Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4cZ3I_cJVgQfEfcDMD-WUnU98gM.roa
File: 4cZ3I_cJVgQfEfcDMD-WUnU98gM.roa (raw, json)
Hash identifier: k5z4xqRd7VQmaoY8DVopMn2/unvbb2sNkRZf3LwStCI=
Subject key identifier: E1:C6:77:23:F7:09:56:04:1F:11:F7:03:30:3F:96:52:75:3D:F2:03
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A02004516DBD4C3B9AD38930F58C5F0883
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4cZ3I_cJVgQfEfcDMD-WUnU98gM.roa
Signing time: Thu 20 Aug 2026 16:32:28 +0000
ROA not before: Thu 20 Aug 2026 16:32:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203380
IP address blocks: 13.143.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 14:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:04:51:6d:bd:4c:3b:9a:d3:89:30:f5:8c:5f:08:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 20 16:32:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1c67723f70956041f11f703303f9652753df203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:3f:59:bb:37:84:9c:d0:0d:1b:71:ef:82:
36:ee:74:14:14:56:48:d6:8c:59:98:3f:63:3c:7b:
42:9b:6a:f1:7c:0c:13:5c:89:c7:66:a0:41:41:7a:
dc:56:f7:fa:29:d2:a2:75:bb:0a:9c:b6:2c:79:c0:
97:ca:09:c2:8a:f8:17:c7:e5:d7:95:6e:a1:34:7e:
40:cc:89:7e:d6:86:0d:1a:02:64:09:a8:15:0e:7f:
fd:a5:c3:ad:ea:52:57:5d:e3:81:47:ec:0a:f6:57:
ac:c0:23:94:87:3f:57:76:a1:1b:fd:32:79:14:59:
7c:40:3d:0c:9c:01:86:10:bd:14:f9:fd:90:9d:90:
3d:8b:77:a8:0a:94:c8:aa:66:e4:01:a5:3f:06:47:
cc:81:70:60:4d:36:c5:4b:2e:cf:94:99:04:4d:9f:
be:bc:26:6d:c8:8c:51:a7:1a:ed:d6:ec:9f:5c:e0:
29:00:6a:1f:3e:83:9c:c9:fa:8d:bc:c4:99:64:7a:
43:18:f6:ce:de:49:a9:2c:0e:ae:e5:7f:cc:ec:88:
58:99:fd:ce:4a:6b:1a:f0:73:2f:03:e0:b3:fb:f2:
87:6d:16:51:ec:c9:30:d9:78:52:5d:38:c3:a3:a2:
a5:c4:b4:f7:25:7c:87:b4:c5:fd:42:8e:82:e4:67:
4d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C6:77:23:F7:09:56:04:1F:11:F7:03:30:3F:96:52:75:3D:F2:03
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4cZ3I_cJVgQfEfcDMD-WUnU98gM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.235.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:d5:d8:02:4d:2a:c0:be:14:f4:3b:c4:f8:e6:c0:08:9a:e5:
2e:76:44:b2:34:31:00:3b:a5:7a:a8:96:5f:38:f4:3c:20:7f:
29:69:a2:5a:36:6d:d3:56:82:3c:7e:e1:b9:18:df:84:46:cc:
fa:f8:ff:d0:b9:58:60:4f:ad:e2:f7:46:a1:33:2f:67:0c:ab:
e1:fe:1f:e1:07:32:57:b6:2e:09:eb:c4:1e:1e:d7:2b:81:93:
34:79:a7:af:36:c1:31:8b:bd:8c:4c:44:da:3b:c6:84:57:41:
f7:87:1f:b7:90:9a:0b:d0:38:96:7a:4b:d0:3c:c0:98:26:a9:
0c:a9:b3:7a:5d:23:69:4d:66:c9:de:7a:7e:83:90:51:3f:a3:
cb:dc:93:a5:fb:67:c1:96:11:8c:bf:e0:42:2f:87:f2:ed:ca:
7a:37:91:9f:d0:11:98:e0:79:d1:02:6a:70:af:a5:87:43:b2:
a0:29:fe:2c:b1:e8:9b:01:df:a3:30:4d:53:7c:7e:c6:c7:97:
60:34:8a:86:87:53:d0:ec:69:5e:93:89:6a:29:e7:14:18:4b:
ae:bf:34:b4:6a:d1:5e:43:f0:35:e1:c2:b0:a4:8b:1f:9b:78:
25:16:8a:b1:2d:6f:f4:a8:18:50:5b:fa:34:cc:51:bb:f1:24:
56:46:55:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 18:39:09 2026 by rpki-client