Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/yVAuzq_V1dQav2CLhhj-sH9iLO4.roa
File: yVAuzq_V1dQav2CLhhj-sH9iLO4.roa (raw, json)
Hash identifier: XN9B9k/g+/qJm4bKs8uliV//0KQzVJtABRYmcWtXUt0=
Subject key identifier: C9:50:2E:CE:AF:D5:D5:D4:1A:BF:60:8B:86:18:FE:B0:7F:62:2C:EE
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0B03F3A1445FC07172A5E36E800FD8F66
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/yVAuzq_V1dQav2CLhhj-sH9iLO4.roa
Signing time: Thu 17 Sep 2026 16:42:08 +0000
ROA not before: Thu 17 Sep 2026 16:42:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219064
IP address blocks: 31.76.38.0/24 maxlen: 24
31.76.39.0/24 maxlen: 24
31.76.91.0/24 maxlen: 24
31.76.113.0/24 maxlen: 24
31.76.119.0/24 maxlen: 24
31.76.249.0/24 maxlen: 24
31.77.28.0/24 maxlen: 24
31.77.29.0/24 maxlen: 24
31.77.114.0/24 maxlen: 24
31.77.152.0/23 maxlen: 24
31.77.154.0/24 maxlen: 24
31.77.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:3f:3a:14:45:fc:07:17:2a:5e:36:e8:00:fd:8f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 17 16:42:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9502eceafd5d5d41abf608b8618feb07f622cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b2:3e:d8:03:a1:5e:8c:e6:aa:ea:00:31:c8:
c2:82:39:78:47:7e:fd:62:8d:71:2e:fe:b8:5a:16:
13:bd:f2:73:01:73:d9:51:af:c7:d3:07:e8:b2:90:
87:97:60:fd:3c:cb:da:70:d8:b6:e4:0e:a9:c3:3e:
6a:0a:78:46:0d:bd:44:41:27:83:ef:e3:13:86:3f:
16:c8:d8:1e:1e:6a:23:37:c5:3f:44:74:3d:95:7e:
22:e5:0a:74:b8:0f:b4:39:19:74:27:d6:eb:70:0c:
ae:88:43:48:0f:09:5a:b9:4d:5b:5c:5c:43:d6:8b:
96:08:d5:da:dd:b8:a3:fb:0b:6f:6a:5e:08:0a:de:
55:d8:20:b3:f2:14:e1:3e:47:0b:ce:81:06:35:37:
b2:f9:71:85:ae:12:62:61:8f:83:fd:92:ef:b8:45:
e7:00:af:18:56:42:ce:34:fa:34:66:ba:cd:22:a0:
7d:8e:18:5d:29:75:b7:f8:7e:cd:36:1d:b2:77:f8:
64:87:ef:a7:67:03:d8:32:a1:1b:d2:77:d2:8a:66:
f9:ce:c3:b8:59:da:e3:ad:7b:4c:00:67:88:04:88:
2e:e2:d1:f0:bb:d5:e4:ba:8e:fb:82:ca:9d:db:b9:
02:c9:33:51:50:a8:50:ee:47:8e:cb:eb:21:57:0d:
f9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:50:2E:CE:AF:D5:D5:D4:1A:BF:60:8B:86:18:FE:B0:7F:62:2C:EE
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/yVAuzq_V1dQav2CLhhj-sH9iLO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.76.38.0/23
31.76.91.0/24
31.76.113.0/24
31.76.119.0/24
31.76.249.0/24
31.77.28.0/23
31.77.114.0/24
31.77.152.0-31.77.154.255
31.77.201.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:a9:97:01:f4:e9:10:16:fb:3e:47:16:62:6a:74:12:a5:a7:
1e:43:96:53:50:b0:d0:35:f7:a4:6d:e3:16:6e:d5:f1:92:e4:
d5:10:53:5d:45:dc:8c:eb:ed:ba:42:2b:ff:36:0f:28:01:82:
ec:aa:e0:f2:e2:22:6c:24:54:87:d6:42:11:e0:01:18:06:00:
9f:40:c0:ed:c8:08:c8:89:90:46:e1:09:d3:3c:5d:17:b5:da:
82:1f:d4:b3:46:85:42:c6:fe:c3:d5:84:c9:3b:de:63:03:9b:
d5:a2:c9:d9:6a:c5:db:6b:01:d8:f7:0d:18:05:16:3b:33:b3:
4d:29:1b:37:14:70:5c:b7:43:33:e4:9d:bc:de:22:4e:e6:c3:
ab:58:fb:1a:6b:63:bf:04:9c:56:23:33:c9:f3:d4:7e:3e:a4:
dd:8e:15:ad:e0:45:a3:55:3c:35:88:ed:a9:41:c9:85:b7:4a:
ad:07:08:70:3e:53:87:c6:a9:b4:be:f5:5c:ac:73:f7:07:4c:
bb:e5:f4:69:fd:e3:0a:a8:53:fe:f3:78:64:ff:7d:a3:27:cf:
e0:e1:c7:15:c3:08:7d:9c:8a:c6:cf:fe:c5:f5:39:4a:e0:96:
ab:15:97:05:77:45:c4:78:7f:38:90:4e:4c:26:45:d7:46:b7:
f3:91:be:bf
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAaCwPzoURfwHFypeNugA/Y9mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwOTE3MTY0MjA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTUwMmVjZWFmZDVkNWQ0MWFiZjYwOGI4NjE4ZmViMDdmNjIyY2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbI+2AOhXozmquoAMcjCgjl4R379
Yo1xLv64WhYTvfJzAXPZUa/H0wfospCHl2D9PMvacNi25A6pwz5qCnhGDb1EQSeD
7+MThj8WyNgeHmojN8U/RHQ9lX4i5Qp0uA+0ORl0J9brcAyuiENIDwlauU1bXFxD
1ouWCNXa3bij+wtval4ICt5V2CCz8hThPkcLzoEGNTey+XGFrhJiYY+D/ZLvuEXn
AK8YVkLONPo0ZrrNIqB9jhhdKXW3+H7NNh2yd/hkh++nZwPYMqEb0nfSimb5zsO4
WdrjrXtMAGeIBIgu4tHwu9Xkuo77gsqd27kCyTNRUKhQ7keOy+shVw35fQIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFMlQLs6v1dXUGr9gi4YY/rB/YizuMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEveVZBdXpxX1YxZFFhdjJDTGhoai1zSDlpTE80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQBH0wmAwQA
H0xbAwQAH0xxAwQAH0x3AwQAH0z5AwQBH00cAwQAH01yMAwDBAMfTZgDBAAfTZoD
BAAfTckwDQYJKoZIhvcNAQELBQADggEBALOplwH06RAW+z5HFmJqdBKlpx5DllNQ
sNA196Rt4xZu1fGS5NUQU11F3Izr7bpCK/82DygBguyq4PLiImwkVIfWQhHgARgG
AJ9AwO3ICMiJkEbhCdM8XRe12oIf1LNGhULG/sPVhMk73mMDm9WiydlqxdtrAdj3
DRgFFjszs00pGzcUcFy3QzPknbzeIk7mw6tY+xprY78EnFYjM8nz1H4+pN2OFa3g
RaNVPDWI7alByYW3Sq0HCHA+U4fGqbS+9Vysc/cHTLvl9Gn94wqoU/7zeGT/faMn
z+DhxxXDCH2cisbP/sX1OUrglqsVlwV3RcR4fziQTkwmRddGt/ORvr8=
-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:10 2026 by rpki-client