Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/mrEmfnsfr3faTY0EYqAj25K-gHQ.roa
File: mrEmfnsfr3faTY0EYqAj25K-gHQ.roa (raw, json)
Hash identifier: T2mhraoURabV+gr+ExXB5oYY17e7DEHzMofCGvP8Pas=
Subject key identifier: 9A:B1:26:7E:7B:1F:AF:77:DA:4D:8D:04:62:A0:23:DB:92:BE:80:74
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F3DA0063531AE4682593E344A62CD9E4C
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/mrEmfnsfr3faTY0EYqAj25K-gHQ.roa
Signing time: Tue 07 Jul 2026 17:28:45 +0000
ROA not before: Tue 07 Jul 2026 17:28:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 31.77.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3d:a0:06:35:31:ae:46:82:59:3e:34:4a:62:cd:9e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 7 17:28:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ab1267e7b1faf77da4d8d0462a023db92be8074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d7:98:1b:a9:ab:aa:37:dc:72:9d:97:f0:d5:
0a:f0:90:37:81:ca:ac:13:3d:ef:a2:5f:b3:40:8d:
57:e0:12:1a:7e:4a:77:cd:4a:24:f5:20:26:f5:0c:
da:ff:04:88:c6:5f:d4:9c:92:35:15:2c:10:15:b4:
c4:71:42:00:f5:34:39:5c:df:d5:27:13:ac:17:b9:
89:32:ed:96:c9:8f:f7:8a:5a:57:93:10:cb:76:c0:
dc:1c:40:da:58:fb:d7:a8:86:14:76:bf:e3:02:5b:
53:cb:ea:09:14:fc:e7:73:2a:12:52:31:7a:0f:cc:
bb:2d:62:cb:f6:4a:28:4b:11:63:3f:ce:3e:de:f0:
2b:39:68:42:6f:d7:30:2e:49:42:4e:cf:c4:af:80:
53:82:5c:2b:5f:63:94:88:57:03:68:ce:77:d4:9b:
81:a9:9b:fe:ea:0f:d1:65:ba:26:ee:97:9e:2b:a4:
fe:76:ce:2e:1a:7f:ce:6d:23:c3:d7:e8:bc:14:4a:
e8:95:37:a5:f5:7c:f6:1b:6a:9c:1a:b7:40:df:a2:
71:8d:ed:43:27:27:1f:02:48:0c:ff:4c:b7:79:78:
c0:f4:4c:4e:f7:02:94:1b:1f:d8:a9:31:3e:7e:70:
b1:10:10:be:2c:06:f6:ad:64:a9:cb:75:40:9c:cb:
d5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B1:26:7E:7B:1F:AF:77:DA:4D:8D:04:62:A0:23:DB:92:BE:80:74
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/mrEmfnsfr3faTY0EYqAj25K-gHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.127.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ec:7f:10:27:d6:f8:c0:2e:e6:ef:b3:1d:dd:ea:44:08:08:
38:c4:c1:df:b0:5f:fa:6a:64:13:c0:a1:1d:c6:2f:43:fe:23:
58:94:3a:55:90:06:b2:08:19:48:22:41:d6:87:5c:ca:9f:5f:
ac:17:9f:43:bb:fa:d8:86:3d:e3:59:cb:23:91:2a:54:c4:23:
97:ef:4e:39:23:54:74:d4:82:97:23:c5:43:ca:08:0e:28:69:
91:e8:78:bf:c4:21:4c:34:40:38:a2:11:42:55:68:f0:af:47:
7f:c8:13:cd:cc:f4:03:92:03:12:3e:cb:b8:d6:e0:ba:70:cd:
37:ed:2f:d5:a3:6e:2f:44:b7:74:7f:71:fe:9c:4e:c9:a2:79:
f6:a7:aa:46:fe:2a:f3:49:bf:48:ad:8e:f1:07:49:92:46:1b:
7b:80:cd:24:00:62:c8:62:9e:f5:97:dd:02:ca:e7:67:75:5e:
ae:d9:52:ba:47:9d:39:9f:32:e4:b4:bb:9b:5c:8e:8a:ee:fa:
ce:2a:26:8c:d5:3e:55:de:82:33:31:41:5f:57:da:59:7c:da:
46:0e:d4:1c:d1:39:b5:6c:22:5c:cf:95:3e:d5:04:c2:31:c6:
e2:b3:c5:f0:ad:96:fb:45:8a:5e:a5:81:46:de:10:f5:52:5c:
80:3e:3e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:19:05 2026 by rpki-client