Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hP6k_jLyI489bo060e7SGWZ83_g.roa
File: hP6k_jLyI489bo060e7SGWZ83_g.roa (raw, json)
Hash identifier: 7gCgF8l+YDWcclvRcTdOOQQnwrQVZA0kG9RrlR4Pehg=
Subject key identifier: 84:FE:A4:FE:32:F2:23:8F:3D:6E:8D:3A:D1:EE:D2:19:66:7C:DF:F8
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019EC7CE659EB7F6BC982F406C1F5E2D56DA
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hP6k_jLyI489bo060e7SGWZ83_g.roa
Signing time: Sun 14 Jun 2026 20:24:12 +0000
ROA not before: Sun 14 Jun 2026 20:24:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203075
IP address blocks: 31.77.112.0/24 maxlen: 24
144.31.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c7:ce:65:9e:b7:f6:bc:98:2f:40:6c:1f:5e:2d:56:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 14 20:24:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84fea4fe32f2238f3d6e8d3ad1eed219667cdff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1f:d6:43:e7:4c:05:b5:d5:48:a0:f2:02:02:
d7:b8:77:75:25:08:d9:34:a1:c3:20:2c:08:f5:32:
f8:f4:bf:02:02:f3:f0:ae:73:80:5f:7e:76:ad:f3:
cc:e4:b2:ff:fa:05:ce:f2:b1:bd:32:ba:12:1d:90:
0d:a2:1d:10:8b:ae:77:07:bc:ff:12:ba:54:b6:7d:
0e:42:8b:6f:c0:9b:57:74:6b:43:62:84:b0:ca:bb:
16:a2:51:1c:39:95:61:ad:5e:d9:bd:99:02:ca:da:
5d:9e:c7:f5:be:98:ce:ff:1b:9a:71:da:ca:18:ee:
6f:97:ac:2e:cf:b2:c3:16:b7:35:0c:51:b3:50:57:
a4:40:5c:d5:cb:2d:19:3e:1a:b6:13:93:55:ac:42:
12:bf:ba:f2:09:84:dd:12:ba:be:ef:c2:e8:ce:6b:
2c:9b:9f:16:24:99:2b:e6:00:66:70:6f:ba:48:83:
de:a9:d6:f0:a4:64:ed:77:64:8f:5a:33:8b:e4:79:
48:77:ff:1c:7f:3e:34:6e:94:ed:d8:40:0c:22:e3:
2d:db:7a:a7:d9:94:31:fe:25:70:2a:37:8a:7f:07:
3f:d1:bd:28:e8:f6:f6:aa:b6:45:ef:4c:80:e4:fb:
44:e9:e4:c7:3f:52:85:94:48:e8:fb:ea:31:cf:6d:
b9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FE:A4:FE:32:F2:23:8F:3D:6E:8D:3A:D1:EE:D2:19:66:7C:DF:F8
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hP6k_jLyI489bo060e7SGWZ83_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.112.0/24
144.31.41.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:6a:bd:c7:f8:94:c3:41:13:c7:f2:a8:43:02:41:e9:16:d8:
05:08:c9:aa:cd:41:db:fb:ef:f0:d0:89:e4:77:7f:ec:89:33:
27:58:1c:0a:8b:f4:bb:ea:2d:43:c7:19:69:d2:94:c7:93:0d:
3b:1b:3a:e4:fc:46:7a:68:80:47:de:e6:ef:ff:bf:fc:30:bc:
f7:af:27:92:66:ed:65:e2:09:9d:fa:38:5f:cf:b9:0d:1b:f8:
06:9c:90:86:01:ff:c5:43:d3:ab:ef:d4:9c:80:88:2e:67:a2:
61:d4:8c:12:0f:40:93:56:bf:1a:34:d4:0e:fd:96:c4:18:62:
1b:3e:73:1b:40:a9:1e:fb:0f:06:d0:cb:d5:f7:38:35:80:4c:
e0:32:28:1b:cc:b7:40:fa:f3:d3:d1:a2:d0:c6:12:75:42:40:
e8:0e:50:a2:1b:7e:3f:4f:ab:5d:02:f5:5b:2f:86:d1:bb:2d:
c1:cd:a6:ec:fa:6a:63:6c:61:7e:bd:46:08:d5:23:a9:47:4f:
47:e5:45:0a:1b:d4:97:12:c9:95:db:1f:d9:8a:d3:e8:36:24:
2a:0b:e9:0a:51:bc:a9:8d:f8:db:cf:86:e6:f9:57:3a:f5:26:
36:42:4d:82:75:74:0f:15:1a:90:33:9e:98:c1:93:eb:7b:13:
a0:6e:84:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:05:15 2026 by rpki-client