Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5a5IWp9iWLnW4pQUT9L2D44zKDo.roa
File: 5a5IWp9iWLnW4pQUT9L2D44zKDo.roa (raw, json)
Hash identifier: iIeBns1RKZKSrZXXSBugyAa6mgKZphB+f5bpImfmR0w=
Subject key identifier: E5:AE:48:5A:9F:62:58:B9:D6:E2:94:14:4F:D2:F6:0F:8E:33:28:3A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F2A3DDB9AD38A217467FC584894FCA1BF
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5a5IWp9iWLnW4pQUT9L2D44zKDo.roa
Signing time: Fri 03 Jul 2026 23:08:44 +0000
ROA not before: Fri 03 Jul 2026 23:08:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212112
IP address blocks: 13.143.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2a:3d:db:9a:d3:8a:21:74:67:fc:58:48:94:fc:a1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 3 23:08:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5ae485a9f6258b9d6e294144fd2f60f8e33283a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:7d:14:99:be:7f:ea:c0:d9:ff:fb:39:ed:
3e:29:a8:3c:b8:1b:83:c7:3e:29:bb:1c:19:5b:eb:
fc:c8:e4:a4:80:38:eb:da:77:68:a0:75:54:dd:aa:
9f:05:d8:78:91:70:50:bf:d7:6d:0f:41:0c:2c:2c:
a2:26:f8:0d:da:1c:0c:86:a5:01:3f:68:45:23:89:
52:78:4c:9b:0a:ff:f9:e7:ca:9b:1f:fc:9f:6b:45:
e3:f5:96:db:09:88:06:a5:cc:e1:ed:e1:10:f2:ea:
23:03:38:c7:9b:0e:ec:c0:3c:1a:50:8c:92:e4:72:
c2:df:af:06:a3:ed:84:8b:bd:0b:55:59:ce:8e:00:
13:ba:f5:e9:50:ec:50:81:cd:b7:35:32:85:1f:33:
ce:67:54:e3:3f:fe:e4:17:29:c1:14:e9:21:ae:cd:
b5:8d:20:eb:48:89:06:ea:35:1c:10:f1:19:05:82:
15:92:e1:d0:8f:7c:60:5a:8e:91:88:5a:fc:13:0c:
cf:0d:cb:a6:32:d3:51:8f:85:69:cc:38:17:99:19:
7e:f1:2d:6b:b4:3d:c7:11:30:39:71:49:a9:44:6f:
b3:1f:d8:43:48:d4:f2:7e:73:a7:30:ca:4d:e5:8c:
92:5d:c8:a8:4d:e6:e6:2d:4d:8f:e1:b1:a3:12:8a:
ed:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AE:48:5A:9F:62:58:B9:D6:E2:94:14:4F:D2:F6:0F:8E:33:28:3A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5a5IWp9iWLnW4pQUT9L2D44zKDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.130.0/23
Signature Algorithm: sha256WithRSAEncryption
11:70:61:9f:19:24:c9:5c:08:16:5b:91:56:b5:72:b7:05:77:
f4:39:bc:47:d4:1b:45:af:cf:10:be:a4:54:55:1c:c2:0c:2c:
23:be:ed:0d:6a:24:98:fa:bc:8d:65:e7:b4:ec:79:f5:e1:df:
4d:d2:76:86:8f:c7:9e:ea:9b:82:fa:79:5f:f1:ab:46:6b:6a:
40:bd:58:e5:30:9f:63:26:7e:92:4b:6d:ed:80:ac:1d:e0:0a:
a7:77:8a:8f:8d:b0:11:7c:69:b4:4b:61:47:9e:cb:8d:92:14:
15:97:36:46:f3:ee:c0:92:79:a3:ea:71:e6:ed:ce:57:1d:20:
7d:7f:0b:ae:a5:d4:4d:07:52:53:d3:e6:32:f8:ca:ca:74:70:
e9:49:e3:81:a3:75:78:94:53:d9:5b:f9:6a:90:25:4c:96:32:
b2:9d:15:13:4e:d1:f0:42:a3:04:14:5f:1d:ae:fc:b7:46:76:
45:6f:1d:11:ac:99:4c:77:bb:5b:59:5e:c4:8d:00:e8:38:78:
fd:9e:53:2a:bc:70:45:67:ff:a8:72:a4:e8:b0:2c:6e:53:0d:
3f:a9:3b:57:ca:f6:7c:66:17:f3:23:8f:bc:1e:02:5c:3f:d7:
9e:68:05:f1:5a:46:05:da:e6:9a:13:4b:5e:8a:4f:08:f3:e1:
2a:23:cc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:52 2026 by rpki-client