Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/mWH4A-m6_OYBoxJ2NFZaFlPmCHE.roa
File: mWH4A-m6_OYBoxJ2NFZaFlPmCHE.roa (raw, json)
Hash identifier: smOgHFiaLiLUub+J2c8LTUpkSlAdJHm9Jkw8Nxg1muI=
Subject key identifier: 99:61:F8:03:E9:BA:FC:E6:01:A3:12:76:34:56:5A:16:53:E6:08:71
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DDF58C46B58773CEDADE410EEC908C455
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/mWH4A-m6_OYBoxJ2NFZaFlPmCHE.roa
Signing time: Thu 30 Apr 2026 17:03:49 +0000
ROA not before: Thu 30 Apr 2026 17:03:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214083
IP address blocks: 31.77.208.0/24 maxlen: 24
31.77.210.0/24 maxlen: 24
31.77.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:df:58:c4:6b:58:77:3c:ed:ad:e4:10:ee:c9:08:c4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 30 17:03:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9961f803e9bafce601a3127634565a1653e60871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fa:50:ca:44:31:45:dc:50:81:97:30:96:d9:
b7:51:33:aa:71:df:6f:ba:9b:f0:b6:5a:88:fa:fb:
f1:47:50:62:6e:59:0a:68:15:2c:8f:da:09:2a:65:
bf:e4:58:dd:0d:2a:be:1e:6d:4f:ff:4d:cf:78:b7:
e8:20:d1:e5:3e:27:5c:43:2d:c8:bc:f8:9e:28:ab:
37:51:40:35:a9:f1:72:01:be:33:ff:98:19:91:0b:
1a:89:a5:ca:79:f8:48:87:ed:b1:63:c8:3e:fe:ba:
5f:a3:32:b0:a1:d8:28:de:9a:fc:6f:f7:43:32:9e:
7d:56:07:a0:10:f5:ff:89:a4:ba:18:48:e5:04:21:
98:12:60:51:d2:a9:76:1f:75:17:bb:1e:ef:86:b5:
0a:fb:22:cb:ea:69:69:7c:0e:6a:80:81:41:d6:4c:
1a:95:cd:17:e8:97:c5:04:e1:f7:25:b0:06:28:90:
30:07:15:15:c5:d1:b8:9c:4b:f2:5b:55:bc:06:48:
0f:97:7e:c9:b6:dd:7a:05:7d:6c:34:ca:c3:40:15:
6c:7f:10:a1:83:da:e7:a2:c9:1b:3b:38:50:7a:8f:
2f:7a:8c:af:85:8f:ce:ea:9b:11:a2:ea:84:78:91:
4e:72:90:81:82:6f:7f:68:3d:6a:9e:0b:15:37:94:
5b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:61:F8:03:E9:BA:FC:E6:01:A3:12:76:34:56:5A:16:53:E6:08:71
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/mWH4A-m6_OYBoxJ2NFZaFlPmCHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.208.0/24
31.77.210.0/24
31.77.213.0/24
Signature Algorithm: sha256WithRSAEncryption
91:2d:e6:e9:c4:2e:e3:bf:4e:e8:49:62:04:85:66:01:00:c6:
f5:82:5d:3b:ab:81:e2:13:d5:d5:92:f4:8a:c8:2c:b2:91:63:
f3:ea:a9:4c:ed:99:05:aa:ba:35:70:8b:8a:8a:be:44:60:ff:
86:66:dd:4a:c2:1f:96:10:c8:c6:32:a1:0d:0f:15:0d:4d:f8:
07:2c:84:5c:60:69:62:40:a3:2d:47:65:05:87:fd:ee:eb:49:
5b:8b:9e:c3:9f:7f:16:b3:50:53:07:b0:df:72:13:37:85:45:
c9:89:8e:c7:a9:d3:22:ec:5b:cd:a4:6c:51:c5:94:d4:eb:b9:
72:6e:a9:b5:3c:d4:85:80:7c:ee:5a:fd:b1:ed:14:13:db:71:
54:2b:e7:9a:1c:78:6e:90:79:db:d4:61:d6:70:05:96:6b:d3:
44:1e:04:f7:39:18:79:9c:35:be:43:06:10:41:86:57:e2:cf:
12:9a:a5:ab:94:3b:cd:31:94:d7:21:f6:60:de:e2:18:03:03:
04:bf:08:0c:c2:67:9f:54:80:3f:80:b7:b2:48:6c:53:5e:1a:
30:f3:e9:2e:3c:8c:4c:09:16:2f:2e:ba:28:b5:47:7c:52:d9:
11:e3:f0:c7:a6:6f:5e:e0:b4:91:7d:51:ad:f7:15:de:71:97:
e1:f6:a7:6e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ3fWMRrWHc87a3kEO7JCMRVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNDMwMTcwMzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTYxZjgwM2U5YmFmY2U2MDFhMzEyNzYzNDU2NWExNjUzZTYwODcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PpQykQxRdxQgZcwltm3UTOqcd9v
upvwtlqI+vvxR1BiblkKaBUsj9oJKmW/5FjdDSq+Hm1P/03PeLfoINHlPidcQy3I
vPieKKs3UUA1qfFyAb4z/5gZkQsaiaXKefhIh+2xY8g+/rpfozKwodgo3pr8b/dD
Mp59VgegEPX/iaS6GEjlBCGYEmBR0ql2H3UXux7vhrUK+yLL6mlpfA5qgIFB1kwa
lc0X6JfFBOH3JbAGKJAwBxUVxdG4nEvyW1W8BkgPl37Jtt16BX1sNMrDQBVsfxCh
g9rnoskbOzhQeo8veoyvhY/O6psRouqEeJFOcpCBgm9/aD1qngsVN5Rb1QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJlh+APpuvzmAaMSdjRWWhZT5ghxMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvbVdINEEtbTZfT1lCb3hKMk5GWmFGbFBtQ0hFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAH03QAwQA
H03SAwQAH03VMA0GCSqGSIb3DQEBCwUAA4IBAQCRLebpxC7jv07oSWIEhWYBAMb1
gl07q4HiE9XVkvSKyCyykWPz6qlM7ZkFqro1cIuKir5EYP+GZt1Kwh+WEMjGMqEN
DxUNTfgHLIRcYGliQKMtR2UFh/3u60lbi57Dn38Ws1BTB7DfchM3hUXJiY7HqdMi
7FvNpGxRxZTU67lybqm1PNSFgHzuWv2x7RQT23FUK+eaHHhukHnb1GHWcAWWa9NE
HgT3ORh5nDW+QwYQQYZX4s8SmqWrlDvNMZTXIfZg3uIYAwMEvwgMwmefVIA/gLey
SGxTXhow8+kuPIxMCRYvLrootUd8UtkR4/DHpm9e4LSRfVGt9xXecZfh9qdu
-----END CERTIFICATE-----
Generated at Sun May 3 19:59:55 2026 by rpki-client