Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/V6BxjHSWU0zCL3O-n7k0jnzOqrI.roa
File: V6BxjHSWU0zCL3O-n7k0jnzOqrI.roa (raw, json)
Hash identifier: 4pRoJpx9n8A/R/RX4W6KWxsNhywy02EdxFjaLfiu//I=
Subject key identifier: 57:A0:71:8C:74:96:53:4C:C2:2F:73:BE:9F:B9:34:8E:7C:CE:AA:B2
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A18F075B14F741DE490ECEA18A033E325E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/V6BxjHSWU0zCL3O-n7k0jnzOqrI.roa
Signing time: Fri 30 Oct 2026 22:56:26 +0000
ROA not before: Fri 30 Oct 2026 22:56:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33842
IP address blocks: 31.77.71.0/24 maxlen: 24
144.31.48.0/24 maxlen: 24
144.31.61.0/24 maxlen: 24
191.223.140.0/24 maxlen: 24
201.8.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:07:5b:14:f7:41:de:49:0e:ce:a1:8a:03:3e:32:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 30 22:56:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57a0718c7496534cc22f73be9fb9348e7cceaab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7f:67:a6:87:e6:28:e8:07:69:78:ea:f6:61:
e0:4d:ab:4e:34:43:14:62:f3:43:b6:65:de:2f:81:
b4:b7:ec:7f:d7:c9:08:93:f6:fd:ae:e6:fb:b2:71:
2b:09:70:22:11:3d:0c:61:40:2b:90:53:04:98:87:
fb:93:80:ec:f9:37:6e:81:a5:1b:84:8c:89:7f:ad:
58:e2:b5:d4:fc:e4:32:f4:1a:1d:e0:9c:17:37:93:
28:61:6f:3e:49:8c:8b:77:1b:2c:3e:86:8e:bf:cf:
02:79:aa:cb:5a:f2:7b:98:94:fd:c5:21:53:d1:be:
7f:84:0a:34:e9:35:10:1b:5d:e8:17:43:81:1f:62:
a7:9a:0f:20:ce:87:52:8f:46:42:50:e3:c9:d0:28:
15:aa:00:58:03:83:f9:41:af:3e:91:b5:f2:dc:6c:
e0:11:eb:03:48:64:9c:72:59:ac:3b:9f:ab:66:bf:
06:86:ed:ed:11:c7:ac:12:d1:64:0c:f3:5f:72:08:
4e:cc:56:30:05:1c:72:3e:fa:d2:3b:9a:5a:07:6c:
71:17:ea:bd:89:27:4a:02:46:ed:0c:f6:86:de:70:
55:d8:0e:a6:f3:7c:20:0d:2b:3c:73:43:ee:f7:54:
9f:ba:b9:c1:59:c2:37:5d:7d:63:9a:a5:70:58:a2:
74:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A0:71:8C:74:96:53:4C:C2:2F:73:BE:9F:B9:34:8E:7C:CE:AA:B2
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/V6BxjHSWU0zCL3O-n7k0jnzOqrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.71.0/24
144.31.48.0/24
144.31.61.0/24
191.223.140.0/24
201.8.90.0/24
Signature Algorithm: sha256WithRSAEncryption
07:f7:d9:1f:db:a8:66:50:ae:3c:04:90:ee:30:97:c7:14:1d:
9d:17:05:b1:72:0c:a9:8c:ec:95:a4:df:01:a4:75:db:c3:f9:
ae:12:2e:a6:24:ab:1a:18:0f:b3:9b:17:f2:72:c5:da:ad:5c:
8d:81:83:b4:da:40:dd:b5:5e:b2:81:e0:37:db:a7:0e:3e:f1:
96:29:3b:b8:69:fe:56:69:68:a2:6f:92:de:3e:5d:3f:21:af:
be:cb:66:ae:66:17:0b:87:83:3f:22:0d:13:11:85:74:55:35:
87:f7:5c:33:25:0c:47:ee:44:18:0e:ca:af:d0:c2:2f:eb:c0:
f1:07:19:93:c8:a1:cd:9c:37:99:c5:43:49:dc:c5:79:33:70:
4f:61:ee:7b:0d:b8:40:51:7b:8d:b6:61:7a:3d:32:9e:86:28:
36:8c:b9:56:c7:22:77:7a:5c:d8:af:5d:67:3b:61:99:b8:33:
18:e9:47:27:22:9c:e5:f3:88:e5:7a:34:6e:2d:4a:77:ac:c7:
34:1c:69:11:da:8c:d3:bc:ea:ab:cb:f0:89:ca:4f:a4:8f:28:
84:97:c1:3e:61:f6:a2:5b:bc:d5:d3:ef:22:4c:09:25:d1:96:
d1:bb:24:24:5f:85:61:7e:25:f0:bb:4f:e4:cd:c1:18:1b:1e:
6a:64:36:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:44:01 2026 by rpki-client