Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/O1E2DSdXDWkYYvsAXZ7GTyRN00A.roa
File: O1E2DSdXDWkYYvsAXZ7GTyRN00A.roa (raw, json)
Hash identifier: 4wMl79bfUB8ziVG/Bwste5ZRZAYCHkYPNiuw9VJhoBQ=
Subject key identifier: 3B:51:36:0D:27:57:0D:69:18:62:FB:00:5D:9E:C6:4F:24:4D:D3:40
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A01B0E7C6C8B574D4F6A79F2D3A3875B3D
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/O1E2DSdXDWkYYvsAXZ7GTyRN00A.roa
Signing time: Wed 19 Aug 2026 17:25:29 +0000
ROA not before: Wed 19 Aug 2026 17:25:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402415
IP address blocks: 31.77.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1b:0e:7c:6c:8b:57:4d:4f:6a:79:f2:d3:a3:87:5b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 19 17:25:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b51360d27570d691862fb005d9ec64f244dd340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ac:e5:b3:1d:17:a4:f6:42:b2:93:22:f8:28:
1a:24:0c:f5:14:9c:44:b7:67:cb:0c:e2:dc:6a:6d:
0f:da:c4:76:f7:7e:90:20:2c:fb:c4:74:c3:d9:be:
2b:71:1e:6a:f6:5b:06:cd:d5:47:34:1a:8f:4a:53:
53:e5:84:c3:bb:6b:06:a5:6e:80:fa:33:44:e9:05:
86:ba:d5:a9:fc:86:4f:2e:c5:9f:80:f9:a1:8e:c9:
4c:87:f7:21:e9:80:1a:6c:8a:4d:34:52:be:af:56:
2b:14:30:27:5c:85:e8:31:ba:e4:07:18:29:a3:17:
e8:f5:c6:00:c8:ad:47:c1:f2:d2:79:28:65:d8:77:
56:34:e1:23:f9:b0:6e:0b:de:b4:ec:46:d4:cb:f5:
4f:61:15:b5:c8:9b:04:c4:89:a0:e8:43:01:07:96:
ff:d2:a3:19:81:0f:48:48:64:49:2a:ed:94:97:bc:
72:a1:61:f3:fe:2d:f5:93:45:b8:fd:0f:30:c3:5d:
b3:06:c6:a0:9e:6f:12:eb:23:55:88:ac:0a:fb:45:
67:1e:85:08:6f:e9:02:d4:a1:86:8e:63:df:55:4e:
a9:4c:94:08:74:0f:06:d7:ba:e6:45:8b:4c:ba:c2:
57:2a:5e:a7:59:34:4b:5b:fe:be:63:7a:35:77:db:
7f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:51:36:0D:27:57:0D:69:18:62:FB:00:5D:9E:C6:4F:24:4D:D3:40
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/O1E2DSdXDWkYYvsAXZ7GTyRN00A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.238.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:f0:f3:eb:4c:9a:c7:70:f8:d5:9a:05:66:d8:93:fc:ce:91:
fe:33:01:65:1f:5d:3c:90:08:ab:a7:df:00:26:07:ef:d5:d5:
af:6d:d9:77:83:c2:fc:f5:c7:fd:97:f6:2c:53:56:63:98:bf:
24:4c:ac:11:9c:b7:ab:8d:0d:3b:c3:fb:03:c7:a0:e4:3b:aa:
70:42:a5:09:ca:a6:46:1c:76:e7:a4:a5:7c:94:cb:70:12:13:
1a:3d:19:4d:da:b7:1b:0e:e8:1a:cd:82:1a:67:76:37:c8:fb:
c0:64:ab:80:c3:17:4d:70:7e:94:fd:fe:ea:66:d9:ea:84:8a:
77:a2:0c:25:a5:15:af:67:c0:25:f0:ea:d5:af:3c:2e:99:24:
7c:cc:a4:0e:fb:23:d8:a5:1f:3f:6e:7d:e9:85:f6:1f:e7:d9:
07:bc:e6:4e:81:04:32:75:cf:f1:ce:81:a2:d5:83:0f:1d:27:
b2:b3:74:77:d3:08:db:0d:3a:59:44:d7:e3:a2:fc:bb:af:45:
df:11:ca:28:91:6c:75:84:a7:f5:1c:71:47:93:c2:30:52:88:
d3:db:6c:c7:52:42:a6:1c:14:1f:92:d2:6d:32:25:66:86:ca:
af:40:b6:e3:fc:8c:0f:96:57:04:c8:2e:96:7e:0d:f8:b6:53:
df:be:5a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:09:29 2026 by rpki-client