Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Yfx7O_xFe7cu-AB18kkMxtLUydc.roa
File: Yfx7O_xFe7cu-AB18kkMxtLUydc.roa (raw, json)
Hash identifier: zt5HCKe9rVc/gThVAzUFdUFSLvg3M19gfHRDm7vlbeY=
Subject key identifier: 61:FC:7B:3B:FC:45:7B:B7:2E:F8:00:75:F2:49:0C:C6:D2:D4:C9:D7
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E278E2CAD0EDBED0952F2D2734286FA26
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Yfx7O_xFe7cu-AB18kkMxtLUydc.roa
Signing time: Thu 14 May 2026 17:34:49 +0000
ROA not before: Thu 14 May 2026 17:34:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50049
IP address blocks: 31.77.232.0/24 maxlen: 24
31.77.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 31 May 2026 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:27:8e:2c:ad:0e:db:ed:09:52:f2:d2:73:42:86:fa:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 14 17:34:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61fc7b3bfc457bb72ef80075f2490cc6d2d4c9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bc:65:5f:d2:46:24:17:e9:f0:3a:83:1d:f8:
0b:ec:90:ba:34:85:2c:9f:36:80:47:c8:9d:b2:6a:
6e:c3:3d:89:e1:54:d9:88:27:97:9a:65:f5:b1:c4:
d0:71:5a:ce:8f:e8:6d:d1:cd:e5:42:2e:c1:ab:05:
9f:3a:54:8f:a9:71:eb:f4:ef:08:e7:a2:47:dc:84:
f0:a8:97:68:77:f9:6a:eb:78:98:93:61:b4:55:09:
63:54:f3:eb:c8:5b:22:21:08:bd:88:c0:c0:da:03:
09:f3:2d:f1:f6:76:e1:c5:39:b0:4e:e4:da:e9:2e:
74:18:a2:08:25:43:d5:52:a7:ec:ca:93:c1:c5:aa:
aa:9d:9b:d6:f0:86:03:f0:96:1c:3e:82:34:a9:ca:
a4:54:22:19:40:7f:42:55:10:73:c8:29:4f:da:cb:
7f:9f:11:4d:31:4a:86:98:c6:bc:9b:b0:c8:3b:1c:
22:8b:01:be:68:11:e1:c2:3a:9a:25:26:d5:cf:9d:
6d:d3:48:8d:5f:b4:90:80:5c:fc:88:d1:f9:8d:da:
e8:76:1d:07:af:5d:9f:53:fe:3d:0e:35:5d:64:e3:
90:c9:0f:2a:91:81:ea:89:8f:d6:96:13:26:a0:14:
f1:e9:49:c4:22:60:9c:07:44:1f:45:43:8d:3b:fb:
8f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FC:7B:3B:FC:45:7B:B7:2E:F8:00:75:F2:49:0C:C6:D2:D4:C9:D7
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Yfx7O_xFe7cu-AB18kkMxtLUydc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.232.0/24
31.77.255.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:82:30:6c:df:19:ef:64:29:1e:ee:12:32:bf:3f:95:99:66:
97:1b:7c:f6:aa:c8:13:0c:78:dc:30:e4:5f:39:dd:f3:9f:a3:
59:1d:6b:74:9f:06:50:fe:1f:df:14:96:44:c5:c7:59:ae:d2:
0e:ac:b0:88:c9:01:0c:c4:d5:03:ca:62:34:54:90:86:45:8d:
32:c6:d9:c1:af:44:fc:05:8d:6d:26:47:4c:7d:cf:d6:24:3b:
e6:1f:96:74:5c:5c:7a:17:5f:70:b3:dc:f6:c9:cf:0a:b0:16:
0e:06:98:17:a9:74:af:c0:d6:8f:ac:59:90:8a:04:b7:30:4f:
4c:0d:62:c2:33:24:fb:d7:67:24:c7:67:bb:ea:d6:68:60:de:
0c:08:74:6d:28:70:59:60:f1:9f:25:c6:50:72:59:06:99:d0:
51:cf:fa:30:21:bb:02:60:40:a5:af:4e:55:a6:0b:89:96:24:
47:40:f8:b1:6d:69:e7:d8:fd:f7:a2:95:f5:42:d9:0a:46:e1:
90:2f:2c:81:3b:1e:f1:91:7b:42:65:9a:8d:13:57:07:19:a4:
48:c9:77:f0:87:ed:13:31:2c:ff:1a:5a:69:b5:a5:2f:e4:1d:
76:ea:60:fe:8f:50:e3:51:08:c6:2d:42:c5:be:50:79:9a:33:
1b:fa:c1:ae
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ4njiytDtvtCVLy0nNChvomMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNTE0MTczNDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWZjN2IzYmZjNDU3YmI3MmVmODAwNzVmMjQ5MGNjNmQyZDRjOWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7xlX9JGJBfp8DqDHfgL7JC6NIUs
nzaAR8idsmpuwz2J4VTZiCeXmmX1scTQcVrOj+ht0c3lQi7BqwWfOlSPqXHr9O8I
56JH3ITwqJdod/lq63iYk2G0VQljVPPryFsiIQi9iMDA2gMJ8y3x9nbhxTmwTuTa
6S50GKIIJUPVUqfsypPBxaqqnZvW8IYD8JYcPoI0qcqkVCIZQH9CVRBzyClP2st/
nxFNMUqGmMa8m7DIOxwiiwG+aBHhwjqaJSbVz51t00iNX7SQgFz8iNH5jdrodh0H
r12fU/49DjVdZOOQyQ8qkYHqiY/WlhMmoBTx6UnEImCcB0QfRUONO/uPmQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGH8ezv8RXu3LvgAdfJJDMbS1MnXMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvWWZ4N09feEZlN2N1LUFCMThra014dExVeWRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAH03oAwQA
H03/MA0GCSqGSIb3DQEBCwUAA4IBAQBOgjBs3xnvZCke7hIyvz+VmWaXG3z2qsgT
DHjcMORfOd3zn6NZHWt0nwZQ/h/fFJZExcdZrtIOrLCIyQEMxNUDymI0VJCGRY0y
xtnBr0T8BY1tJkdMfc/WJDvmH5Z0XFx6F19ws9z2yc8KsBYOBpgXqXSvwNaPrFmQ
igS3ME9MDWLCMyT712ckx2e76tZoYN4MCHRtKHBZYPGfJcZQclkGmdBRz/owIbsC
YEClr05VpguJliRHQPixbWnn2P33opX1QtkKRuGQLyyBOx7xkXtCZZqNE1cHGaRI
yXfwh+0TMSz/GlpptaUv5B126mD+j1DjUQjGLULFvlB5mjMb+sGu
-----END CERTIFICATE-----
Generated at Sat May 30 17:47:50 2026 by rpki-client