Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8FtfAGM2R0uVL-4e6vLVj6V1Uhg.roa
File: 8FtfAGM2R0uVL-4e6vLVj6V1Uhg.roa (raw, json)
Hash identifier: krymGlaVH69jolV8k4DaQTE94fBGzC8Kyca+et1JUNE=
Subject key identifier: F0:5B:5F:00:63:36:47:4B:95:2F:EE:1E:EA:F2:D5:8F:A5:75:52:18
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F5C5027E25183A3079F35EEC13B6B451D
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8FtfAGM2R0uVL-4e6vLVj6V1Uhg.roa
Signing time: Mon 13 Jul 2026 16:29:44 +0000
ROA not before: Mon 13 Jul 2026 16:29:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219275
IP address blocks: 13.143.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5c:50:27:e2:51:83:a3:07:9f:35:ee:c1:3b:6b:45:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 13 16:29:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f05b5f006336474b952fee1eeaf2d58fa5755218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:16:50:b7:10:26:40:be:3f:01:e3:05:d4:f0:
d3:fa:3c:3c:41:d2:b2:c0:34:a5:e1:e3:c6:b5:20:
65:01:a3:32:9e:49:99:92:42:c6:fe:70:0e:dc:1c:
cf:01:b9:ac:8e:f8:87:69:80:92:9b:5a:f0:eb:4f:
80:64:fc:10:b8:18:40:d8:42:6c:2d:cf:9e:99:9b:
6c:65:b9:4e:77:33:21:a5:9d:ae:55:76:fc:20:c1:
52:82:ad:31:08:51:ee:62:cc:81:36:81:3c:1c:96:
57:72:17:f2:32:3f:e2:99:18:ba:a6:b8:95:26:34:
e5:de:0e:b2:c6:67:ee:d6:d8:bd:4d:8b:25:fc:6a:
be:e5:e8:35:ae:43:f9:58:bb:4f:5c:2a:73:2e:73:
76:30:6f:eb:da:7b:56:70:2a:cf:77:77:ee:0d:7f:
a1:36:dc:2e:b0:79:8f:31:3b:db:f2:b6:50:cd:f7:
9a:93:58:cc:a3:31:bf:8b:53:ee:29:b4:97:f3:b3:
94:a1:1a:6c:35:6d:5d:bb:8a:2d:78:4d:29:23:99:
c7:83:cf:d5:2f:d8:0c:f4:18:5d:8b:40:cc:f4:d3:
56:35:18:f0:c7:46:f4:0f:6e:4e:10:6e:43:a8:ab:
e9:54:cb:98:de:78:be:1c:db:5d:c9:c6:4d:92:d7:
33:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5B:5F:00:63:36:47:4B:95:2F:EE:1E:EA:F2:D5:8F:A5:75:52:18
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8FtfAGM2R0uVL-4e6vLVj6V1Uhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.200.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:be:cb:b8:8b:78:c8:20:81:a0:b9:75:c4:c4:10:e1:e3:ea:
44:f0:ea:23:56:2f:a1:a7:7f:71:6d:aa:15:30:b3:22:75:a5:
78:1b:53:15:c9:fa:58:f7:52:61:cc:e9:6e:c7:f4:75:25:cc:
43:c9:55:54:bc:57:04:76:68:a1:a8:43:a1:66:00:c4:49:2e:
98:ad:3e:4c:f8:d8:c0:c5:ec:21:ff:e8:a1:96:5a:09:e8:7e:
60:23:c8:b5:1b:c5:12:73:4a:0c:63:9e:3e:2e:8e:6e:17:96:
b9:b9:22:ae:3c:a3:42:f1:3d:f2:d8:02:c7:94:30:e5:63:83:
f7:87:5c:7c:c9:d8:26:98:81:d9:56:0c:f4:0f:16:3e:1e:ba:
a1:43:01:ae:ae:ed:70:9e:1d:41:5d:9d:1e:3b:5c:bd:d8:a2:
1b:37:52:60:e8:c1:6a:bb:7d:98:ef:69:af:01:d7:8b:9e:d0:
e0:f2:cd:a5:ac:95:b8:d5:26:8b:39:2b:5d:2a:11:13:39:ce:
49:a6:8b:2e:70:fe:56:06:c1:37:d2:d3:19:42:c5:a6:c7:d0:
f2:19:a4:c4:39:40:f0:6f:89:c3:af:e1:be:9b:91:77:24:0d:
a1:18:9a:ae:e5:3a:17:43:03:36:a7:37:e3:4a:8a:71:4b:17:
4e:53:6a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:14:39 2026 by rpki-client