Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0kkAAOxDpIEn1CQpor79JjvGJBs.roa
File: 0kkAAOxDpIEn1CQpor79JjvGJBs.roa (raw, json)
Hash identifier: nzV1a/VuKvkp9hGTrhNj7p5YHS5r+x/0RZovHb3Ozf0=
Subject key identifier: D2:49:00:00:EC:43:A4:81:27:D4:24:29:A2:BE:FD:26:3B:C6:24:1B
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0A1AA01ED6870A701858F5A0F85D95503
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0kkAAOxDpIEn1CQpor79JjvGJBs.roa
Signing time: Mon 14 Sep 2026 20:44:28 +0000
ROA not before: Mon 14 Sep 2026 20:44:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219429
IP address blocks: 13.143.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a1:aa:01:ed:68:70:a7:01:85:8f:5a:0f:85:d9:55:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 14 20:44:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2490000ec43a48127d42429a2befd263bc6241b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:33:04:42:e7:35:4e:cd:ad:cf:07:57:07:44:
1c:30:90:b3:de:96:95:32:e7:79:f6:19:d2:11:bd:
c6:52:27:08:65:c8:6c:e4:e3:e8:ce:59:1e:aa:a8:
c2:64:e5:d8:60:5c:a2:03:b6:f5:21:f5:cd:5a:6c:
e4:49:ff:96:8e:6e:26:60:a2:45:e9:c1:ef:5d:24:
0f:1e:4c:8f:41:d1:c7:49:26:77:f9:31:8d:e9:d5:
f2:90:c1:f1:88:d5:c8:16:d4:76:8f:6f:e4:a5:af:
29:c0:42:1b:fd:2d:15:7f:cf:b3:c9:9f:61:95:3f:
92:2b:99:4c:4f:04:09:29:81:21:5b:44:8b:49:35:
38:af:bd:bb:09:a2:00:12:90:90:ee:0c:5c:2f:13:
04:a0:c0:dd:ea:a5:fd:cf:11:70:7d:fe:ef:ee:bb:
06:96:a6:04:4d:dd:37:da:06:b8:01:19:24:59:36:
b5:1d:3a:3f:e7:db:05:22:bd:d2:6e:27:10:b5:72:
51:04:fe:7d:28:d9:f0:bb:78:4b:f5:d1:7d:db:66:
aa:dd:35:b7:d0:98:fe:d9:3e:56:42:b1:5a:a1:58:
38:17:90:ce:f7:df:62:13:20:93:ef:4d:5a:c4:1a:
c8:51:b9:0d:f9:ee:33:79:34:24:58:94:00:28:33:
a0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:49:00:00:EC:43:A4:81:27:D4:24:29:A2:BE:FD:26:3B:C6:24:1B
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0kkAAOxDpIEn1CQpor79JjvGJBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.220.0/23
Signature Algorithm: sha256WithRSAEncryption
43:95:d9:fa:67:60:47:2e:ae:51:8c:b1:b2:88:17:47:59:d1:
fb:30:ac:b5:ea:64:bd:2b:0b:a8:10:4e:ff:84:99:15:33:57:
33:41:18:49:00:ad:5e:a7:12:0f:6e:36:27:e2:f5:58:51:b5:
9d:22:4b:e2:eb:04:ee:bd:2b:8e:52:b8:e9:21:64:7c:c0:91:
a0:1e:f3:83:3e:dc:4d:c4:38:52:56:a8:d7:18:9f:7d:30:48:
d7:22:fe:40:17:b0:85:d4:15:98:c8:c2:85:a3:53:bc:fc:ac:
32:8c:38:47:06:ba:86:07:9e:57:da:1e:25:52:c8:76:be:df:
5c:78:10:2f:e2:cc:40:b9:26:33:a4:00:5e:b4:78:a5:a9:cf:
93:02:82:a7:9c:6d:96:e4:e9:5f:f1:cd:04:a0:2b:48:0d:7f:
96:48:86:78:ee:f4:71:e1:6f:7f:cb:7c:97:9e:5a:92:0c:3c:
73:a5:0f:27:a2:69:17:5d:fe:09:db:bc:f1:24:b6:9f:a0:96:
26:28:f2:57:a3:ca:b6:64:ed:c2:73:c7:72:d2:63:e4:06:06:
2d:85:8e:4e:18:80:d9:73:18:82:bf:0b:ac:fe:a9:00:3d:be:
2a:ea:68:c1:8f:94:ca:ad:97:27:d1:3d:17:fe:35:b8:16:19:
98:b3:49:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:27:19 2026 by rpki-client