Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/mDar9DqBDG9TRZgU4kiuazCTgUA.roa
File: mDar9DqBDG9TRZgU4kiuazCTgUA.roa (raw, json)
Hash identifier: LkFgi2OjzjtBK/49bfcMOqs38BVDSiiMaklXnLlmUsI=
Subject key identifier: 98:36:AB:F4:3A:81:0C:6F:53:45:98:14:E2:48:AE:6B:30:93:81:40
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FB41363000D33314720C237CAEE530998
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/mDar9DqBDG9TRZgU4kiuazCTgUA.roa
Signing time: Thu 30 Jul 2026 17:29:57 +0000
ROA not before: Thu 30 Jul 2026 17:29:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219328
IP address blocks: 31.77.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b4:13:63:00:0d:33:31:47:20:c2:37:ca:ee:53:09:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 30 17:29:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9836abf43a810c6f53459814e248ae6b30938140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:12:b8:27:a0:4d:9f:c5:92:2c:7b:35:9d:ad:
4c:f0:e6:86:c4:3c:b3:27:27:f7:1f:0e:00:12:e8:
5a:82:36:e7:3f:58:5a:ae:ef:9b:10:3c:e0:db:a7:
65:11:6a:c2:68:fa:24:08:2a:17:c3:6f:b3:a5:d8:
7a:32:a3:67:6f:2f:fa:e3:44:c5:04:07:42:60:f9:
69:0c:28:4a:b1:0f:03:56:17:70:a0:0d:40:cb:18:
56:e1:4b:e7:19:f7:08:30:5c:da:22:f1:8a:32:d3:
5a:30:c9:73:ed:a6:d6:95:f5:0b:d0:4d:ad:ae:03:
c1:d1:10:60:5c:7f:72:75:d8:93:83:cf:34:cb:96:
cd:90:16:04:20:16:14:ee:db:7d:29:6a:ad:de:1b:
78:b6:b7:d6:81:65:c1:3c:d4:e5:47:47:cb:7c:62:
6c:51:39:93:81:4e:7f:f1:e2:e3:7f:bd:71:ab:78:
b9:8e:6d:75:12:bb:00:1c:73:92:95:b6:97:e8:fb:
3d:6a:a4:f1:b1:06:11:e5:88:2e:c9:39:0b:8a:63:
fe:37:99:b7:ca:7d:4f:73:70:ba:e7:4b:18:c0:45:
90:f8:7b:a0:19:82:44:f3:05:b7:0f:7a:7e:c5:5e:
01:a2:c2:69:d9:0e:5b:a3:8b:95:85:0d:b1:b0:ac:
02:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:36:AB:F4:3A:81:0C:6F:53:45:98:14:E2:48:AE:6B:30:93:81:40
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/mDar9DqBDG9TRZgU4kiuazCTgUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.251.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:f7:48:d1:0e:67:89:86:ef:f8:b2:62:08:1e:9f:81:5c:58:
14:dd:82:95:85:e8:d5:d5:de:03:0d:1b:4c:78:2f:e9:0b:0f:
13:cb:e2:7d:71:bd:19:6e:e9:33:60:0f:59:a3:34:72:02:da:
6a:47:79:be:35:c8:3a:39:3e:38:f8:ed:10:3d:8a:8c:e3:43:
ac:b1:af:67:47:ad:86:52:ef:1e:17:a4:bb:c1:99:3c:3e:b2:
22:0b:72:03:09:dc:62:7b:38:24:0b:06:de:c7:2f:d0:59:19:
5a:0f:12:25:5c:de:a8:d9:32:4c:8c:d6:46:99:b9:ce:9b:9e:
60:4f:7d:dd:6c:ef:b4:1e:19:e5:90:5f:53:a5:c3:c4:30:8e:
07:74:d5:a0:3d:05:53:0b:d8:03:51:09:12:2b:0f:57:2d:9c:
c6:c0:ae:5a:2c:9d:7b:c7:d6:74:ee:d0:9e:84:a8:7b:3f:09:
de:fb:9e:dd:69:6d:88:bd:cd:49:b4:2a:8f:68:00:50:1a:b5:
a2:6b:f9:e2:bd:9e:b4:bb:a8:14:ac:fe:1b:16:d7:f3:4e:48:
05:17:2b:84:9b:06:1c:25:96:96:87:bc:59:74:37:e2:83:cc:
27:67:e5:56:81:ab:30:2a:b8:c1:19:d8:b8:0e:ea:65:23:61:
bc:4e:39:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:52:07 2026 by rpki-client