Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ukw6mS7Omxn3MGGU-UJOJZWRrMg.roa
File: ukw6mS7Omxn3MGGU-UJOJZWRrMg.roa (raw, json)
Hash identifier: +S/31guYszrtEzhoX53O+rRAhYYbxEpINfBR759tg1E=
Subject key identifier: BA:4C:3A:99:2E:CE:9B:19:F7:30:61:94:F9:42:4E:25:95:91:AC:C8
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0FDA78C0A2997C089D06F5FEDFCF070F8
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ukw6mS7Omxn3MGGU-UJOJZWRrMg.roa
Signing time: Fri 02 Oct 2026 17:26:51 +0000
ROA not before: Fri 02 Oct 2026 17:26:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219336
IP address blocks: 13.143.171.0/24 maxlen: 24
191.217.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:a7:8c:0a:29:97:c0:89:d0:6f:5f:ed:fc:f0:70:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 2 17:26:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba4c3a992ece9b19f7306194f9424e259591acc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:15:f4:63:59:06:ee:ba:63:b5:05:59:b0:7a:
4f:e8:66:f6:37:ca:3a:15:fd:61:93:39:f1:79:9e:
2d:da:c2:1a:07:0e:07:28:04:50:36:ec:56:51:40:
49:13:d8:56:5d:84:17:87:0b:d3:95:87:28:9b:b9:
b9:24:67:ae:f3:c1:0d:d9:aa:73:7e:57:f4:93:5c:
d5:8f:aa:a5:16:78:40:8b:79:46:56:33:f0:34:11:
16:fd:fb:28:e0:d4:bf:fa:5a:9b:da:31:d4:fc:6a:
0a:61:9c:7b:4f:f9:98:19:ff:24:01:56:df:f3:da:
66:57:47:e6:45:de:26:5d:48:d3:63:c2:37:ce:34:
1d:7a:87:8d:18:56:39:32:74:50:46:3d:1b:df:b8:
57:83:52:0d:b6:02:9e:8c:d1:6f:fa:0c:e7:24:3b:
4d:44:4d:25:ff:38:ea:59:64:73:42:0d:f2:48:89:
65:43:bc:48:39:51:ed:e8:e7:3d:5d:a9:c9:7c:43:
77:98:77:a0:0a:5a:62:07:eb:7d:b6:ed:ee:30:71:
1b:fb:93:cb:8a:a1:43:e5:23:5b:a5:8a:22:60:ac:
a2:83:52:bd:24:3f:11:75:c5:e5:f4:36:6a:7f:cb:
29:a0:78:50:d8:df:74:f2:65:e0:12:20:bb:4e:ef:
13:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4C:3A:99:2E:CE:9B:19:F7:30:61:94:F9:42:4E:25:95:91:AC:C8
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ukw6mS7Omxn3MGGU-UJOJZWRrMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.171.0/24
191.217.215.0/24
Signature Algorithm: sha256WithRSAEncryption
77:7a:ba:d1:37:6c:d8:e5:0b:77:d5:57:de:7b:8d:6b:c3:46:
7c:8f:bd:aa:14:05:b5:74:6e:70:0d:be:7b:a2:81:51:10:c6:
0d:6c:da:26:31:ea:61:92:87:2b:97:92:65:ea:6b:b8:d1:5d:
88:b2:14:74:1c:08:54:a7:44:4e:b4:dd:8e:10:dc:7b:ef:de:
c2:71:07:72:7b:9f:94:8d:e9:52:8a:7f:03:d9:de:ac:34:28:
2d:28:86:c4:c6:18:5f:20:cf:02:b4:1f:3f:4f:4c:25:c0:b2:
7f:07:8b:1c:69:6b:d2:f3:dd:7e:4e:00:84:dd:2e:27:e2:fa:
d3:1a:ba:76:d1:3e:68:2f:92:c5:b1:12:79:d9:2f:c5:3b:ff:
33:13:ad:32:5e:97:b3:7d:fb:bb:ae:b6:eb:3a:a7:df:fe:6c:
f9:7d:6b:8f:fd:68:17:9b:3e:28:9a:fe:45:2e:ed:15:1f:93:
d1:c8:79:7e:71:61:ad:a9:74:ab:0e:6f:07:83:2e:05:a8:b8:
96:bd:b3:c0:17:5d:04:19:a4:2e:07:5d:f4:0c:46:c8:6e:8c:
fb:49:d8:3e:db:48:cd:5d:77:b7:d6:84:49:58:cc:79:7c:1b:
c3:04:cb:57:d9:06:1c:77:9f:4b:5a:c9:83:56:d2:03:73:52:
25:a2:8b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 06:13:08 2026 by rpki-client