA7F69DA710E14A44CA711
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JZ1A2K2vQyfun2Woot_cN-RELxw.roa
Signing time: Thu 17 Sep 2026 17:41:09 +0000
ROA not before: Thu 17 Sep 2026 17:41:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 31.76.124.0/24 maxlen: 24
31.76.253.0/24 maxlen: 24
31.77.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:75:40:d1:1e:ba:7f:69:da:71:0e:14:a4:4c:a7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 17 17:41:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=259d40d8adaf4327ee9f65a8a2dfdc37e4442f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:41:38:3a:80:62:9f:9f:ab:8c:4d:84:bb:
1d:c1:b9:27:8e:36:65:af:72:6f:6e:12:d2:cd:9c:
0c:45:53:bd:53:8b:58:09:ad:b7:68:c9:c0:35:d6:
0a:e5:af:73:86:eb:57:e0:68:75:2a:a7:f0:5f:8d:
ff:c6:bc:d2:2a:a5:30:ea:6e:6d:01:23:99:2e:7d:
60:a6:6b:93:de:8b:03:2f:ba:6a:53:29:cc:99:b0:
3a:e1:32:7d:90:b7:a5:a1:a5:d4:bf:22:b3:bd:91:
49:62:a3:7e:80:bc:9d:8a:07:fd:9b:0f:21:cd:78:
c0:43:78:94:37:26:aa:8e:4f:66:c8:5c:2e:20:78:
ad:42:c5:71:54:27:f2:5e:d5:31:d8:4a:8e:82:3e:
0b:45:6a:45:44:fa:13:60:b6:fc:b0:75:8f:87:17:
c2:aa:36:3b:42:49:26:52:af:d7:0b:6d:c0:fc:76:
95:57:45:a6:b9:7b:67:93:a4:20:b2:74:87:98:36:
f6:8f:cf:7c:ec:cd:9c:84:68:ba:d3:ad:74:e1:45:
9f:2a:3f:08:04:e8:f6:f7:29:87:6b:01:f8:cc:66:
37:01:f6:34:3e:db:5d:1a:76:02:ca:ce:3f:4a:54:
8e:51:78:b2:03:d2:b5:25:ab:b8:c8:fa:c3:6b:93:
9d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9D:40:D8:AD:AF:43:27:EE:9F:65:A8:A2:DF:DC:37:E4:44:2F:1C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JZ1A2K2vQyfun2Woot_cN-RELxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.76.124.0/24
31.76.253.0/24
31.77.30.0/24
Signature Algorithm: sha256WithRSAEncryption
52:30:68:bf:f0:af:f6:ac:d8:82:9c:fc:e1:8e:32:3e:f7:05:
a9:b8:19:ec:51:63:66:c0:39:3c:51:46:14:5f:f5:e9:3c:7e:
0b:f7:d8:55:1c:a0:b8:7c:aa:f4:4e:23:0a:41:00:12:30:d9:
ed:1c:4a:69:40:a8:a4:d3:3b:57:5f:06:b5:a5:8e:3b:bd:f2:
a4:53:23:e7:c5:b3:92:26:50:53:ea:77:b8:29:5a:3b:99:61:
c6:d4:b5:06:b7:0d:49:1c:43:2d:91:23:1b:91:1b:b5:21:a8:
7d:8f:f1:6f:8d:bc:97:64:44:6d:8f:96:bf:3b:6f:27:a6:53:
3f:df:c7:b1:cf:20:83:5f:c4:49:05:a9:e1:31:43:00:75:6d:
f2:0d:b4:7b:30:96:87:05:48:12:65:6e:2d:5a:13:4c:b2:3b:
a0:fe:3b:de:2c:b9:fe:02:30:18:09:f5:84:de:6e:66:b6:3e:
1a:ac:f3:ff:c0:01:e2:83:43:40:04:3a:fb:f3:ac:35:b6:d6:
87:61:c9:63:a7:c9:af:25:cc:49:ac:9e:75:c0:91:06:3b:a4:
f7:04:94:08:9a:7e:de:ec:09:b1:51:f9:c3:2d:f0:e1:55:2f:
ee:a6:92:d8:fd:89:2a:ee:f2:37:37:0c:6c:90:03:8d:17:cd:
04:6b:9b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:11 2026 by rpki-client