Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lt4WgyZlga7MSjEuOrSRumxRqP0.roa
File: lt4WgyZlga7MSjEuOrSRumxRqP0.roa (raw, json)
Hash identifier: ceAiM0OlUfpKfKphN+YjeuTEmNTo0CMwI9LzWlF6iDo=
Subject key identifier: 96:DE:16:83:26:65:81:AE:CC:4A:31:2E:3A:B4:91:BA:6C:51:A8:FD
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F47CD9B98B6CA440C3DE277AAF774BB7F
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lt4WgyZlga7MSjEuOrSRumxRqP0.roa
Signing time: Thu 09 Jul 2026 16:54:44 +0000
ROA not before: Thu 09 Jul 2026 16:54:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210538
IP address blocks: 31.77.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:cd:9b:98:b6:ca:44:0c:3d:e2:77:aa:f7:74:bb:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 9 16:54:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96de1683266581aecc4a312e3ab491ba6c51a8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a8:23:51:b2:df:60:11:3a:d6:d1:6a:f1:dc:
e2:f6:dd:59:ae:7b:56:14:75:42:16:a4:c2:ca:01:
52:23:a7:1c:e5:1d:2d:16:00:b9:24:8e:0a:ce:e6:
8f:ee:48:c0:fc:a1:7b:5d:db:a4:58:29:24:98:b3:
65:81:fe:24:02:3c:e0:f8:69:10:6c:63:5b:ea:13:
bb:d7:7d:51:98:f6:6d:5a:29:60:7d:a7:9e:b9:e3:
d0:7a:2a:ee:4b:8a:4a:d0:54:dd:a9:d7:8d:bd:3a:
35:f1:45:52:3d:b7:85:46:f4:41:93:03:fd:c0:0a:
26:66:81:df:2b:4c:6b:a9:73:be:69:8e:c7:03:bc:
b1:5d:37:bb:72:84:ff:5d:a8:13:4d:ef:a5:09:2b:
e2:fd:fd:be:4f:3f:76:22:ad:c5:97:d3:f9:eb:5e:
f3:f5:f9:86:ba:27:1f:7b:58:ec:a5:27:e6:2e:65:
63:be:9e:dc:91:2b:b2:79:fe:69:fd:dc:f0:db:b5:
be:e0:6b:ac:21:33:3b:5d:99:db:9b:56:11:51:1d:
79:fd:06:f6:26:0b:de:21:1b:32:e7:1e:7d:4d:96:
91:51:06:ec:df:56:44:69:05:ad:d9:97:17:fe:96:
34:41:f2:52:10:4c:ec:58:86:3c:aa:03:48:89:c1:
51:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DE:16:83:26:65:81:AE:CC:4A:31:2E:3A:B4:91:BA:6C:51:A8:FD
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lt4WgyZlga7MSjEuOrSRumxRqP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.112.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ee:e7:d3:a7:d9:78:24:94:11:f3:09:93:73:77:f5:f2:90:
0d:0e:df:00:54:56:0f:9d:ea:8e:75:d5:8e:4a:af:92:af:f1:
38:8d:bc:9f:b3:b2:03:5c:d1:f1:9d:60:91:99:e0:99:35:45:
c5:54:ad:b5:2f:5b:3e:61:06:74:4a:5d:b8:c9:c9:18:4a:0d:
72:bb:83:83:da:42:38:fa:42:4a:39:35:77:0a:98:84:7f:4b:
4c:e7:dd:2f:04:1d:22:42:7e:b4:f7:3a:c7:f0:46:0b:a9:b2:
97:68:eb:5c:d9:e9:c7:7d:27:46:42:e3:66:48:11:cf:87:6c:
7f:cf:e5:35:20:a0:ba:98:5b:de:51:87:c8:d0:5d:13:1f:df:
db:39:76:b4:39:da:a5:34:d4:d7:8a:be:5d:31:a5:ec:7e:71:
01:13:75:78:ce:43:a0:6f:c9:19:c3:7c:ac:3a:2c:7c:57:a7:
79:60:d5:53:e2:e4:5d:8f:a6:81:82:db:2f:af:89:21:c8:41:
8c:4a:e5:47:db:25:00:fd:7b:4a:fe:be:f4:cf:70:66:22:ba:
c7:f4:51:a2:5d:19:d4:fd:f6:d0:33:be:03:f1:69:ea:40:fd:
68:a2:28:e9:36:99:7e:46:59:45:74:b6:fe:56:8f:83:67:6a:
2e:9d:37:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:53 2026 by rpki-client