Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lCr-WGShA2fsZpu489uLijVj6FU.roa
File: lCr-WGShA2fsZpu489uLijVj6FU.roa (raw, json)
Hash identifier: zsORKIrfhdN+Kqc8ISte/8Tjw8g+/HDwjL/SJc4wLJ0=
Subject key identifier: 94:2A:FE:58:64:A1:03:67:EC:66:9B:B8:F3:DB:8B:8A:35:63:E8:55
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F193E5C49408016E0C522243139D5A599
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lCr-WGShA2fsZpu489uLijVj6FU.roa
Signing time: Tue 30 Jun 2026 15:55:44 +0000
ROA not before: Tue 30 Jun 2026 15:55:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36002
IP address blocks: 31.77.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:3e:5c:49:40:80:16:e0:c5:22:24:31:39:d5:a5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 30 15:55:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=942afe5864a10367ec669bb8f3db8b8a3563e855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:12:5f:64:37:be:0f:95:94:ca:7b:8d:df:6c:
df:b4:f5:4d:da:e7:0b:6a:46:f1:0d:69:95:4d:12:
87:4c:07:f6:ab:be:2e:fd:43:b9:7e:70:d7:09:2a:
5e:a3:b4:f7:99:68:c9:3b:53:d4:eb:fc:6a:3b:82:
eb:a0:7f:f9:87:a1:1e:af:48:59:15:3f:0d:32:a6:
5d:6c:ed:34:fe:dd:33:41:51:5f:4f:ed:1c:32:c9:
9d:ea:6a:80:80:d9:0f:2b:c3:e2:cc:39:ac:37:99:
84:2a:55:b9:9b:7b:1b:7d:35:14:40:6f:6e:67:3e:
9f:3b:25:a6:f9:8e:59:d5:80:4f:65:fb:95:d5:99:
3c:ae:5a:c5:c0:cd:52:18:32:e0:af:76:0e:7a:01:
52:04:73:67:fd:e7:5c:50:6c:0e:80:76:3d:f8:63:
23:1e:1d:96:53:e5:75:0e:5f:81:20:f3:f9:50:6f:
19:c7:df:e6:df:b3:33:63:03:07:3a:2a:3c:4e:5f:
12:8e:dd:64:6e:97:b8:3b:2a:d6:30:46:2a:d8:f1:
7c:6f:14:f6:09:4e:f7:9a:d2:99:85:2a:9b:b5:fd:
64:8a:fd:87:2a:cd:83:eb:1d:11:c9:f9:0d:6c:ff:
99:89:f6:9e:55:0b:24:f0:e5:36:aa:ac:f4:0a:25:
f7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2A:FE:58:64:A1:03:67:EC:66:9B:B8:F3:DB:8B:8A:35:63:E8:55
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lCr-WGShA2fsZpu489uLijVj6FU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.110.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:45:fd:e8:a7:4d:02:a8:36:ba:65:67:68:74:e4:44:4c:be:
1c:08:2d:c7:da:8f:9b:7e:b7:1e:bb:0f:19:ae:ef:a3:c1:d7:
d6:74:66:59:5e:6f:05:42:c1:67:3f:d4:eb:16:fd:1d:25:e9:
ec:17:bb:61:32:bf:d0:37:5a:20:b6:b4:8c:c4:f3:23:ba:12:
81:7d:64:28:81:1c:46:06:4f:92:34:13:1d:df:c2:36:6f:5e:
8b:c8:f1:1f:bd:23:fa:8f:d7:27:b1:c0:9a:0e:e2:ca:a4:1f:
07:08:3b:cd:d8:4a:f9:50:e3:5c:da:ba:08:4d:b5:c8:20:b7:
6f:67:07:7b:2f:57:4d:92:ab:af:9d:8c:28:29:17:71:e6:b4:
09:22:e2:be:f0:4e:60:72:3a:17:aa:b4:99:ed:3f:79:b7:46:
dc:29:29:ed:d4:13:53:dd:d4:7a:a4:13:ed:10:a6:66:cf:2b:
c8:67:ed:e2:00:31:e6:c5:8d:4a:e6:ac:97:42:cb:e4:f8:99:
6d:a7:6a:70:e4:eb:e7:52:d1:a2:66:96:5e:db:e2:df:f7:0a:
40:3a:10:4d:a4:5c:1d:fc:1b:c7:a4:3e:99:e2:16:e8:25:e7:
f0:03:69:67:29:f6:3a:0b:34:13:1f:23:80:fb:ec:0a:d1:ba:
65:8e:d7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:52 2026 by rpki-client