Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/fXCdEo7uE0IUiDEWXe99TOfBMK8.roa
File: fXCdEo7uE0IUiDEWXe99TOfBMK8.roa (raw, json)
Hash identifier: 3NNGWg5U2UcEYTrTa0DBTSIExIdoDGdNQIU1CsQDwSY=
Subject key identifier: 7D:70:9D:12:8E:EE:13:42:14:88:31:16:5D:EF:7D:4C:E7:C1:30:AF
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A19EACC2345AF6E072D9C1B6ED90D172D9
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/fXCdEo7uE0IUiDEWXe99TOfBMK8.roa
Signing time: Mon 02 Nov 2026 23:51:24 +0000
ROA not before: Mon 02 Nov 2026 23:51:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 31.76.124.0/24 maxlen: 24
31.76.253.0/24 maxlen: 24
191.217.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 01:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9e:ac:c2:34:5a:f6:e0:72:d9:c1:b6:ed:90:d1:72:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 2 23:51:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d709d128eee1342148831165def7d4ce7c130af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:85:3d:6c:08:a1:25:4a:c9:47:f5:c6:fc:01:
6b:ac:19:85:d5:7c:b3:3d:ad:cc:11:e6:ca:7f:d5:
8e:80:63:59:b9:b1:43:98:01:e2:32:ae:07:c9:f8:
c6:c1:34:df:3a:58:3a:30:52:d1:1b:87:b7:7d:e0:
e8:96:3c:bd:f0:9a:12:0a:75:6e:b3:ad:a7:3e:79:
c5:cc:7e:0b:e5:ca:db:75:01:76:15:e4:4c:fa:9c:
03:3f:f8:b6:3f:8c:c4:71:3c:73:51:d4:b5:a5:ab:
d4:27:c3:b4:50:72:bf:27:0c:46:f1:85:dc:b9:b4:
f0:dd:42:87:ba:48:d5:1a:c4:e3:34:13:38:9d:cc:
93:ae:fa:97:7f:38:72:4f:9b:40:19:f3:7c:46:fb:
11:e5:7f:5d:f9:a2:a8:03:ba:80:2e:2d:2f:5e:2e:
a8:d8:4b:99:a1:76:43:e6:f4:f6:ca:96:04:ad:df:
fc:c1:1f:4f:dc:a9:b4:6d:80:ba:c5:fb:85:11:1b:
18:8e:44:64:87:db:1c:4c:6b:10:03:18:bc:87:4c:
40:2f:2d:30:e7:55:e0:18:a5:43:6f:f3:1b:9f:83:
93:f4:36:4f:e9:fc:bf:ce:9a:21:94:7d:41:f4:86:
43:d8:d5:97:fa:ce:55:fb:0c:a7:e9:0c:c5:36:b4:
57:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:70:9D:12:8E:EE:13:42:14:88:31:16:5D:EF:7D:4C:E7:C1:30:AF
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/fXCdEo7uE0IUiDEWXe99TOfBMK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.76.124.0/24
31.76.253.0/24
191.217.208.0/24
Signature Algorithm: sha256WithRSAEncryption
55:db:86:57:b4:0a:30:4a:9c:e8:bb:f9:06:cc:69:7e:e8:f8:
bd:76:c3:a3:3c:e9:94:7f:32:85:55:96:e2:98:18:f1:0e:84:
c0:e0:d0:b8:26:3f:80:b7:17:0d:87:3f:98:f8:8f:1a:d3:14:
2a:a6:a2:1e:0b:9b:db:a2:75:61:ad:8f:0a:8c:d4:cb:56:1b:
37:fb:f4:ad:26:44:08:15:7a:f3:d8:b4:92:38:33:7c:b4:cb:
55:c7:1b:bc:c2:df:3d:de:46:57:e0:62:0b:5a:f7:d0:5b:95:
dc:3d:a8:66:65:63:58:3e:47:cf:c1:b2:bd:89:8c:a5:24:ae:
f9:10:70:ad:d8:23:e9:71:70:48:ec:72:e2:8b:b0:34:e8:fb:
34:5f:8e:fa:19:2f:7c:cd:e5:e7:aa:87:be:65:fd:18:f6:bc:
ba:8b:8d:4b:28:63:75:e5:59:9a:ab:5a:85:bf:f9:dd:91:d2:
89:f7:1f:1e:63:38:e2:77:ee:27:38:b2:a4:ff:d3:a4:65:e8:
07:e0:d6:66:da:c5:c2:53:9f:30:c0:13:25:37:13:d3:69:2f:
34:5a:83:59:b5:9d:4a:72:79:8d:3e:3d:b7:ee:eb:f3:e6:a7:
aa:31:4e:b7:22:d5:3f:7a:dd:7f:79:1b:0e:2c:78:dc:c5:5a:
18:48:0b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 11:18:06 2026 by rpki-client