Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/g1yENBwZwlORILPKtdflRf5YTGw.roa
File: g1yENBwZwlORILPKtdflRf5YTGw.roa (raw, json)
Hash identifier: QkbKq5YDUfDWg0y1ELuay48nHCfepRHmnQLrAENgsBM=
Subject key identifier: 83:5C:84:34:1C:19:C2:53:91:20:B3:CA:B5:D7:E5:45:FE:58:4C:6C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E091B31967A9C9568976D8247BDEA9022
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/g1yENBwZwlORILPKtdflRf5YTGw.roa
Signing time: Fri 08 May 2026 19:40:37 +0000
ROA not before: Fri 08 May 2026 19:40:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46177
IP address blocks: 31.77.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:09:1b:31:96:7a:9c:95:68:97:6d:82:47:bd:ea:90:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 8 19:40:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=835c84341c19c2539120b3cab5d7e545fe584c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:66:65:62:e6:dd:9d:59:c1:43:89:23:68:1c:
34:d3:23:fd:26:64:c6:83:c0:32:93:78:ab:09:31:
18:f4:38:80:fb:91:71:61:cf:50:a6:22:2c:bc:7a:
7e:1f:67:81:7e:28:d5:c4:64:40:5a:f0:c4:9f:8d:
e0:d0:4b:32:57:c0:77:aa:69:68:fa:77:e5:c4:35:
45:bf:cd:de:c7:ea:33:85:37:82:65:c9:d7:c1:45:
03:6b:ac:7d:04:f7:89:2d:20:26:de:3b:69:82:16:
9e:9b:71:f4:a4:d6:f1:c0:69:b0:82:65:34:79:e2:
20:64:59:b8:a7:97:1f:28:1b:3e:a4:03:c0:0c:20:
cb:8e:1c:48:00:66:68:c1:70:4c:54:95:bf:12:dd:
01:02:11:7b:4a:72:ab:da:67:50:f7:1f:30:7a:46:
50:07:2c:da:64:31:8a:b8:f4:c4:ac:97:cc:94:27:
d8:d3:af:5b:3a:68:05:e7:d2:e1:dc:31:bb:cb:ef:
2e:b2:1a:a3:cc:50:5f:ad:51:f9:9a:1f:a8:55:94:
78:d0:d2:48:f9:2b:2d:8d:fd:8c:da:c3:2e:6f:96:
4a:fb:4a:ad:b9:c6:82:8c:85:24:f9:a1:e3:d9:48:
85:a6:5c:80:d2:fe:3d:f2:d8:d6:80:e4:c0:66:7a:
c7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5C:84:34:1C:19:C2:53:91:20:B3:CA:B5:D7:E5:45:FE:58:4C:6C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/g1yENBwZwlORILPKtdflRf5YTGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.212.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:c0:dc:86:13:11:22:b9:a3:11:b0:f6:5d:e9:d3:a8:66:51:
02:c4:0c:4c:fd:70:af:7e:4c:41:c2:a5:54:32:db:4f:1e:ea:
2e:0a:d2:02:e0:ef:eb:45:49:21:e3:01:23:44:a7:f0:aa:67:
0a:ca:de:b2:dd:bd:77:70:c0:d4:81:77:dc:30:39:c0:83:e5:
0b:24:c4:31:8c:45:25:df:89:67:e9:99:03:64:33:ef:9a:da:
80:3a:0e:3d:ec:ef:ce:b9:a9:a0:5a:e6:a4:e0:55:f9:7a:73:
8a:06:97:f0:4d:d5:90:a1:1b:27:5b:6b:8b:be:16:c0:98:6e:
a5:0f:dd:a5:4b:9a:e4:ec:55:50:4e:96:3d:3c:32:98:87:47:
98:81:8b:52:c8:ad:a4:b8:cf:43:89:dd:35:15:4a:64:a2:dc:
db:48:8a:f7:55:8f:75:ec:80:39:c0:9c:0e:95:f8:ad:99:24:
17:ee:f7:15:eb:85:c9:cb:9e:60:a7:db:55:bf:90:c1:8e:3e:
de:aa:07:42:c6:67:54:d7:ab:55:9d:64:87:53:3b:ef:ad:25:
31:e0:f6:73:05:42:73:45:3a:a2:bf:4e:79:75:b3:83:41:68:
0c:56:35:51:8c:ad:0b:d6:ba:ee:68:e9:0d:75:98:96:1f:da:
9c:1b:a5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:42:29 2026 by rpki-client