Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/n_vLmhdtq8vCSsTCIwCxiTaUm50.roa
File: n_vLmhdtq8vCSsTCIwCxiTaUm50.roa (raw, json)
Hash identifier: g2ltIjSng6MTlMa+151BSTpc2jM94OaqL43ZP9mFzsw=
Subject key identifier: 9F:FB:CB:9A:17:6D:AB:CB:C2:4A:C4:C2:23:00:B1:89:36:94:9B:9D
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A08CB7C466D2A8BF97A08B6D4D58867903
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/n_vLmhdtq8vCSsTCIwCxiTaUm50.roa
Signing time: Thu 10 Sep 2026 19:07:28 +0000
ROA not before: Thu 10 Sep 2026 19:07:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218731
IP address blocks: 31.77.56.0/24 maxlen: 24
31.77.57.0/24 maxlen: 24
31.77.109.0/24 maxlen: 24
31.77.138.0/24 maxlen: 24
31.77.168.0/24 maxlen: 24
31.77.170.0/24 maxlen: 24
31.77.219.0/24 maxlen: 24
31.77.220.0/24 maxlen: 24
31.77.247.0/24 maxlen: 24
31.77.248.0/24 maxlen: 24
150.241.93.0/24 maxlen: 24
150.241.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b7:c4:66:d2:a8:bf:97:a0:8b:6d:4d:58:86:79:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 10 19:07:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ffbcb9a176dabcbc24ac4c22300b18936949b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:70:a3:3b:f0:e9:27:1d:ab:f8:62:63:14:d8:
a7:ff:9a:f7:81:4b:f7:a9:ed:35:5d:ac:06:26:24:
e6:9c:aa:64:3f:a2:7d:60:85:5f:80:b0:c9:88:ac:
10:5d:f5:44:be:5c:30:bb:d4:03:0d:ec:4e:41:e2:
07:52:84:aa:a2:7c:13:dd:13:d7:cf:cb:a0:e6:a1:
d2:89:35:af:e1:be:39:a2:6e:cd:f7:df:92:94:d7:
bc:38:05:1f:f4:38:7f:58:d8:32:82:b1:fc:1d:26:
5c:be:20:dd:ad:df:ac:6f:50:38:91:67:5e:66:b0:
b0:db:17:13:25:e6:19:a9:69:85:a3:a0:b5:87:f2:
68:94:d6:2b:4f:5a:9f:73:01:aa:a0:21:c4:8d:3c:
cf:e2:c9:16:5f:ba:77:3e:45:36:d8:40:a6:25:22:
0a:9c:6c:12:e6:5a:b7:3d:46:1c:cc:3c:23:79:d1:
a0:04:64:42:69:da:3b:a0:55:8c:8e:26:e1:23:9b:
9b:c4:b9:4a:b4:3c:a5:38:39:5a:9a:a2:f2:4c:e7:
cf:9b:29:2c:a5:be:3c:b7:2f:80:ff:fd:b7:c4:5e:
fd:53:45:b2:48:12:fb:fd:18:97:9d:d6:da:5d:d0:
6f:ee:b3:1a:c9:c6:8d:66:d0:10:2c:ae:f6:9a:3b:
62:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FB:CB:9A:17:6D:AB:CB:C2:4A:C4:C2:23:00:B1:89:36:94:9B:9D
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/n_vLmhdtq8vCSsTCIwCxiTaUm50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.56.0/23
31.77.109.0/24
31.77.138.0/24
31.77.168.0/24
31.77.170.0/24
31.77.219.0-31.77.220.255
31.77.247.0-31.77.248.255
150.241.93.0/24
150.241.124.0/24
Signature Algorithm: sha256WithRSAEncryption
52:2c:c8:05:60:c9:15:6f:1f:f7:1d:52:4f:8a:03:44:02:c3:
3b:78:c1:b8:e6:02:f7:90:a9:23:92:44:7f:da:70:79:90:2d:
2b:ab:04:36:4b:4d:76:19:06:e3:43:03:53:3e:aa:9a:02:de:
0a:83:c3:6a:8d:c3:33:21:6c:18:89:85:ad:be:d8:80:b5:ed:
06:f5:9a:f4:51:22:53:51:6a:15:2c:96:de:66:1e:18:a4:ef:
2b:70:d7:40:f2:d9:10:90:2b:29:6c:f2:5c:52:fa:74:1e:cd:
13:22:bd:83:01:b6:37:44:84:fa:ca:16:43:71:e8:7e:61:8e:
f5:4a:4d:84:ab:df:cd:59:34:14:7f:55:58:03:1e:c7:c4:4d:
92:b6:1f:56:bd:94:43:59:15:39:a5:a9:27:60:a4:33:aa:43:
67:49:c9:7e:52:8b:5e:94:58:b9:e2:18:38:01:6c:59:39:e4:
a9:c3:1d:bb:00:05:fa:02:2a:a3:98:23:48:45:39:51:65:f7:
69:d7:59:7c:e8:4a:e1:d0:e9:75:7d:12:0c:c2:09:22:a7:ab:
54:a9:08:b2:e0:35:f2:c7:d0:e5:8d:b3:79:d1:d8:ce:0d:68:
27:b5:8e:cd:21:62:e7:41:cd:f0:7a:e7:89:1f:c9:a2:40:99:
39:49:b8:67
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAaCMt8Rm0qi/l6CLbU1YhnkDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwOTEwMTkwNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmZiY2I5YTE3NmRhYmNiYzI0YWM0YzIyMzAwYjE4OTM2OTQ5YjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnCjO/DpJx2r+GJjFNin/5r3gUv3
qe01XawGJiTmnKpkP6J9YIVfgLDJiKwQXfVEvlwwu9QDDexOQeIHUoSqonwT3RPX
z8ug5qHSiTWv4b45om7N99+SlNe8OAUf9Dh/WNgygrH8HSZcviDdrd+sb1A4kWde
ZrCw2xcTJeYZqWmFo6C1h/JolNYrT1qfcwGqoCHEjTzP4skWX7p3PkU22ECmJSIK
nGwS5lq3PUYczDwjedGgBGRCado7oFWMjibhI5ubxLlKtDylODlamqLyTOfPmyks
pb48ty+A//23xF79U0WySBL7/RiXndbaXdBv7rMaycaNZtAQLK72mjtiWwIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFJ/7y5oXbavLwkrEwiMAsYk2lJudMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvbl92TG1oZHRxOHZDU3NUQ0l3Q3hpVGFVbTUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQBH004AwQA
H01tAwQAH02KAwQAH02oAwQAH02qMAwDBAAfTdsDBAAfTdwwDAMEAB9N9wMEAB9N
+AMEAJbxXQMEAJbxfDANBgkqhkiG9w0BAQsFAAOCAQEAUizIBWDJFW8f9x1ST4oD
RALDO3jBuOYC95CpI5JEf9pweZAtK6sENktNdhkG40MDUz6qmgLeCoPDao3DMyFs
GImFrb7YgLXtBvWa9FEiU1FqFSyW3mYeGKTvK3DXQPLZEJArKWzyXFL6dB7NEyK9
gwG2N0SE+soWQ3HofmGO9UpNhKvfzVk0FH9VWAMex8RNkrYfVr2UQ1kVOaWpJ2Ck
M6pDZ0nJflKLXpRYueIYOAFsWTnkqcMduwAF+gIqo5gjSEU5UWX3addZfOhK4dDp
dX0SDMIJIqerVKkIsuA18sfQ5Y2zedHYzg1oJ7WOzSFi50HN8HrniR/JokCZOUm4
Zw==
-----END CERTIFICATE-----
Generated at Fri Sep 11 02:30:38 2026 by rpki-client