Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3mPvFboBwUVNJpxlvcRY4b5Zihw.roa
File: 3mPvFboBwUVNJpxlvcRY4b5Zihw.roa (raw, json)
Hash identifier: tyXslOtyEBqHOlBK/na+6fwSu0Qoq+qQF7cNsAUKKkU=
Subject key identifier: DE:63:EF:15:BA:01:C1:45:4D:26:9C:65:BD:C4:58:E1:BE:59:8A:1C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FAEE511A58B6F33FFFC7132492C0B6D9E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3mPvFboBwUVNJpxlvcRY4b5Zihw.roa
Signing time: Wed 29 Jul 2026 17:21:15 +0000
ROA not before: Wed 29 Jul 2026 17:21:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207700
IP address blocks: 13.143.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:e5:11:a5:8b:6f:33:ff:fc:71:32:49:2c:0b:6d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 29 17:21:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de63ef15ba01c1454d269c65bdc458e1be598a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8f:23:17:3a:d1:fd:29:ed:2a:a7:96:a5:35:
9b:5c:ad:e3:5f:9c:d2:23:bd:8a:06:10:7e:64:68:
58:02:07:1b:af:e6:97:98:d5:43:20:14:fd:34:71:
94:33:84:df:b9:91:d4:30:8a:0a:a8:a4:3e:8a:5b:
97:f6:a2:67:19:b4:19:0f:0d:35:22:90:99:16:5b:
00:1a:88:eb:5a:92:30:74:6c:f6:b4:7b:ea:e8:b4:
41:18:79:dc:cd:50:d1:5f:a7:49:ca:56:d6:1e:6b:
eb:ca:73:ec:3d:af:e2:3d:64:41:f1:ee:76:86:5d:
bd:b8:57:55:61:6b:84:e4:d8:f5:a0:84:3e:0d:8e:
d3:4d:31:fc:b4:e7:29:db:0d:aa:62:18:11:85:8b:
0d:80:64:79:e8:9a:ca:a5:d6:84:5c:94:b7:25:7b:
53:4c:25:bb:30:ae:a5:73:17:26:11:63:4e:c3:d6:
5e:fe:85:a1:3b:d4:05:34:e7:3f:36:32:9a:72:e6:
d1:28:bd:75:3e:d0:e1:90:32:1f:a9:67:55:0a:6a:
5d:19:01:29:30:b7:cf:f3:83:ba:cf:f5:28:8e:ca:
fb:68:85:e0:c2:35:2b:3c:8a:4e:1e:01:1f:1c:dd:
98:55:3d:61:74:6e:d7:89:2f:2a:11:3e:4c:d8:59:
b5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:63:EF:15:BA:01:C1:45:4D:26:9C:65:BD:C4:58:E1:BE:59:8A:1C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/3mPvFboBwUVNJpxlvcRY4b5Zihw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.237.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:d2:86:15:a5:09:22:a4:d8:55:0d:e5:74:1c:cc:f4:e8:34:
24:7b:77:55:2c:8d:cb:2b:68:d8:53:11:4d:7f:61:a3:0f:36:
23:ee:cf:30:72:d1:3b:bd:33:df:b6:b8:82:8e:a7:25:9a:c1:
ee:91:9f:9c:81:68:cf:fd:d9:07:04:c3:37:51:9d:a6:37:b1:
b6:00:3a:69:58:9d:c2:fd:16:fc:65:cc:c3:26:fd:04:3b:3b:
81:52:d1:0b:9d:f1:e7:d3:e8:28:c9:2d:40:02:6b:c0:4f:88:
df:e3:d3:2a:90:14:f7:0b:dc:7e:44:cb:f4:a5:0e:e4:3b:b3:
d3:a3:8d:96:65:a2:01:d0:02:8b:3c:7a:e8:61:f8:89:34:c3:
8f:bd:ad:01:bb:ee:33:4e:1e:62:82:19:cc:2d:f0:cb:c8:c1:
96:28:24:fa:43:11:b4:3c:9a:e7:19:cf:64:c6:10:05:26:b1:
f0:55:fd:c8:f7:fd:9e:58:d5:c8:f7:87:7b:61:7c:32:e5:8c:
92:ad:9b:93:84:c1:02:f1:6b:82:15:a9:01:aa:7e:3f:8a:52:
54:99:bf:5f:e9:3f:77:fa:f3:53:1b:af:35:91:fe:e2:77:df:
c3:87:14:6d:5a:36:96:ab:e1:c1:b6:0c:bf:9d:9c:54:02:0d:
a0:c2:79:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:51:42 2026 by rpki-client