Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ZNyoln_smuw1hGStgkmk7aNcwDo.roa
File: ZNyoln_smuw1hGStgkmk7aNcwDo.roa (raw, json)
Hash identifier: oZrxwIyLvtDFxVLOeXvfxJuQN2ILcpoRIjnCJI+ETJk=
Subject key identifier: 64:DC:A8:96:7F:EC:9A:EC:35:84:64:AD:82:49:A4:ED:A3:5C:C0:3A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A15F915C325EA1A4324C12C255D3A3662C
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ZNyoln_smuw1hGStgkmk7aNcwDo.roa
Signing time: Wed 21 Oct 2026 17:45:24 +0000
ROA not before: Wed 21 Oct 2026 17:45:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199412
IP address blocks: 31.77.48.0/24 maxlen: 24
31.77.53.0/24 maxlen: 24
31.77.54.0/24 maxlen: 24
31.77.190.0/23 maxlen: 24
179.236.134.0/24 maxlen: 24
179.254.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:91:5c:32:5e:a1:a4:32:4c:12:c2:55:d3:a3:66:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 21 17:45:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64dca8967fec9aec358464ad8249a4eda35cc03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e1:22:cd:e8:ef:0a:18:aa:c5:9c:f3:3f:6a:
a2:e8:23:30:13:12:51:23:ed:27:3c:32:33:33:2a:
b6:d8:ab:a5:f8:dd:fb:d9:a0:4f:4b:40:e4:66:e4:
e2:79:31:21:a6:64:e9:a8:e3:4e:b0:00:7b:7e:68:
23:57:27:97:dd:3c:61:17:4c:c2:7e:c3:11:07:89:
eb:6a:88:ec:ec:38:10:36:85:97:6b:d5:e8:bf:1b:
3e:17:79:85:1d:03:c4:e1:08:c0:a5:da:e8:01:6b:
f9:c0:c3:f7:f9:14:0f:ed:d8:d7:49:cb:39:43:42:
0d:12:01:1b:d4:1d:3d:59:8d:9d:b1:27:f3:9d:a1:
27:55:c0:e9:22:f1:1c:24:8f:85:49:79:ce:c2:47:
34:c9:cc:b8:9d:18:a3:a5:7c:3c:73:e4:66:45:6e:
6b:c8:96:ad:ba:62:2e:2b:de:c0:a8:da:b8:57:80:
8f:d1:81:7a:83:b3:a5:e5:23:e9:38:cb:3f:df:f5:
9b:a7:9a:2d:79:3f:11:17:79:af:4c:6f:7c:ec:2f:
36:e5:e4:ad:3c:dd:a0:49:45:93:de:5f:c1:7c:65:
e3:47:09:ae:d0:3d:de:ca:21:dd:ac:ac:74:91:4f:
b7:fa:64:9d:17:d3:bf:bb:69:52:f3:88:d0:6b:7b:
2d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DC:A8:96:7F:EC:9A:EC:35:84:64:AD:82:49:A4:ED:A3:5C:C0:3A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ZNyoln_smuw1hGStgkmk7aNcwDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.48.0/24
31.77.53.0-31.77.54.255
31.77.190.0/23
179.236.134.0/24
179.254.124.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:bb:64:c8:d4:80:8d:23:de:2b:4b:eb:83:ea:26:bc:3c:3f:
8d:23:1b:3c:77:94:86:41:fc:7c:3c:e4:cf:c3:e9:b3:40:12:
f4:f3:37:c2:57:e2:9d:b5:d7:f4:a5:36:78:9a:d3:e1:a0:91:
a0:04:0e:60:8c:9c:c9:5b:5c:17:09:ee:a9:26:25:69:39:71:
07:d9:ca:74:66:24:d6:f2:6e:2d:d6:77:b1:3a:e4:d8:4e:62:
68:51:66:19:65:b7:e2:f4:6f:d1:33:06:45:79:92:14:8e:e2:
f9:e5:80:d4:3a:65:62:a2:fb:49:e5:14:56:14:c5:72:28:e9:
89:b5:6c:d4:ed:02:87:9f:11:7f:4b:bd:fb:70:09:c5:fc:d9:
50:80:81:36:83:a3:0d:0e:bb:aa:8b:1a:c6:a7:df:54:3d:3f:
41:75:6b:8b:3a:64:3e:59:24:9c:7a:e9:de:70:d2:e8:ec:c7:
b2:9d:b1:33:dd:1e:41:fa:5f:0c:bd:61:ac:59:97:77:3e:8d:
a7:ea:b4:1d:f2:21:20:75:f1:07:65:13:96:53:dc:52:f4:fe:
2f:58:93:fe:e5:6a:ff:3a:80:f7:71:6c:47:d4:04:2d:87:ef:
c4:8c:8a:bc:cb:16:79:90:69:a7:40:d1:13:4e:88:43:5b:55:
fc:47:73:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:26:45 2026 by rpki-client