Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/446lsY9jq9r8dhQp9xpSwz1Mylc.roa
File: 446lsY9jq9r8dhQp9xpSwz1Mylc.roa (raw, json)
Hash identifier: gWAJcQqnc1g8vgS7im83fJ8wCclt8BMFXKYJ5PT/wkY=
Subject key identifier: E3:8E:A5:B1:8F:63:AB:DA:FC:76:14:29:F7:1A:52:C3:3D:4C:CA:57
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A01C0DE8FEF24A637E7CEBEC39DF113BD7
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/446lsY9jq9r8dhQp9xpSwz1Mylc.roa
Signing time: Wed 19 Aug 2026 22:04:28 +0000
ROA not before: Wed 19 Aug 2026 22:04:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204785
IP address blocks: 2.27.243.0/24 maxlen: 24
13.143.176.0/24 maxlen: 24
13.143.178.0/24 maxlen: 24
13.143.179.0/24 maxlen: 24
144.31.150.0/24 maxlen: 24
179.254.68.0/24 maxlen: 24
179.254.69.0/24 maxlen: 24
179.254.70.0/24 maxlen: 24
179.254.71.0/24 maxlen: 24
179.254.84.0/24 maxlen: 24
179.254.85.0/24 maxlen: 24
201.10.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1c:0d:e8:fe:f2:4a:63:7e:7c:eb:ec:39:df:11:3b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 19 22:04:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e38ea5b18f63abdafc761429f71a52c33d4cca57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:d1:0f:db:85:e0:1a:29:30:04:30:12:09:
ad:76:8b:04:f3:ba:b4:a3:7a:95:d5:e6:4f:13:fa:
19:21:55:d5:65:e0:44:3d:c6:0f:ea:fb:95:98:31:
00:21:dc:be:6d:75:a9:8c:de:79:9a:28:dd:a3:cb:
40:63:ea:ee:bf:b5:64:35:1f:ab:d4:7f:b7:82:de:
82:c3:c5:c0:25:55:90:18:ab:87:81:81:c8:1b:fa:
26:99:b9:43:eb:cc:6c:7f:50:3d:5b:cf:75:6b:1c:
81:5d:9a:34:05:1c:4b:a1:16:ef:c6:ea:39:0c:85:
4a:12:e5:8f:47:96:87:7d:35:e4:c7:92:3d:6e:d2:
48:54:a6:04:cc:75:22:7f:af:d2:85:bc:4a:09:a1:
e2:e8:3b:a1:de:8e:c9:61:8a:62:e2:f5:f9:6d:20:
24:7a:d3:8c:d0:b5:c6:a2:0f:2e:5d:ab:0e:93:1d:
36:f2:bf:1c:85:1e:e6:fd:51:29:bc:27:f1:4a:00:
ff:8f:d6:dc:74:8c:9f:0d:5e:d5:fa:91:1c:8a:35:
08:ca:86:4a:d4:e0:ae:a9:cd:ec:07:c0:b9:2c:f0:
a8:eb:f4:7e:1e:21:c3:e5:92:62:8d:2b:bd:cf:f6:
c9:80:e1:ad:2d:0d:e6:a9:d4:0f:9d:19:d0:f8:61:
71:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8E:A5:B1:8F:63:AB:DA:FC:76:14:29:F7:1A:52:C3:3D:4C:CA:57
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/446lsY9jq9r8dhQp9xpSwz1Mylc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.243.0/24
13.143.176.0/24
13.143.178.0/23
144.31.150.0/24
179.254.68.0/22
179.254.84.0/23
201.10.79.0/24
Signature Algorithm: sha256WithRSAEncryption
27:7a:bb:5f:01:f9:d7:f4:ee:83:c5:6f:95:42:ed:90:61:cd:
15:c0:05:71:eb:8e:3c:52:65:8a:5f:32:a8:bb:1f:d9:2a:28:
50:e0:12:b4:c3:ce:5f:26:05:dd:ab:d3:69:86:ec:eb:50:0c:
db:79:fa:59:a6:26:10:fc:71:e6:d7:be:e0:70:3e:6a:2d:a3:
77:ec:f0:8c:63:fc:61:47:a8:be:2c:4e:f6:27:6e:34:b1:83:
82:fb:a4:ad:12:cf:3f:a7:24:83:86:8f:ec:76:5d:50:50:e9:
93:b4:5d:51:34:eb:d2:52:7d:cb:20:b5:ca:ac:21:d2:62:b7:
04:36:f3:5f:db:8b:b9:ef:5d:11:00:fc:f0:d3:aa:5a:b6:d6:
88:04:cc:85:bb:a5:58:c1:e8:fe:cf:36:04:f8:c6:e8:b3:90:
d6:d2:cf:67:62:44:ec:dc:0a:bc:a9:a8:2d:99:b2:53:df:ac:
e0:8d:23:36:93:2e:be:87:51:56:e6:04:d2:38:77:be:10:3f:
74:f6:56:c2:3d:da:d5:95:6b:0b:a3:a0:01:0b:71:4f:d5:04:
4d:70:34:7e:b6:b3:70:82:ac:b2:0f:29:cc:82:72:1c:bd:56:
1c:e8:6b:72:d8:98:27:ec:04:6d:0f:48:26:7d:7d:3d:59:ab:
da:4a:f7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 23:30:47 2026 by rpki-client