Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/2-VlhPqIoCKEbW58aIocte4LkPc.roa
File: 2-VlhPqIoCKEbW58aIocte4LkPc.roa (raw, json)
Hash identifier: xv/XDAXYMuTIiCWFgJG67Ao8Dull4rKSB0R1DdurnU8=
Subject key identifier: DB:E5:65:84:FA:88:A0:22:84:6D:6E:7C:68:8A:1C:B5:EE:0B:90:F7
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F14B9041CDBFC203441D9A7881E244D3F
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/2-VlhPqIoCKEbW58aIocte4LkPc.roa
Signing time: Mon 29 Jun 2026 18:51:37 +0000
ROA not before: Mon 29 Jun 2026 18:51:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4766
IP address blocks: 13.143.88.0/22 maxlen: 24
13.143.92.0/22 maxlen: 24
13.143.96.0/22 maxlen: 24
31.77.176.0/23 maxlen: 24
31.77.182.0/23 maxlen: 24
31.77.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:b9:04:1c:db:fc:20:34:41:d9:a7:88:1e:24:4d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 29 18:51:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbe56584fa88a022846d6e7c688a1cb5ee0b90f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:36:62:5f:81:e1:82:60:b6:c4:88:03:53:e5:
c0:b0:7c:bf:3e:2a:a0:d3:b7:16:e3:a4:5c:79:58:
1b:a7:5b:1e:22:bd:8f:69:3c:32:d0:84:4b:78:58:
3a:59:8a:38:1f:28:62:53:a2:09:a3:59:db:7a:86:
ad:cb:3b:c4:60:c9:83:db:26:2f:31:83:28:9e:48:
d0:fd:a8:c2:c1:0d:3a:21:f2:e7:44:dd:66:ff:d5:
82:4f:65:8f:e7:5a:2e:a6:33:50:50:3f:1c:c0:bf:
6e:b2:c3:1b:f6:3c:19:6c:ee:0e:5b:af:29:9f:09:
d0:77:10:59:48:c3:4d:74:ee:88:ee:2d:4e:b4:87:
ba:8e:3b:89:9a:b8:9e:fa:6b:4b:57:84:83:df:c8:
30:e7:5a:09:1a:6c:fa:b2:5c:e1:f0:ce:d3:37:9c:
8a:ac:44:62:37:4a:6e:97:6d:03:ea:03:59:cc:54:
64:9d:1d:80:23:50:30:22:2d:27:47:40:f0:73:5c:
a5:10:bf:df:80:36:b1:0c:8d:e2:a0:3d:12:1a:fa:
13:d1:e8:10:9c:73:8b:2d:a4:26:b0:8f:9a:44:f7:
85:7b:bc:e6:d5:05:f3:e8:2e:25:70:3d:36:91:0c:
7d:aa:e1:63:17:f3:dd:10:c6:c6:05:fe:2d:51:da:
33:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E5:65:84:FA:88:A0:22:84:6D:6E:7C:68:8A:1C:B5:EE:0B:90:F7
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/2-VlhPqIoCKEbW58aIocte4LkPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.88.0-13.143.99.255
31.77.176.0/23
31.77.182.0/23
31.77.190.0/23
Signature Algorithm: sha256WithRSAEncryption
93:26:bf:dc:49:00:8b:49:ff:de:96:04:9e:0a:db:15:32:63:
53:94:8c:21:ad:b9:a5:22:25:76:a3:c4:41:d9:3b:91:33:d0:
de:f7:0a:66:4d:48:93:92:a8:a1:54:2e:c0:eb:cd:c9:a9:e1:
5e:01:8c:c2:50:7a:ab:bc:11:11:53:9e:74:23:53:57:8c:ef:
b4:16:6f:c6:4e:7d:c2:ef:04:02:0c:24:01:10:14:c2:d1:90:
20:b0:fb:f0:c7:78:30:b4:13:6f:ff:28:2f:23:b5:30:a8:d9:
22:b8:7b:52:99:d3:4a:a1:3d:1b:57:6d:37:a1:3f:9a:2d:ab:
bf:b8:b1:fa:8c:be:ef:73:76:86:25:04:08:63:ab:18:45:19:
e6:84:ca:74:67:7e:ce:77:b2:5c:9b:b9:49:4f:59:71:e2:ca:
c9:92:d0:a2:f9:a5:38:8f:b8:57:cf:41:f2:d2:75:9c:df:1b:
aa:50:ac:b2:a9:92:b1:8b:e3:d3:52:1d:51:f7:18:2c:aa:56:
50:b8:92:2b:f8:50:35:43:0c:69:7b:6c:b2:34:00:02:55:87:
cc:9d:d8:6f:3b:3d:6f:b9:cb:46:ec:ae:13:d2:be:4e:45:70:
25:e0:ed:18:08:24:3c:32:4c:3f:45:89:ce:93:cd:c0:c1:e3:
12:78:50:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:25 2026 by rpki-client