Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/KScEViWzxBmrNk2k8ol_qEDAFbg.roa
File: KScEViWzxBmrNk2k8ol_qEDAFbg.roa (raw, json)
Hash identifier: j9gcC+TevHpwS8SP0uKnlGnLOO8HUYQ30dLRu1E6Kjg=
Subject key identifier: 29:27:04:56:25:B3:C4:19:AB:36:4D:A4:F2:89:7F:A8:40:C0:15:B8
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0A09CD9703E904F4BCB6F9C9A0B2D8E26
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/KScEViWzxBmrNk2k8ol_qEDAFbg.roa
Signing time: Mon 14 Sep 2026 15:50:28 +0000
ROA not before: Mon 14 Sep 2026 15:50:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218694
IP address blocks: 31.77.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:9c:d9:70:3e:90:4f:4b:cb:6f:9c:9a:0b:2d:8e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 14 15:50:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2927045625b3c419ab364da4f2897fa840c015b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:61:e8:e2:dc:ad:22:22:2b:a0:fd:d2:e4:8a:
fc:20:80:51:72:dd:dd:3f:58:c7:68:31:cd:41:fb:
1b:81:e9:1a:48:d3:fd:d3:24:47:0b:03:e0:62:e8:
e1:42:b1:b4:5d:4b:40:30:60:68:1f:1c:99:4c:8d:
a7:83:be:f4:d0:2e:91:06:a0:fc:0a:32:3a:f4:0d:
ad:d5:9a:e5:d7:59:11:25:61:c0:ea:53:43:1c:23:
b4:87:74:74:53:06:45:49:6f:67:5e:0f:aa:c3:6c:
f0:fc:a7:59:6b:88:01:f3:83:0c:e1:33:df:83:c9:
59:1c:bb:19:c9:a2:95:96:5d:60:69:12:23:db:9f:
5b:73:70:64:cc:40:e8:a3:b5:4d:ef:26:94:64:83:
e9:57:70:4f:df:b5:12:17:be:d7:09:f7:7a:4f:9a:
98:cb:05:3d:4a:fb:1e:a9:2d:07:0c:2c:76:23:75:
3a:10:52:35:19:da:a5:0d:80:a4:66:75:92:66:58:
7d:4c:58:a7:26:7b:fe:90:72:e1:30:41:82:e0:88:
09:e2:d8:3b:8e:35:b6:c9:00:6c:83:78:25:f8:2b:
47:af:a8:0f:b6:9a:71:e1:e3:9b:28:72:90:84:34:
80:0d:fc:17:aa:97:ff:0d:e8:5a:14:e2:3e:35:e9:
f4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:27:04:56:25:B3:C4:19:AB:36:4D:A4:F2:89:7F:A8:40:C0:15:B8
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/KScEViWzxBmrNk2k8ol_qEDAFbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.186.0/23
Signature Algorithm: sha256WithRSAEncryption
12:23:16:06:4b:94:4e:ef:33:a1:a9:ba:db:5c:17:a0:cd:15:
84:8c:40:a7:72:8e:f1:94:31:15:47:f2:8f:93:3d:7f:1c:44:
fc:92:65:40:c8:dd:a5:f8:94:76:be:ef:f8:41:ec:87:d1:8d:
02:80:41:7f:d3:54:9f:cc:30:10:ba:0b:6d:d5:66:c1:2e:25:
30:a1:c6:0e:88:c3:9e:58:16:a3:fe:70:1b:29:0c:27:d8:19:
f3:e5:c5:ac:17:ae:0f:bf:71:34:46:ed:59:93:ab:27:48:93:
8d:33:9a:0f:ad:a2:be:14:2b:21:4f:2d:36:01:1a:57:d7:a6:
f6:72:e6:13:d4:51:2c:12:9c:96:b6:12:0a:bb:1c:d5:c6:d5:
44:3f:3c:d2:9f:c5:b0:7e:21:01:24:a5:3f:41:01:ae:e4:df:
00:86:23:d8:6d:c4:1b:f6:b4:c4:45:a9:d2:7b:5f:47:bd:7c:
38:ec:3a:6a:58:d6:be:44:c4:8f:f1:6c:dd:af:4d:86:a7:a8:
05:7a:93:5a:8c:cc:05:ef:f1:dd:ee:b3:d5:00:09:10:2d:b0:
fd:78:27:1e:5b:a1:cc:8b:03:76:43:9a:72:10:9f:05:0f:61:
13:01:43:10:36:f3:d4:03:0b:31:66:cc:80:f2:a2:2c:e7:6e:
91:88:9a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:27 2026 by rpki-client