Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wLQMK8SvQxvXQIdBuGzWm1bCgw8.roa
File: wLQMK8SvQxvXQIdBuGzWm1bCgw8.roa (raw, json)
Hash identifier: 1XY3spcBmSae2FhbUbD9yDiLDnLxoouA+m+3jwQgOhg=
Subject key identifier: C0:B4:0C:2B:C4:AF:43:1B:D7:40:87:41:B8:6C:D6:9B:56:C2:83:0F
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0E9750CBC5F57554A0709C97DEECC13B6
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wLQMK8SvQxvXQIdBuGzWm1bCgw8.roa
Signing time: Mon 28 Sep 2026 19:19:17 +0000
ROA not before: Mon 28 Sep 2026 19:19:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57724
IP address blocks: 31.77.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:75:0c:bc:5f:57:55:4a:07:09:c9:7d:ee:cc:13:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 28 19:19:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0b40c2bc4af431bd7408741b86cd69b56c2830f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:42:aa:98:32:43:db:8c:fc:12:33:a5:31:4a:
b3:8c:97:33:d6:7c:4b:ae:56:a2:d2:ed:3a:f0:4f:
fd:2a:24:66:79:79:78:ce:ed:b3:82:5c:9f:91:0c:
99:4b:83:8e:5b:76:91:83:8d:00:6d:33:04:e9:04:
d5:d5:77:67:20:ca:ae:e5:ee:b6:d6:52:94:c7:9e:
bf:9b:54:20:e4:f8:dc:78:1a:46:86:dc:1a:2b:fa:
77:cb:d1:64:08:ac:33:1d:7c:48:58:56:ac:03:ac:
68:f7:37:57:1b:03:ca:0a:98:fa:fe:11:15:da:b0:
a8:a6:44:35:24:bf:f8:d4:30:03:50:6a:0e:92:ac:
e4:c3:de:c1:70:92:44:a8:5a:a6:e5:e0:17:e0:02:
3c:4e:0f:e9:82:b2:ad:5b:0a:ae:a4:7e:f6:8e:7b:
b1:81:9b:11:c3:aa:0f:e1:7d:b9:60:5e:62:0a:4b:
db:77:0b:f9:0c:9f:ac:9a:a3:d3:04:03:73:28:5e:
4a:40:9c:c1:f3:04:32:01:be:ec:8b:14:6b:31:75:
52:2f:3e:78:cd:60:1b:a6:27:4b:bd:b2:62:99:58:
19:00:40:08:a3:43:fa:87:bf:27:a6:99:bc:c8:14:
bf:fa:10:b4:f8:00:c7:c6:fa:b6:bb:fb:9d:b7:29:
52:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B4:0C:2B:C4:AF:43:1B:D7:40:87:41:B8:6C:D6:9B:56:C2:83:0F
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wLQMK8SvQxvXQIdBuGzWm1bCgw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.44.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:73:d5:0e:9c:68:f4:f4:4e:3b:b8:b0:3f:2c:dc:aa:62:26:
70:9d:e2:45:d4:99:52:5b:96:c4:9f:a7:e9:62:dd:a1:24:6f:
4c:11:4f:34:33:74:23:5a:37:aa:55:87:9d:b5:3a:0c:d7:8d:
01:af:5b:ce:78:86:f5:98:b4:d7:a9:c6:92:93:e4:cf:be:f6:
b7:e1:ea:1d:8e:4a:d1:e8:8e:b6:96:f8:20:a0:14:13:e9:be:
a3:95:a6:60:a2:e9:f8:59:9d:bc:f0:82:27:36:72:15:9d:89:
02:e4:80:0e:80:b3:85:1f:f1:96:53:cf:ab:53:ab:32:b2:10:
7c:4a:83:22:22:fa:39:e5:e2:8f:a5:53:cd:db:34:f0:59:2d:
e4:3c:64:0a:be:9f:4c:79:a8:05:32:9d:b0:c6:ce:40:be:96:
b8:61:50:78:16:9d:28:6f:c8:fb:47:0d:6c:39:77:22:29:96:
de:5f:1c:20:3d:93:2d:40:78:1a:09:ba:3f:0c:5a:f9:dd:6a:
e0:85:07:98:e2:c0:ed:16:0e:bf:c6:cb:92:37:69:fb:35:08:
70:48:96:fe:41:f5:05:3c:b9:12:75:cf:81:fa:18:60:4f:f1:
93:7e:98:ed:b2:a5:2c:74:da:ec:e7:d1:c0:4d:5e:e0:5b:d4:
db:64:88:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:44:05 2026 by rpki-client