Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/VgLCY2faXYzXTa0hvbE9sYsTFUY.roa
File: VgLCY2faXYzXTa0hvbE9sYsTFUY.roa (raw, json)
Hash identifier: fRjP1tdP6G4Uc+lq/45HI2DLuYyiZeeKofZdhY6FgwU=
Subject key identifier: 56:02:C2:63:67:DA:5D:8C:D7:4D:AD:21:BD:B1:3D:B1:8B:13:15:46
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0E99D00B30081218AA488A980D8460311
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/VgLCY2faXYzXTa0hvbE9sYsTFUY.roa
Signing time: Mon 28 Sep 2026 20:02:55 +0000
ROA not before: Mon 28 Sep 2026 20:02:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197462
IP address blocks: 31.76.33.0/24 maxlen: 24
31.76.35.0/24 maxlen: 24
31.76.112.0/24 maxlen: 24
31.76.116.0/24 maxlen: 24
31.77.31.0/24 maxlen: 24
31.77.239.0/24 maxlen: 24
177.1.192.0/24 maxlen: 24
191.217.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:9d:00:b3:00:81:21:8a:a4:88:a9:80:d8:46:03:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 28 20:02:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5602c26367da5d8cd74dad21bdb13db18b131546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fb:c0:d8:4b:10:d8:fb:c8:fc:63:3b:d7:f3:
a8:e4:c0:e2:fc:ac:d1:b1:2e:e0:40:5d:00:f2:a2:
58:fa:da:5f:2d:c6:28:15:e4:b8:b8:3b:69:de:92:
fa:6d:ee:74:1b:8c:5f:62:54:d6:f6:c2:4a:67:ae:
10:d8:91:44:bc:eb:c4:1e:f8:30:b8:ef:d0:f6:a4:
a0:45:86:ec:c7:7a:4d:d7:e3:7a:5c:7d:e3:66:85:
9b:1a:c2:9d:d8:80:86:ce:b2:79:03:01:36:00:7e:
ed:39:2f:21:b5:20:4d:8a:64:45:5a:e6:38:11:27:
19:44:a2:9b:6b:1a:66:ed:1d:05:71:7e:f5:75:ce:
40:fc:ce:3f:2d:4c:61:d0:0f:4a:60:cd:ec:4a:6a:
58:c6:ef:e0:ed:4e:0f:96:99:f6:91:60:17:48:73:
59:49:f6:95:a0:99:d0:af:d3:0c:bb:bf:03:c8:6a:
78:85:ca:b5:fc:6f:d0:cb:99:90:ef:73:1d:28:06:
db:5a:5c:29:0c:04:5f:c2:a8:1c:9a:22:a4:b9:41:
85:50:51:b5:29:79:c5:dd:de:4f:08:f3:c1:23:d0:
52:e2:b8:5e:51:8f:a7:d9:42:95:14:3c:74:2c:9c:
d1:7f:55:4c:3e:e5:15:96:ed:67:69:68:f8:7a:47:
40:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:02:C2:63:67:DA:5D:8C:D7:4D:AD:21:BD:B1:3D:B1:8B:13:15:46
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/VgLCY2faXYzXTa0hvbE9sYsTFUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.76.33.0/24
31.76.35.0/24
31.76.112.0/24
31.76.116.0/24
31.77.31.0/24
31.77.239.0/24
177.1.192.0/24
191.217.243.0/24
Signature Algorithm: sha256WithRSAEncryption
11:fb:49:db:33:9f:74:14:40:3e:d8:68:cf:8e:d4:a5:30:dc:
d8:2e:e8:07:5b:27:23:2a:96:7b:ad:34:03:3d:a7:f2:8f:5a:
03:fd:f5:15:94:26:e1:d7:5a:a1:e1:17:6a:c2:0e:a5:d2:93:
cc:b3:c3:7d:ca:a7:b7:9a:87:e4:93:22:d8:a7:a0:dd:22:7d:
69:d2:e3:ca:d0:11:c3:0f:28:05:8b:8d:83:02:84:9a:2c:01:
f4:87:aa:3b:12:0e:e1:ec:b0:9c:ca:e3:ed:88:a5:ff:78:77:
45:ea:06:54:f6:92:2c:16:71:5f:c4:07:8f:69:47:50:d1:52:
85:e9:97:b2:35:1b:31:2d:bd:8b:23:f3:92:97:74:ee:12:7d:
c9:2c:f9:ab:3b:d7:31:01:14:52:83:de:5c:27:41:4c:bc:a3:
ac:04:74:ec:69:ac:c7:75:49:35:7f:28:10:80:d0:03:bd:e4:
3b:35:ca:15:27:b5:36:27:be:3e:54:66:0f:2f:ba:35:46:57:
a2:c5:46:37:9e:e2:bd:17:fc:55:ac:37:0c:72:6b:92:86:2d:
6c:c6:09:22:2f:d8:ed:77:83:d2:7b:b4:0f:d5:11:d7:43:bf:
b1:31:37:d6:94:07:c2:50:85:bd:aa:0b:42:0a:fa:8a:d8:1b:
ac:5d:10:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:42:41 2026 by rpki-client