Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/738c_8-FysUXmdcqF5g9aFvJqeg.roa
File: 738c_8-FysUXmdcqF5g9aFvJqeg.roa (raw, json)
Hash identifier: bhgqAKp/vQbd9CaN4rUsqJKoLAX+dGHf35EHWTyVrjA=
Subject key identifier: EF:7F:1C:FF:CF:85:CA:C5:17:99:D7:2A:17:98:3D:68:5B:C9:A9:E8
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F66BEC8F60109FBEDF30AE0DF2518B0CC
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/738c_8-FysUXmdcqF5g9aFvJqeg.roa
Signing time: Wed 15 Jul 2026 17:06:47 +0000
ROA not before: Wed 15 Jul 2026 17:06:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203679
IP address blocks: 13.143.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:66:be:c8:f6:01:09:fb:ed:f3:0a:e0:df:25:18:b0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 15 17:06:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef7f1cffcf85cac51799d72a17983d685bc9a9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:98:0a:51:57:8b:da:b8:15:3b:e0:32:59:9a:
b3:eb:0e:21:ec:5c:3e:07:41:d5:51:29:58:bc:a3:
5d:5f:09:9d:a8:3a:bc:82:11:58:7a:1c:73:fd:f5:
fb:32:c7:a1:60:e6:f4:24:b4:1e:ac:62:a3:84:78:
87:ed:69:fb:ee:2f:1c:ed:9e:7c:84:c2:d4:9d:b1:
87:9a:27:50:cd:4c:01:dd:fd:49:28:e4:c4:ce:d1:
fb:a0:c2:d4:ff:05:94:99:63:18:e1:67:db:c9:10:
6e:7e:d0:44:2c:2c:94:3d:4a:c9:14:63:c7:34:7c:
60:c7:4b:07:59:36:ec:0d:03:09:38:e0:d5:33:6c:
ce:ec:68:23:c7:e1:71:8c:de:04:eb:5e:aa:28:d7:
60:db:5b:32:65:03:87:82:66:11:41:5d:74:6b:f0:
f1:7e:9e:04:ac:e7:ce:e2:e8:75:90:60:39:10:85:
cf:fe:ff:8b:2c:3a:95:75:35:b0:db:2d:4c:5b:3e:
82:31:cf:90:f5:6a:8d:f0:6a:a9:1b:28:fd:e6:f9:
b3:80:47:17:62:21:e3:39:d9:38:55:d0:59:59:17:
a0:63:ff:e6:93:6a:11:c0:0a:3e:69:10:0a:b8:4f:
60:b4:d5:b1:1a:37:20:3a:74:ac:1b:40:20:ff:43:
14:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7F:1C:FF:CF:85:CA:C5:17:99:D7:2A:17:98:3D:68:5B:C9:A9:E8
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/738c_8-FysUXmdcqF5g9aFvJqeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.233.0/24
Signature Algorithm: sha256WithRSAEncryption
41:19:6c:f2:db:e5:64:f5:7f:c1:95:23:06:11:95:7b:cf:22:
f9:97:a6:67:d4:c9:3a:da:08:c7:59:54:c5:a4:0b:72:94:5f:
83:6b:fb:28:61:ff:f2:9b:1a:80:d0:a3:f7:5b:dd:cf:17:63:
da:1d:c8:d6:71:35:3b:47:f3:6a:8c:b1:3b:e2:67:77:1a:42:
de:ec:55:ea:7b:a3:53:3d:ba:af:e8:dc:e7:7d:4f:b9:a6:11:
13:ca:9a:ab:f2:21:03:be:e7:7b:9f:22:5f:11:a9:27:20:8d:
61:a4:c0:f7:00:92:0e:4f:bf:94:b5:46:37:2e:b2:d7:c5:45:
00:79:19:8e:f1:60:bb:4b:63:f2:30:95:8d:65:87:9d:cb:e2:
16:db:6f:b6:5b:a6:f0:e7:7e:5e:84:f7:f5:fb:26:17:81:74:
95:d2:96:a7:45:4e:40:29:7c:69:f4:f5:58:c0:79:8e:75:19:
50:a2:34:00:11:b1:3f:a3:7a:c5:f9:9c:8f:17:92:91:fb:ef:
5d:b1:bd:41:51:30:7f:ca:a9:df:35:80:9d:30:44:76:15:fe:
46:ae:d1:cf:b3:8f:86:a8:7e:f3:a0:13:81:84:61:c4:da:a0:
a2:db:56:b7:2b:87:58:46:25:00:36:8d:dd:ec:33:d3:b5:db:
52:3a:51:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:16:54 2026 by rpki-client