Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/l1FDPDfKDuW-9rb4VNdy-AFEKfk.roa
File: l1FDPDfKDuW-9rb4VNdy-AFEKfk.roa (raw, json)
Hash identifier: s6aJlJIkkDIn+/xv3MfZOT/adkTOyps7hiihIe5Vato=
Subject key identifier: 97:51:43:3C:37:CA:0E:E5:BE:F6:B6:F8:54:D7:72:F8:01:44:29:F9
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0A5D0EE8DE33FECA044D8F930A2291621
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/l1FDPDfKDuW-9rb4VNdy-AFEKfk.roa
Signing time: Tue 15 Sep 2026 16:05:28 +0000
ROA not before: Tue 15 Sep 2026 16:05:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213702
IP address blocks: 31.77.56.0/24 maxlen: 24
31.77.109.0/24 maxlen: 24
31.77.219.0/24 maxlen: 24
31.77.220.0/24 maxlen: 24
31.77.247.0/24 maxlen: 24
31.77.248.0/24 maxlen: 24
150.241.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:d0:ee:8d:e3:3f:ec:a0:44:d8:f9:30:a2:29:16:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 15 16:05:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9751433c37ca0ee5bef6b6f854d772f8014429f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c5:72:40:b7:37:1f:23:24:f0:24:98:a0:01:
06:3d:e8:59:c0:da:11:de:f7:9b:e5:14:10:30:e9:
58:c2:35:70:57:3e:99:15:ba:60:88:9f:43:25:0a:
a2:9a:54:f2:e7:66:08:18:43:6f:f0:3b:9a:8e:0e:
83:44:8e:2e:04:42:52:eb:0f:89:c9:a2:75:b3:35:
44:6e:b7:28:4e:16:40:fd:72:18:75:59:d7:ee:5b:
1d:79:ac:4a:a0:65:8c:66:ce:3e:79:21:15:a4:65:
a1:c5:00:cd:17:c9:df:d0:42:eb:ac:04:ac:f6:46:
cf:1b:be:2c:e9:d7:3b:1a:54:01:66:64:5c:2e:2c:
9b:e4:6e:34:37:54:21:90:ff:fe:e0:ae:92:eb:27:
fd:d6:b6:51:3d:73:64:85:0a:78:f4:35:da:20:8d:
52:fa:4b:d3:68:b8:63:8f:8a:6b:39:1e:5a:13:ff:
16:94:bf:4d:91:3c:22:1f:7b:2a:08:d3:56:ff:f7:
6b:1c:5e:3e:6e:6f:c0:d5:d7:54:b3:08:71:1a:99:
41:e5:a1:b9:46:b5:bf:16:67:26:15:3d:22:16:f2:
0c:6b:2e:fc:98:fb:bc:0c:93:ee:1d:c5:be:f7:a8:
21:6a:48:91:61:db:bd:70:bc:75:a0:6c:91:18:25:
03:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:51:43:3C:37:CA:0E:E5:BE:F6:B6:F8:54:D7:72:F8:01:44:29:F9
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/l1FDPDfKDuW-9rb4VNdy-AFEKfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.56.0/24
31.77.109.0/24
31.77.219.0-31.77.220.255
31.77.247.0-31.77.248.255
150.241.93.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:e9:de:47:a7:50:06:1f:d3:a5:98:dc:a6:36:8b:b8:34:57:
50:05:58:a5:dc:c7:e5:72:7f:4e:22:1b:d4:b6:c7:06:09:21:
97:30:ce:4b:bf:68:2a:0f:59:c4:eb:54:b9:02:c6:d1:ba:e1:
5d:dc:01:55:8b:1c:41:b2:5e:bb:e6:f8:b8:c7:04:e2:36:b4:
59:bc:8c:fa:9c:b3:ca:f4:14:3e:07:6e:b0:aa:8a:73:db:c7:
02:a8:f3:8d:09:e5:93:a5:09:7b:be:7d:7f:7d:97:2b:c5:01:
ca:eb:f9:de:ca:41:92:d1:78:48:d6:b8:cb:3c:f1:a7:ce:45:
47:b5:6c:66:3c:60:9c:31:d5:54:2c:a0:ba:af:1d:15:15:ba:
35:03:7d:25:f3:f1:b8:cc:a5:28:c2:5d:86:6a:a7:8d:31:68:
aa:81:4c:f8:04:ef:67:95:3d:9b:09:01:a5:14:56:c0:5a:e7:
13:5b:67:c0:b1:ee:71:3f:7d:dc:24:39:b6:04:eb:8d:07:c6:
97:dc:2f:e3:06:35:2a:51:73:e8:12:70:0a:af:cb:ac:99:a7:
86:6a:ba:38:13:7a:82:6f:2d:5f:11:64:43:ad:d5:f0:ea:83:
6f:c0:97:dd:2f:1f:d4:c4:88:7f:32:20:69:cb:c4:0f:6e:23:
75:b3:8b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:25:41 2026 by rpki-client