Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/q9H7-IQrQQd40etxbfzCH4aFg5Y.roa
File: q9H7-IQrQQd40etxbfzCH4aFg5Y.roa (raw, json)
Hash identifier: CZ1zxqTkhpFrt4+D3LaALte1HlNVg3NzODiSxXbbKXw=
Subject key identifier: AB:D1:FB:F8:84:2B:41:07:78:D1:EB:71:6D:FC:C2:1F:86:85:83:96
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0E9207CF5CA389FBDBC3BA21772F52CF3
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/q9H7-IQrQQd40etxbfzCH4aFg5Y.roa
Signing time: Mon 28 Sep 2026 17:46:55 +0000
ROA not before: Mon 28 Sep 2026 17:46:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205489
IP address blocks: 13.143.145.0/24 maxlen: 24
13.143.147.0/24 maxlen: 24
13.143.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:20:7c:f5:ca:38:9f:bd:bc:3b:a2:17:72:f5:2c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 28 17:46:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abd1fbf8842b410778d1eb716dfcc21f86858396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:9e:8e:fb:40:ac:60:11:41:e6:fd:fc:00:
f7:dd:39:54:c3:71:db:08:13:17:b7:84:a3:53:42:
79:a5:ae:2a:5b:04:c9:a5:50:79:83:a3:0e:d1:c4:
0e:6f:70:e2:e7:6a:70:b2:92:f4:35:ee:16:89:4b:
a1:ce:7e:39:f5:68:e7:c4:76:2d:c2:a8:3a:b8:62:
b4:a1:31:f6:d5:c9:42:b5:26:3f:91:b4:59:63:dd:
df:4e:1a:c7:c7:26:2e:25:04:e6:03:26:0d:49:8b:
be:ea:c1:70:c2:fe:5a:20:97:12:c0:9c:3c:62:9f:
91:0b:c7:e5:c6:4c:71:73:40:bf:a7:0d:9a:a0:cf:
d2:71:54:d9:2a:22:1e:10:26:01:68:9f:4f:fb:f1:
c6:44:87:18:2e:c1:a0:90:a0:d6:22:66:fb:8f:98:
6d:37:f3:67:44:4c:81:07:d0:f7:b2:b5:90:4c:e8:
d6:48:74:2c:fb:22:05:54:ab:92:21:79:bb:2b:a4:
6f:22:a1:a9:fd:8d:ae:89:b1:30:a8:0d:0b:cb:37:
7c:f1:4c:ce:4b:29:10:6d:90:73:88:12:a4:50:97:
76:62:bf:1d:a0:ba:31:f1:82:a6:b0:88:09:1c:91:
9d:f9:54:5c:ba:5e:cf:c3:df:b9:61:68:1a:86:76:
39:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D1:FB:F8:84:2B:41:07:78:D1:EB:71:6D:FC:C2:1F:86:85:83:96
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/q9H7-IQrQQd40etxbfzCH4aFg5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.145.0/24
13.143.147.0/24
13.143.149.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:87:b9:52:fd:94:3e:a2:f4:d0:49:7a:0b:bd:5e:4a:f9:e3:
93:ac:ed:3f:ca:c7:71:cc:5a:ed:04:30:f5:82:6d:f9:d2:84:
71:a9:79:38:ef:03:0b:59:f5:c4:85:df:78:42:a7:29:58:cc:
06:e7:8d:66:43:07:d3:2b:ba:9c:2c:c0:cb:c9:f7:ae:73:0c:
17:3d:69:1c:e1:a7:ae:0e:f9:b5:3e:8f:28:ab:88:51:51:f0:
dc:40:f1:a3:1a:55:6e:2e:f4:bc:4f:91:a8:3b:8a:0d:9d:0b:
b6:df:a8:f7:d0:81:1a:ec:e4:1c:06:39:7e:27:62:7a:ce:84:
12:9b:31:64:72:25:c5:5d:95:71:8a:16:8d:98:26:c5:ec:1b:
d7:8a:fb:5b:ec:4f:1f:0b:36:96:3b:ec:01:e0:87:57:a9:64:
1a:32:2f:92:15:c4:90:79:06:03:aa:6b:ef:29:31:cb:f2:45:
8e:e4:a7:80:4c:d5:27:0b:00:ca:95:80:65:21:8d:fd:fd:2a:
14:5a:19:2d:5f:4b:9a:1b:12:77:e6:6e:5c:01:76:59:52:0a:
83:0f:a8:cb:23:cb:18:a8:59:1d:52:2b:fa:68:f4:40:0f:b1:
b8:c5:78:38:4a:92:f8:be:bf:44:e6:08:12:43:6a:7c:a3:4b:
b5:c2:53:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:03:39 2026 by rpki-client