Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/caTcdWpbUoRL9gn2ekYIvLeHugY.roa
File: caTcdWpbUoRL9gn2ekYIvLeHugY.roa (raw, json)
Hash identifier: 9uXXgtJorA2NjW4gWoyJmNr3wqZzmJTwghBmySsSATk=
Subject key identifier: 71:A4:DC:75:6A:5B:52:84:4B:F6:09:F6:7A:46:08:BC:B7:87:BA:06
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A025D061996F20920E326E0E901BFBE1F5
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/caTcdWpbUoRL9gn2ekYIvLeHugY.roa
Signing time: Fri 21 Aug 2026 19:33:28 +0000
ROA not before: Fri 21 Aug 2026 19:33:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219064
IP address blocks: 31.76.38.0/24 maxlen: 24
31.76.39.0/24 maxlen: 24
31.76.91.0/24 maxlen: 24
31.76.113.0/24 maxlen: 24
31.76.119.0/24 maxlen: 24
31.76.249.0/24 maxlen: 24
31.77.114.0/24 maxlen: 24
31.77.152.0/23 maxlen: 24
31.77.154.0/24 maxlen: 24
31.77.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:d0:61:99:6f:20:92:0e:32:6e:0e:90:1b:fb:e1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 21 19:33:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71a4dc756a5b52844bf609f67a4608bcb787ba06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:da:cf:71:de:ae:3c:21:37:49:20:98:46:0b:
15:15:45:23:16:3b:02:f9:c9:ff:59:a7:e7:d4:f4:
8c:96:f4:86:b4:61:4f:d3:02:f1:25:55:a0:26:0e:
f9:ab:08:a4:a7:59:d3:d6:f4:f2:a5:d1:38:37:66:
c2:60:60:20:01:24:54:1d:af:cd:eb:77:e5:b1:c2:
b5:34:6b:60:6e:4b:a8:79:6b:11:c9:57:4e:94:ef:
c9:f8:69:9d:85:a8:b6:a6:2f:3f:8e:9c:c7:e7:c5:
13:8c:b1:6f:ce:2b:96:68:52:8c:ef:c5:05:43:e8:
6a:88:fa:0b:3e:38:57:24:1e:06:42:2a:25:d3:ec:
a0:82:68:74:f4:f7:7a:88:0f:74:8e:63:05:9c:80:
a7:4d:9d:53:26:1a:ce:ba:13:e3:b2:17:73:fe:30:
f8:99:ff:32:d7:b5:fd:9f:3e:ae:e5:8d:f1:15:4d:
f7:7a:7d:cb:10:77:b6:e7:0d:32:4b:3d:be:58:2f:
04:ff:30:bb:d6:e7:8b:01:52:e3:2a:ba:51:90:f9:
90:38:97:31:2a:92:15:5a:29:1c:5d:fb:17:b1:fb:
56:66:00:5e:d7:f1:96:ac:41:25:a3:34:7f:32:bd:
70:d2:26:06:45:3d:da:98:cd:10:db:d2:96:7a:3a:
11:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A4:DC:75:6A:5B:52:84:4B:F6:09:F6:7A:46:08:BC:B7:87:BA:06
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/caTcdWpbUoRL9gn2ekYIvLeHugY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.76.38.0/23
31.76.91.0/24
31.76.113.0/24
31.76.119.0/24
31.76.249.0/24
31.77.114.0/24
31.77.152.0-31.77.154.255
31.77.201.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:ed:12:f9:cf:69:f0:94:84:63:4d:02:b1:9f:2d:f8:c2:95:
16:a2:04:83:32:c6:dd:47:3b:08:a3:6a:5c:2a:53:c7:d3:12:
71:a7:b5:65:64:6d:4e:d0:0d:b7:e7:83:c0:ce:dc:17:cd:2f:
ad:40:53:b6:78:4d:c3:da:3e:a1:bd:4f:a3:a4:11:4e:99:89:
b8:be:12:8f:85:2c:29:da:86:1d:e9:69:cc:52:44:fc:d4:9d:
07:e7:6d:ff:d9:99:34:72:60:6e:d1:c9:e8:c8:40:f5:e6:aa:
24:be:6a:61:06:42:b2:5b:1f:df:46:e0:9e:cd:5c:43:53:68:
e3:04:dd:ae:3b:db:bf:37:b4:46:81:64:34:db:5a:60:10:25:
f8:d1:d8:fc:16:55:e7:37:8a:14:1a:92:e8:c0:a0:b4:51:e3:
52:25:60:51:a1:da:e3:c5:5f:6e:23:cd:89:8c:4b:91:b9:ee:
cb:46:17:6c:6b:8b:b3:58:76:e7:51:5e:4a:f6:6f:a5:d1:51:
86:33:c5:35:d1:54:74:da:9d:dd:fc:d4:d5:1d:9e:35:39:ff:
75:08:9b:d1:7b:fc:29:2a:1a:22:65:f1:24:b0:6b:5f:e6:1e:
9f:21:3c:51:9c:78:71:bb:d8:dc:f7:45:9c:72:8a:10:d5:9d:
b6:8f:c9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:57:37 2026 by rpki-client