Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/WF1fbjeLQBeHumuPGxWr7y-ZKDM.roa
File: WF1fbjeLQBeHumuPGxWr7y-ZKDM.roa (raw, json)
Hash identifier: +TmxL5bJV4T5YsAxqq252X2FNxUGAoayd2ictu8GmVs=
Subject key identifier: 58:5D:5F:6E:37:8B:40:17:87:BA:6B:8F:1B:15:AB:EF:2F:99:28:33
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0EE1D821E7F4F68AF88F3A6988F4FA26E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/WF1fbjeLQBeHumuPGxWr7y-ZKDM.roa
Signing time: Tue 29 Sep 2026 17:01:46 +0000
ROA not before: Tue 29 Sep 2026 17:01:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219177
IP address blocks: 31.77.34.0/23 maxlen: 24
31.77.42.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:1d:82:1e:7f:4f:68:af:88:f3:a6:98:8f:4f:a2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 29 17:01:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=585d5f6e378b401787ba6b8f1b15abef2f992833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9d:7b:76:d0:d4:d3:ec:4e:e2:70:74:19:ef:
c5:eb:3f:fe:df:3e:b8:c6:b8:56:73:19:d7:bf:c0:
2f:b0:bb:3a:96:c1:4b:07:c4:3e:12:f8:07:82:8b:
2e:1d:5b:7f:75:08:bf:f9:8a:ad:28:70:a0:fa:dc:
2d:97:63:bc:b4:bc:f2:9f:95:69:d5:05:1d:76:78:
d3:b9:d7:2b:a6:3d:c3:96:49:8b:9c:d8:ed:58:0c:
6b:c9:c9:f8:55:1c:3f:ec:be:67:74:8a:07:73:75:
06:ba:cf:fd:39:8d:c2:c7:69:00:0e:1a:0f:dd:2c:
19:40:7b:1a:eb:e5:5c:95:c5:8d:d4:54:2a:35:c8:
98:95:8e:6a:8e:6e:f1:d2:e7:e9:e4:ed:96:e4:2d:
31:41:b2:24:ce:1a:54:ad:f9:04:87:8f:12:41:df:
cd:ca:87:18:d8:c5:44:d4:b6:ca:ae:93:5d:ee:4b:
76:80:7d:c0:38:7b:97:3c:b6:d6:dd:1d:2f:d0:24:
e6:19:93:20:da:7a:5d:7f:fc:22:c7:c9:b0:5e:e3:
77:b8:ef:9d:9d:e1:07:dc:77:0e:1e:81:68:ae:af:
24:06:46:9a:ab:07:f7:93:07:53:0a:f0:df:7a:65:
d2:c2:a5:39:fc:47:be:02:cd:66:9a:4d:aa:b5:72:
e9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5D:5F:6E:37:8B:40:17:87:BA:6B:8F:1B:15:AB:EF:2F:99:28:33
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/WF1fbjeLQBeHumuPGxWr7y-ZKDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.34.0/23
31.77.42.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:c1:32:14:77:c1:02:47:c5:48:cf:75:6f:c2:47:4a:d4:4d:
e8:62:5d:d6:a6:4b:0c:c6:8a:ff:63:cc:cf:19:f9:a7:8d:1e:
de:e5:54:26:83:14:33:a7:2b:8b:78:07:66:f6:ca:4e:16:f8:
6c:3e:00:1c:40:6a:61:3c:7c:ab:1c:9f:11:85:26:64:a9:49:
31:d3:96:69:a4:e8:4a:db:58:f9:ce:0f:52:2a:50:96:27:ce:
91:07:f0:4d:cb:e5:44:34:96:5f:e9:cb:95:75:45:69:d7:9d:
c3:40:1d:46:3f:c4:3e:98:9c:89:a0:f0:0e:8a:9c:a7:a5:4f:
aa:e1:4b:37:e4:9f:aa:3f:31:ca:a8:a3:bd:0d:cc:85:b8:8e:
09:2d:d1:f4:a7:7f:da:0b:ce:39:0c:d7:c6:46:73:64:00:36:
7b:c0:cb:72:3f:5c:28:4b:2c:02:25:54:35:9c:2e:b8:92:10:
14:e7:ce:1a:f0:03:a9:c2:c3:1d:2e:d0:11:da:b7:34:86:a6:
51:3f:16:21:53:0d:28:f8:07:d5:d5:e6:da:6c:d1:d0:a8:cf:
35:9a:cc:87:31:2f:1f:b0:d4:fa:ce:d2:44:4d:d7:ed:37:52:
50:4f:84:5e:8e:ab:cd:a2:f5:c6:7d:9b:0c:35:a1:36:f9:7d:
20:42:92:7e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaDuHYIef09or4jzppiPT6JuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwOTI5MTcwMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODVkNWY2ZTM3OGI0MDE3ODdiYTZiOGYxYjE1YWJlZjJmOTkyODMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop17dtDU0+xO4nB0Ge/F6z/+3z64
xrhWcxnXv8AvsLs6lsFLB8Q+EvgHgosuHVt/dQi/+YqtKHCg+twtl2O8tLzyn5Vp
1QUddnjTudcrpj3DlkmLnNjtWAxrycn4VRw/7L5ndIoHc3UGus/9OY3Cx2kADhoP
3SwZQHsa6+VclcWN1FQqNciYlY5qjm7x0ufp5O2W5C0xQbIkzhpUrfkEh48SQd/N
yocY2MVE1LbKrpNd7kt2gH3AOHuXPLbW3R0v0CTmGZMg2npdf/wix8mwXuN3uO+d
neEH3HcOHoForq8kBkaaqwf3kwdTCvDfemXSwqU5/Ee+As1mmk2qtXLpcQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFhdX243i0AXh7prjxsVq+8vmSgzMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvV0YxZmJqZUxRQmVIdW11UEd4V3I3eS1aS0RNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBH00iAwQB
H00qMA0GCSqGSIb3DQEBCwUAA4IBAQA9wTIUd8ECR8VIz3VvwkdK1E3oYl3WpksM
xor/Y8zPGfmnjR7e5VQmgxQzpyuLeAdm9spOFvhsPgAcQGphPHyrHJ8RhSZkqUkx
05ZppOhK21j5zg9SKlCWJ86RB/BNy+VENJZf6cuVdUVp153DQB1GP8Q+mJyJoPAO
ipynpU+q4Us35J+qPzHKqKO9DcyFuI4JLdH0p3/aC845DNfGRnNkADZ7wMtyP1wo
SywCJVQ1nC64khAU584a8AOpwsMdLtAR2rc0hqZRPxYhUw0o+AfV1ebabNHQqM81
msyHMS8fsNT6ztJETdftN1JQT4RejqvNovXGfZsMNaE2+X0gQpJ+
-----END CERTIFICATE-----
Generated at Mon Oct 26 02:12:38 2026 by rpki-client