Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/nwZfPaVEhNCUFYt6sjE8xC39SOY.roa
File: nwZfPaVEhNCUFYt6sjE8xC39SOY.roa (raw, json)
Hash identifier: t7QciVDObWvKqYg5X+skDZYYN5++W6BgOY/hItgy5L4=
Subject key identifier: 9F:06:5F:3D:A5:44:84:D0:94:15:8B:7A:B2:31:3C:C4:2D:FD:48:E6
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E99057133A00604D93E047E8BF3E75531
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/nwZfPaVEhNCUFYt6sjE8xC39SOY.roa
Signing time: Fri 05 Jun 2026 18:22:11 +0000
ROA not before: Fri 05 Jun 2026 18:22:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215102
IP address blocks: 31.77.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:99:05:71:33:a0:06:04:d9:3e:04:7e:8b:f3:e7:55:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 5 18:22:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f065f3da54484d094158b7ab2313cc42dfd48e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:78:df:13:45:82:93:c0:c7:01:0f:07:0c:2b:
4d:b4:07:21:2a:4e:2d:c1:58:da:cd:46:30:b4:7f:
ef:3a:c4:1f:3d:2c:55:8b:14:86:05:15:62:f2:20:
05:ea:45:56:98:60:2f:9c:84:b4:7d:c9:8d:a6:b3:
1d:04:12:bd:02:d1:11:92:da:7f:a2:de:b0:28:2b:
2d:94:69:9b:eb:28:b7:cd:4d:f9:b7:c2:e2:e1:25:
8f:cd:4d:8a:b8:ba:2b:51:fd:34:ea:06:eb:0f:a9:
68:ec:f6:ed:c9:34:1c:06:1d:e0:09:aa:3f:9e:e8:
99:e9:7f:06:67:99:6b:fb:5f:69:9e:27:41:76:81:
cb:2b:6d:a1:f4:4f:71:2e:17:18:13:09:cd:31:13:
a7:af:b4:8b:27:d0:57:fd:7c:04:dd:e1:5a:69:0b:
c8:66:6f:4e:34:86:ea:34:c3:a3:1d:b8:8d:5e:d1:
10:61:34:aa:8d:da:a6:5c:6d:8b:78:00:3d:b4:0a:
a1:38:fc:ba:a7:36:ec:ea:41:67:07:0b:05:d1:ba:
3c:d1:e1:15:d9:e9:f5:2d:50:92:29:a3:e9:ba:7c:
c6:17:52:b7:64:67:37:3f:82:7b:62:a9:0f:68:15:
91:ca:dc:51:53:bd:be:eb:c3:29:0b:4d:aa:d2:08:
6f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:06:5F:3D:A5:44:84:D0:94:15:8B:7A:B2:31:3C:C4:2D:FD:48:E6
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/nwZfPaVEhNCUFYt6sjE8xC39SOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.139.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:3c:98:45:b2:93:5d:34:f5:4c:75:29:72:04:ad:d0:a2:74:
60:91:2d:d4:b1:33:7a:dd:86:e0:62:34:89:51:11:5f:3a:f6:
e4:cf:c4:56:1e:b2:19:4b:c6:92:58:54:c6:80:ee:40:8b:7b:
6a:96:bf:cb:de:a0:23:e5:7a:e7:b7:3c:4e:ec:d1:43:fb:2e:
16:92:0f:ca:09:a2:7f:c8:97:a5:6a:be:f2:84:7c:19:3d:18:
9a:ef:8d:a9:ce:b8:85:7f:c4:9f:e7:2b:f5:96:c5:28:43:08:
e8:28:eb:51:4d:4f:0b:49:fc:91:26:7f:d4:a7:28:80:0f:9a:
1f:08:48:00:f3:f7:75:5e:be:52:fd:32:dd:c8:6a:cd:63:2f:
50:84:54:e9:ca:40:a4:eb:64:72:f7:bf:0e:05:f0:35:9f:ec:
d7:8b:47:8f:43:4a:12:23:79:78:24:23:1f:3c:5a:7c:67:3f:
cc:e4:68:55:3d:3f:21:87:16:c6:cd:89:4c:44:24:f9:fa:b1:
fb:37:c5:46:c5:db:7e:0c:58:3f:f8:df:5b:bf:86:70:c6:0c:
08:a3:4e:98:db:1a:b8:82:0c:59:4b:8c:f9:6a:cf:26:75:68:
98:52:e7:20:cf:3a:f7:e0:84:4f:82:48:b9:64:ea:6a:46:fb:
9c:7a:e4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:35:23 2026 by rpki-client