Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zEs81JmRQeNpIEthEGnY2bdOWZ8.roa
File: zEs81JmRQeNpIEthEGnY2bdOWZ8.roa (raw, json)
Hash identifier: BiyPfShrJ3T3/oeBvSLg3qNVgK3XRm3KPdbj5sAKN1Q=
Subject key identifier: CC:4B:3C:D4:99:91:41:E3:69:20:4B:61:10:69:D8:D9:B7:4E:59:9F
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0AB911BCB12DFE7D41AA8ABB2EE706C2E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zEs81JmRQeNpIEthEGnY2bdOWZ8.roa
Signing time: Wed 16 Sep 2026 18:53:28 +0000
ROA not before: Wed 16 Sep 2026 18:53:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197462
IP address blocks: 31.76.33.0/24 maxlen: 24
31.76.35.0/24 maxlen: 24
31.76.112.0/24 maxlen: 24
31.76.116.0/24 maxlen: 24
31.77.31.0/24 maxlen: 24
31.77.239.0/24 maxlen: 24
177.1.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ab:91:1b:cb:12:df:e7:d4:1a:a8:ab:b2:ee:70:6c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 16 18:53:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc4b3cd4999141e369204b611069d8d9b74e599f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:21:ac:e0:47:e5:33:37:f9:f6:f0:54:e4:f4:
5e:85:a1:10:31:e5:19:e8:f2:93:c3:83:c7:24:0d:
6f:19:5a:25:73:ae:54:32:7e:32:b8:37:fa:71:93:
9b:de:da:f0:c7:04:c4:1a:c3:cf:c0:ca:82:dd:83:
4f:b0:33:80:02:ae:34:08:b8:3d:da:43:16:51:7e:
62:f6:97:3d:08:00:e8:bc:0a:6e:95:62:ce:33:fc:
6b:4b:3d:dc:5b:f6:a9:64:e1:0c:28:70:fd:09:dd:
d1:3c:55:07:38:ad:e1:13:b7:3a:eb:ec:30:07:c8:
67:c4:da:16:c8:3a:e4:6a:62:18:71:5c:e4:2f:13:
a6:5a:f8:6c:25:a2:43:96:5f:09:76:2b:0a:91:78:
d4:fa:49:29:cf:fd:18:cd:f2:54:1d:ba:aa:c3:2b:
bd:7a:27:60:82:1e:fe:2a:cc:d6:53:91:8a:74:52:
c0:2b:fd:87:bb:11:8f:7a:cd:87:29:8f:21:22:93:
41:cb:e7:31:3d:05:4e:f7:c2:a0:d0:b9:5a:90:be:
e3:b6:89:b4:cc:6c:7e:95:ec:fc:e3:b2:2c:cf:2e:
bd:24:54:a6:d3:5d:55:3f:28:62:9a:a6:b1:93:5d:
a1:5d:68:88:60:97:8d:a2:92:3e:40:be:d7:ee:0f:
e3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4B:3C:D4:99:91:41:E3:69:20:4B:61:10:69:D8:D9:B7:4E:59:9F
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zEs81JmRQeNpIEthEGnY2bdOWZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.76.33.0/24
31.76.35.0/24
31.76.112.0/24
31.76.116.0/24
31.77.31.0/24
31.77.239.0/24
177.1.192.0/24
Signature Algorithm: sha256WithRSAEncryption
95:a7:6a:f1:f0:17:dc:a0:ff:b6:ae:b6:3a:29:f2:0b:b1:cd:
37:b1:94:62:6e:43:c5:d8:76:f9:8f:56:fa:42:58:60:4e:bf:
5c:08:7d:02:65:4a:12:92:59:5a:79:5b:2b:ec:e1:39:0e:2d:
73:62:75:3f:9d:90:f1:85:be:22:9b:46:bb:14:07:48:53:17:
3e:24:30:89:0c:b6:f6:55:db:b7:8d:f6:91:b0:2d:44:ad:30:
ee:75:64:82:30:8e:fa:68:e9:7d:d3:26:34:5c:0c:a0:b2:2c:
4d:cd:73:e0:2f:cd:cd:07:6a:33:91:54:18:52:3b:31:b6:bd:
30:65:71:1a:d1:c7:0b:12:a9:13:3d:e2:bd:5c:d0:c5:f4:5d:
37:02:ec:20:a8:8e:98:d3:2d:36:02:8c:90:81:45:a7:f0:1d:
6f:7c:f3:a6:79:0c:9b:92:cf:f9:c1:a8:d7:02:91:cc:8e:89:
31:cd:2b:39:eb:ca:53:2e:ef:95:57:4f:92:80:2e:8b:ae:2c:
78:d9:b7:fe:0c:4d:60:0c:4e:f8:38:48:b7:82:06:95:89:0b:
f2:f6:c1:50:b1:43:e5:9e:dd:c7:e0:ff:ed:b5:7a:f5:13:ff:
7a:08:93:ce:8d:7c:1d:5b:e8:af:1f:82:10:61:8a:5f:19:e4:
50:0f:c0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:23 2026 by rpki-client