Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7A3tSUG0DAmnLvm7-rX2ryDvYH4.roa
File: 7A3tSUG0DAmnLvm7-rX2ryDvYH4.roa (raw, json)
Hash identifier: gA3fjk8taWIE5KPwXHXLeR4o7/Qrxv0J7bHzbC3xtd4=
Subject key identifier: EC:0D:ED:49:41:B4:0C:09:A7:2E:F9:BB:FA:B5:F6:AF:20:EF:60:7E
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0EE1D817AA08A9486AC6B8F1C5A7E53E8
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7A3tSUG0DAmnLvm7-rX2ryDvYH4.roa
Signing time: Tue 29 Sep 2026 17:01:46 +0000
ROA not before: Tue 29 Sep 2026 17:01:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219153
IP address blocks: 13.143.204.0/23 maxlen: 24
13.143.212.0/23 maxlen: 24
13.143.224.0/23 maxlen: 24
13.143.228.0/23 maxlen: 24
31.77.36.0/23 maxlen: 24
179.254.116.0/23 maxlen: 24
179.254.118.0/23 maxlen: 24
179.254.120.0/23 maxlen: 24
179.254.122.0/23 maxlen: 24
201.10.82.0/23 maxlen: 24
201.10.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:1d:81:7a:a0:8a:94:86:ac:6b:8f:1c:5a:7e:53:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 29 17:01:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec0ded4941b40c09a72ef9bbfab5f6af20ef607e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cc:9a:8d:9d:96:66:7f:b4:5d:b2:78:2c:19:
ac:66:c8:0b:1b:63:dc:42:01:16:51:9c:5a:f5:ce:
81:a4:c8:9f:f0:fa:bc:06:64:dd:de:26:b8:ad:04:
a3:57:a1:45:fe:a3:36:f2:65:42:4c:40:59:8f:3e:
85:72:2d:90:8e:b9:ab:f9:9a:07:a3:fd:14:3c:36:
95:f8:c6:42:10:ac:2a:dc:77:6e:7c:6e:a1:46:77:
13:69:d1:f2:e3:0e:59:c9:bd:b5:89:d8:f6:d2:a6:
4f:a9:93:2b:eb:ed:01:f5:d9:93:3b:d3:a3:a1:88:
73:01:80:2b:37:71:d6:1a:5c:d4:42:51:3c:58:d0:
6f:14:a5:2c:62:b6:21:77:d4:d6:e7:ae:29:dd:3b:
80:67:e3:e9:78:1f:ed:f9:d0:10:d6:e4:cf:cf:6c:
a0:4f:1b:47:73:1a:29:11:6c:34:81:e6:58:dc:59:
15:fd:28:09:a9:cb:0a:64:b8:af:44:9d:3c:bc:7c:
20:3d:9a:5f:4f:a4:26:c5:3c:59:53:1b:08:5b:ed:
12:5c:db:45:29:ba:1c:a8:52:ed:33:69:2e:e1:73:
5b:15:05:d4:15:4d:03:be:d1:79:55:06:7f:a2:72:
7d:95:df:c7:ce:a5:f6:ba:28:80:0b:a6:9b:25:c3:
88:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0D:ED:49:41:B4:0C:09:A7:2E:F9:BB:FA:B5:F6:AF:20:EF:60:7E
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7A3tSUG0DAmnLvm7-rX2ryDvYH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.204.0/23
13.143.212.0/23
13.143.224.0/23
13.143.228.0/23
31.77.36.0/23
179.254.116.0-179.254.123.255
201.10.82.0/23
201.10.88.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:3a:ca:57:2b:e1:f6:fe:75:2f:c8:67:f6:cf:69:d5:c0:49:
a0:e8:3b:f0:1d:4e:13:0d:15:f8:cf:90:49:fd:bd:c4:68:c4:
36:d8:23:6d:c4:5a:86:64:3f:eb:e5:7e:5d:8d:4e:a6:c0:b6:
c9:66:cd:22:f8:2a:e5:c4:91:be:ff:39:88:2e:df:6a:4f:2f:
15:68:1a:e8:d2:a0:c1:22:8f:1b:01:93:eb:db:aa:7e:cc:19:
83:d2:b5:f0:99:e4:25:d0:b9:65:de:ad:1a:bd:49:f5:5c:9a:
c6:d0:c6:10:93:3a:15:b6:26:66:3a:53:28:82:f5:41:96:6d:
38:36:33:ce:f3:2b:9d:28:6b:16:90:d1:0a:a2:3e:cf:89:f2:
6a:99:d9:53:f6:8a:d6:cf:b7:b1:64:2d:7e:cf:4c:a9:9e:0b:
25:57:41:22:e9:cc:a6:d9:25:f1:53:5a:d9:30:2a:f8:b4:e8:
95:07:91:09:60:91:b5:f9:71:e3:04:99:b7:04:de:3c:ec:17:
a9:a3:d5:60:74:cb:d4:1c:d7:8e:38:51:ce:53:8c:f4:00:34:
cb:c2:cc:e3:ab:d9:aa:4d:ef:d7:b1:40:e4:cb:92:2a:48:7d:
56:a3:da:c0:aa:a7:4b:f8:c7:df:9e:a6:3d:03:0d:a6:2e:c6:
95:c7:6d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:57 2026 by rpki-client