Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/YCinEO_8lb25N77hh0Hq5bh5jJ4.roa
File: YCinEO_8lb25N77hh0Hq5bh5jJ4.roa (raw, json)
Hash identifier: ajvhnzC69/34BW1x7vfJKjC1BzHwYRP7ImQSFdlCh9A=
Subject key identifier: 60:28:A7:10:EF:FC:95:BD:B9:37:BE:E1:87:41:EA:E5:B8:79:8C:9E
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A086E9DDDC18BA95F444A32F4A7DA9C6DC
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/YCinEO_8lb25N77hh0Hq5bh5jJ4.roa
Signing time: Wed 09 Sep 2026 16:04:28 +0000
ROA not before: Wed 09 Sep 2026 16:04:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211745
IP address blocks: 31.77.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:e9:dd:dc:18:ba:95:f4:44:a3:2f:4a:7d:a9:c6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 9 16:04:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6028a710effc95bdb937bee18741eae5b8798c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:13:14:16:7b:68:b8:a0:6e:e4:af:0c:56:
65:f6:7d:a9:10:f1:15:04:f4:07:e0:ce:69:8a:6f:
cd:63:16:c3:86:0d:09:74:aa:fc:c0:4e:ba:e8:c0:
d3:19:30:4f:84:6a:3a:54:3d:af:f5:0b:ff:2d:04:
33:37:a1:a3:8b:39:e1:05:f8:67:2e:39:27:ac:9d:
ca:cc:c1:a4:48:06:0d:5a:e6:0d:a1:3e:25:57:42:
68:02:22:8e:ea:cf:3d:66:5a:82:9b:15:e6:e3:35:
e7:80:e2:6c:21:ff:41:7f:fb:8a:41:d3:38:2a:a8:
73:ca:28:a4:64:43:0e:f2:c2:c9:c3:06:7d:b3:c8:
8e:87:22:fe:67:c8:71:ef:99:02:fb:50:f3:4d:04:
40:cb:82:3d:35:08:8a:f5:c7:25:5f:80:20:5e:21:
81:30:db:56:68:85:92:a6:59:00:07:99:ec:9c:01:
a4:dd:58:bb:d0:a9:c6:5f:49:6a:f4:48:da:f1:be:
72:86:8d:01:f5:b8:86:11:4e:72:21:10:05:39:2d:
71:95:7b:4d:d6:61:ac:eb:a5:ad:9f:15:6d:13:f7:
09:31:dc:79:c9:f4:dd:d8:01:61:dc:7e:e8:6c:24:
2b:34:d5:69:5b:5e:8d:9e:5b:0f:b7:9d:9c:48:71:
e4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:28:A7:10:EF:FC:95:BD:B9:37:BE:E1:87:41:EA:E5:B8:79:8C:9E
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/YCinEO_8lb25N77hh0Hq5bh5jJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.64.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:f4:4f:f8:80:42:f5:37:e7:b6:55:70:a8:d4:bf:ab:f3:a3:
f5:de:03:3d:04:0d:d9:6f:45:78:88:b6:58:b5:11:a5:13:4c:
dd:1c:86:63:c8:c7:4d:fd:a2:4f:ed:37:97:bf:7f:cb:e8:ee:
43:25:7d:39:2a:11:59:4f:ab:61:3a:b1:8a:52:d5:9b:e1:54:
7c:90:ad:a0:a1:dc:da:f7:67:0a:6e:7f:25:06:01:46:5c:db:
4a:af:b1:5a:d2:ec:f9:32:3b:9f:5d:aa:d4:b1:20:70:a5:63:
e7:61:bd:75:76:21:f3:2b:6d:64:ec:1f:52:06:0c:4f:02:cc:
bd:e6:bc:5b:1e:f6:a0:a8:1b:73:23:7d:24:a1:0b:f0:39:59:
7f:b2:29:76:f5:53:74:5d:4b:e3:09:69:50:a8:1d:da:83:3a:
e2:7d:fb:8b:01:45:95:f9:af:5f:70:7d:52:6e:2d:b3:45:46:
85:4b:d0:cd:f1:38:59:b8:ab:89:56:84:7b:c6:36:12:98:c0:
51:01:d9:8f:54:6b:e9:1d:01:5c:42:b3:dc:34:14:0f:e5:a7:
2f:80:2a:11:cb:10:30:b0:61:f9:62:70:1f:84:a4:bb:87:3a:
19:94:c4:99:24:01:70:fa:b6:a8:aa:6d:1a:e4:d0:ec:d3:dc:
1e:fc:dc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:27:11 2026 by rpki-client