Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/moZq8snptgAKLSUPaFf9QpkAaSo.roa
File: moZq8snptgAKLSUPaFf9QpkAaSo.roa (raw, json)
Hash identifier: rVe2ewQQ6/lDdpbBvXRXYn9B6+Q/f/W0RQnTfqj1QVc=
Subject key identifier: 9A:86:6A:F2:C9:E9:B6:00:0A:2D:25:0F:68:57:FD:42:99:00:69:2A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019EAE4BEF38D5A5E7907C6431B82135AB5A
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/moZq8snptgAKLSUPaFf9QpkAaSo.roa
Signing time: Tue 09 Jun 2026 21:31:12 +0000
ROA not before: Tue 09 Jun 2026 21:31:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213229
IP address blocks: 31.76.26.0/24 maxlen: 24
64.188.88.0/24 maxlen: 24
144.31.31.0/24 maxlen: 24
193.23.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ae:4b:ef:38:d5:a5:e7:90:7c:64:31:b8:21:35:ab:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 9 21:31:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a866af2c9e9b6000a2d250f6857fd429900692a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:aa:ca:8b:13:f0:ec:a4:1d:7e:97:ae:bb:70:
36:7a:2f:e4:59:79:78:95:ff:b6:ce:11:ed:19:4a:
77:75:cc:51:b5:d4:af:e2:75:59:c1:44:26:84:72:
03:e7:e4:8c:b9:d9:3d:52:15:80:75:68:80:d9:50:
66:63:13:81:f1:61:62:40:9a:73:62:af:39:b1:ae:
1f:37:fe:a1:4b:7e:21:d0:bd:e3:27:f4:5a:7a:b0:
77:f1:72:b0:43:7b:f6:25:81:f0:98:ca:19:da:96:
43:9f:f0:41:c1:8d:ec:20:88:b7:11:5f:58:ca:82:
d9:e2:aa:9d:a1:40:62:38:a5:b0:bb:62:9c:6b:31:
7b:ec:6f:f4:c1:0d:b0:fb:d6:d1:67:4c:f6:48:1a:
7c:23:10:e6:39:ce:d0:8a:13:be:68:c2:33:c8:10:
b9:aa:c2:e8:48:4a:e8:a7:70:7d:44:1c:e8:7d:ef:
0d:77:23:0c:cc:b3:e4:cd:32:47:07:5c:99:36:3f:
fd:d7:7f:f1:74:37:cb:b2:6a:ff:94:c4:67:9f:14:
16:07:69:fd:3c:21:77:59:89:60:f5:04:a8:dd:1f:
7b:3d:e3:36:62:0a:0c:1a:e9:b2:15:27:91:bd:7c:
e5:b3:f4:de:ef:cc:27:2d:ad:67:23:bb:9b:58:fb:
6c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:86:6A:F2:C9:E9:B6:00:0A:2D:25:0F:68:57:FD:42:99:00:69:2A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/moZq8snptgAKLSUPaFf9QpkAaSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.76.26.0/24
64.188.88.0/24
144.31.31.0/24
193.23.208.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:b9:09:3b:ff:64:a4:95:2c:03:24:52:78:ec:8f:a5:93:18:
dc:83:04:78:58:36:5e:99:28:2b:99:55:e8:65:48:dd:5d:07:
ed:6e:da:00:4d:2e:5e:b5:4c:85:29:a1:e9:8c:6d:30:d2:70:
b6:d5:a0:e0:a8:d3:c5:61:79:bc:d9:d0:3b:55:d0:4d:64:f8:
61:e2:44:7a:1b:45:df:b4:49:f9:97:4f:aa:56:54:9b:8b:1c:
4e:14:a4:3f:65:51:25:6e:92:7e:07:de:9b:26:85:20:2b:52:
e3:2b:25:15:6e:0e:6f:32:d5:2b:5b:2b:66:8b:d3:8b:21:7f:
6c:ae:9a:82:39:01:f2:9c:0a:79:02:a5:77:70:ce:68:d2:65:
ba:05:d6:05:d4:d3:02:5d:e4:43:88:c1:d1:32:3d:01:0b:ef:
a8:7c:09:85:3f:ad:1e:1b:a7:09:ef:bb:5d:e9:08:64:99:6d:
7b:64:53:ad:df:83:2c:9b:98:9d:b6:a4:4c:fd:a9:e5:93:c4:
06:18:12:36:11:6f:88:41:52:5a:22:da:5a:63:ea:17:5f:3a:
cb:e0:2d:b7:6d:ae:d1:4a:b0:0e:48:b4:05:f1:37:19:ae:85:
56:94:ed:23:85:66:98:9a:e5:ee:81:f9:40:19:e6:d8:8c:ca:
1b:44:3d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:34:33 2026 by rpki-client