Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/b7e3yg3qNbKAnvFnFTrt921dGmg.roa
File: b7e3yg3qNbKAnvFnFTrt921dGmg.roa (raw, json)
Hash identifier: QBR2tAMKz1OcGKoAi72fFiOHzRUyko30x8yq3lH1EiE=
Subject key identifier: 6F:B7:B7:CA:0D:EA:35:B2:80:9E:F1:67:15:3A:ED:F7:6D:5D:1A:68
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1798E37DD1F8BE63869745325473339FB
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/b7e3yg3qNbKAnvFnFTrt921dGmg.roa
Signing time: Mon 26 Oct 2026 18:52:05 +0000
ROA not before: Mon 26 Oct 2026 18:52:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63018
IP address blocks: 31.76.90.0/24 maxlen: 24
31.77.96.0/24 maxlen: 24
31.77.98.0/24 maxlen: 24
31.77.249.0/24 maxlen: 24
179.253.96.0/24 maxlen: 24
179.253.97.0/24 maxlen: 24
179.253.102.0/24 maxlen: 24
179.253.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:8e:37:dd:1f:8b:e6:38:69:74:53:25:47:33:39:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 26 18:52:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fb7b7ca0dea35b2809ef167153aedf76d5d1a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0d:c0:31:05:cf:4b:6b:58:7d:4c:80:1d:fa:
fd:2d:65:8b:91:95:50:72:e8:5d:aa:cd:8a:c3:44:
d1:d6:38:fa:82:e9:fc:01:5c:f4:53:ba:2d:01:00:
92:b0:59:a4:6a:5a:d4:ef:00:5a:e3:50:85:5b:4d:
68:0b:99:4c:cd:5d:89:85:2d:11:cb:70:6c:c0:01:
7c:e2:c9:19:97:4d:9d:6b:a8:5e:69:c9:5e:42:2b:
e7:fb:e4:f5:0e:5b:26:47:67:90:2b:81:cc:ae:37:
03:fd:c6:d8:d6:4b:22:4e:fe:46:ae:b6:ec:f1:b5:
45:b3:7b:87:5b:64:b1:f6:6f:2c:3d:22:77:8c:f0:
65:5c:7d:0d:69:40:2c:7a:69:02:fa:6d:79:ce:74:
2b:7f:b8:e0:55:f2:8c:0b:a0:13:f2:6e:bf:14:e0:
3a:bc:f9:55:7c:06:af:d9:44:c7:3e:88:90:95:16:
bd:b2:4a:3f:b6:ae:39:eb:ac:9c:ff:53:aa:26:f9:
f7:d7:cb:e7:13:5f:5e:cb:9f:35:80:28:8e:b2:aa:
51:b0:f5:bc:01:12:89:62:74:c3:69:ca:47:9b:a7:
24:9c:9f:87:e3:79:bf:15:a9:16:5a:6e:24:bd:6a:
a5:69:03:02:c6:be:72:9c:cf:84:5b:2f:50:42:a8:
c7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B7:B7:CA:0D:EA:35:B2:80:9E:F1:67:15:3A:ED:F7:6D:5D:1A:68
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/b7e3yg3qNbKAnvFnFTrt921dGmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.76.90.0/24
31.77.96.0/24
31.77.98.0/24
31.77.249.0/24
179.253.96.0/23
179.253.102.0/23
Signature Algorithm: sha256WithRSAEncryption
76:99:84:51:cd:4c:41:0e:ae:0c:ec:42:59:db:bd:27:8d:37:
b5:a3:52:cd:bf:7c:85:8e:e7:ec:be:a3:2c:12:9e:a9:ef:62:
7c:85:66:a1:41:6f:78:99:88:41:2f:b7:d0:f2:04:9e:85:ad:
ba:22:af:f5:84:9c:12:dc:b0:e7:87:88:b8:e6:2f:d1:b2:c9:
f9:6d:0b:06:ab:f4:48:20:83:fb:7d:16:3e:7b:e7:01:53:01:
d3:74:9b:72:ae:b8:23:d1:bb:88:45:be:a5:76:60:83:e3:74:
db:ba:d5:25:ee:6e:64:c9:bf:62:a4:68:60:0b:31:85:32:7e:
1f:bc:45:a8:6f:81:0b:3d:a5:8b:b7:48:eb:8e:d9:8c:58:b6:
87:8a:ad:5d:8a:31:85:04:73:89:7a:db:5c:91:3b:27:0d:a9:
b9:22:c1:3a:7a:80:6e:e5:05:b4:2a:8e:5e:3a:8c:e9:88:9f:
4b:16:69:f6:fc:0d:af:ac:30:cd:ab:69:f9:86:1f:29:98:80:
95:66:c6:3d:0a:cb:88:65:9f:d7:6e:9f:43:3e:46:ac:51:af:
4a:c5:76:49:fc:21:b5:23:c8:d3:e4:8e:e6:c2:fa:38:1a:02:
83:a8:9e:fb:50:f8:e9:8c:9a:68:cb:2b:50:3f:95:6a:f4:5f:
ea:42:1a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:42:49 2026 by rpki-client