Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lc1ggC9Fq7dEl6z-QZPI2kpgIdY.roa
File: lc1ggC9Fq7dEl6z-QZPI2kpgIdY.roa (raw, json)
Hash identifier: HmycjnxazKa/LU7cbulmZYAyyB+Bu5+mgVqwxTqywZI=
Subject key identifier: 95:CD:60:80:2F:45:AB:B7:44:97:AC:FE:41:93:C8:DA:4A:60:21:D6
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A010FB7030F079F689B5BC6CE6659A004B
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lc1ggC9Fq7dEl6z-QZPI2kpgIdY.roa
Signing time: Mon 17 Aug 2026 18:28:28 +0000
ROA not before: Mon 17 Aug 2026 18:28:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214639
IP address blocks: 31.77.236.0/24 maxlen: 24
185.229.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:fb:70:30:f0:79:f6:89:b5:bc:6c:e6:65:9a:00:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 17 18:28:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95cd60802f45abb74497acfe4193c8da4a6021d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:11:60:97:2b:a0:d9:4f:ec:54:3f:63:05:06:
24:94:6e:cf:8f:ab:66:1d:b3:e1:61:83:a4:f0:2c:
73:8c:b9:a1:12:94:dd:de:28:aa:dd:1a:ff:34:5c:
c7:18:32:6f:c9:f0:4c:92:0b:d4:4c:2a:50:d2:22:
b4:58:01:6c:b1:37:c1:0a:31:73:da:14:49:27:34:
0e:19:f4:b5:14:1b:35:48:ba:89:7d:5a:8a:20:d5:
bc:79:7d:c8:a1:83:e4:33:47:02:b6:35:31:2d:01:
cd:45:e3:a7:71:d2:08:16:45:9c:70:b8:be:28:42:
ad:ec:f4:b3:7f:60:d9:f1:cc:9b:24:a3:7d:14:2f:
56:16:d4:e1:85:28:2d:85:ab:a6:cf:73:62:fb:c2:
f6:92:96:91:97:07:71:e6:42:97:29:3f:3c:dd:40:
3e:a3:da:f1:ba:80:54:2a:8a:38:a7:6b:f0:da:51:
28:cb:48:61:34:87:97:b9:04:c4:1a:22:18:2b:c0:
a9:d9:42:38:4d:22:f4:46:40:7d:88:d2:a1:ba:2d:
d0:df:8f:a9:6c:56:98:54:9e:5e:62:2e:0f:6c:8e:
21:13:0b:31:c7:ad:d1:56:53:c5:1f:32:da:03:de:
15:02:a7:f2:16:51:13:95:72:bb:9a:35:a4:93:5f:
5a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CD:60:80:2F:45:AB:B7:44:97:AC:FE:41:93:C8:DA:4A:60:21:D6
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lc1ggC9Fq7dEl6z-QZPI2kpgIdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.236.0/24
185.229.221.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:a7:bc:50:d2:26:13:74:6b:85:e4:a6:53:92:ff:59:d6:34:
21:81:bf:d6:54:b4:bb:b9:d6:31:36:04:5a:ba:3f:a7:07:4a:
ff:10:84:67:67:e6:07:23:96:33:dd:aa:dd:af:a2:ce:30:d4:
e9:83:f0:09:cb:47:ca:dc:34:f7:97:82:f8:ac:78:8b:5c:4f:
d4:4e:8a:b7:d6:38:a7:d2:10:af:87:28:23:51:a0:55:bc:b9:
e3:b7:ac:37:75:28:ed:e1:40:8c:3d:40:88:5e:7e:16:a9:f5:
41:5b:57:32:e3:06:8c:5d:0e:11:6e:96:7f:0c:43:67:fa:f4:
26:49:da:2b:d1:21:b4:0f:f7:bb:ca:01:6c:06:45:ee:0b:d4:
9e:67:81:e7:59:38:af:0b:ad:d3:60:22:5b:21:ba:33:d1:2a:
83:6d:55:1a:cf:53:90:7a:b9:d7:df:a9:35:54:98:e0:f6:10:
14:d4:c7:3f:96:53:99:8a:5f:a0:d0:09:29:f5:b1:f8:8e:6e:
92:af:70:2f:d4:b6:c1:04:3a:29:d6:64:2c:1d:b3:4b:e0:da:
cc:bc:e3:2a:0b:c9:3b:b5:54:54:a6:5b:c1:37:33:06:0d:96:
0b:f9:5b:e3:a4:86:66:03:1e:49:31:fa:0d:54:04:75:e2:92:
cf:53:8c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:18:00 2026 by rpki-client