Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/82JRbcUo_kC88LK90_Kyjve7plg.roa
File: 82JRbcUo_kC88LK90_Kyjve7plg.roa (raw, json)
Hash identifier: vlAMqweZ9oOglIp/1apiDe8jhYVoN5pWiz+hKN1VH1E=
Subject key identifier: F3:62:51:6D:C5:28:FE:40:BC:F0:B2:BD:D3:F2:B2:8E:F7:BB:A6:58
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F1A0D4514E6428DB76DEEC163257617E4
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/82JRbcUo_kC88LK90_Kyjve7plg.roa
Signing time: Tue 30 Jun 2026 19:41:45 +0000
ROA not before: Tue 30 Jun 2026 19:41:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199742
IP address blocks: 2.27.58.0/24 maxlen: 24
13.143.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:0d:45:14:e6:42:8d:b7:6d:ee:c1:63:25:76:17:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 30 19:41:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f362516dc528fe40bcf0b2bdd3f2b28ef7bba658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0e:8a:f8:19:57:07:5a:e2:21:af:0a:6b:b8:
3b:83:fe:c1:cd:07:3e:59:dc:d6:fb:05:30:d8:22:
a0:ee:49:91:49:2f:5d:b6:e2:25:7a:c0:34:ca:21:
5e:b1:0b:e7:91:5a:af:db:3c:d5:12:4f:ee:ec:53:
29:f2:e7:c8:fa:65:4b:0b:0d:1b:40:83:94:06:55:
7b:28:1e:02:56:1e:11:e0:83:8a:a9:f8:15:38:a7:
af:f9:94:12:f2:8e:0d:7c:76:8f:ed:be:84:27:bf:
24:33:8e:df:c2:41:da:de:2d:2f:a6:be:1d:0c:7e:
e2:49:49:ba:f2:fa:7c:22:8f:a3:94:2a:3b:92:4a:
79:92:07:13:20:8f:1c:37:a3:e5:65:23:25:30:43:
bb:63:5b:eb:af:5d:01:7b:c8:18:ac:7e:a9:c3:8a:
1a:f3:79:53:a1:f3:bb:71:27:94:b6:13:1e:60:3f:
32:43:32:e8:fc:79:5c:a1:7a:66:7d:55:40:0b:39:
1a:3a:79:df:01:38:03:8d:dd:d2:ea:1c:d5:09:78:
23:b3:2f:f3:a6:78:b1:89:12:bf:8b:a5:22:25:03:
fa:12:18:37:0e:d6:fc:e5:63:d3:3d:c1:94:7a:16:
37:0a:93:d6:1f:79:b7:1a:0a:b3:59:26:2d:78:c0:
79:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:62:51:6D:C5:28:FE:40:BC:F0:B2:BD:D3:F2:B2:8E:F7:BB:A6:58
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/82JRbcUo_kC88LK90_Kyjve7plg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.58.0/24
13.143.138.0/24
Signature Algorithm: sha256WithRSAEncryption
16:7d:13:b4:4b:75:be:c4:2c:97:83:37:05:8e:fd:5d:bb:3c:
2f:bb:03:67:07:72:43:9b:4c:64:61:79:d7:35:a3:01:1e:fb:
4a:30:f0:36:20:ac:11:4a:5d:ae:40:da:fa:10:42:fe:de:31:
7a:2a:bf:cb:44:c5:6d:2a:3d:d1:6c:c3:63:98:2d:e1:a8:cc:
c8:af:30:1b:e7:33:e4:4b:aa:fe:fa:8c:f2:68:d1:e7:8c:5a:
d1:87:cb:a2:87:07:c4:9f:3f:44:7f:a3:fb:fa:6e:59:98:ec:
c1:9a:63:21:29:b8:b0:54:1f:09:5f:5f:12:f7:ce:e7:0b:fa:
b4:9a:c5:19:30:d2:51:27:72:66:6b:ba:90:58:bc:96:53:a6:
13:1c:b7:d2:89:e8:5b:bf:b5:15:75:5c:54:8f:39:c8:21:45:
d0:d5:b9:53:97:5b:f2:e8:49:59:28:10:54:cd:6a:83:95:68:
b7:75:bf:e2:31:8e:1e:7b:43:9c:a5:9f:8b:3a:88:c3:59:21:
66:26:b4:47:11:78:ae:1f:82:f9:ee:b2:a5:6f:8f:b9:10:b4:
09:3d:80:67:6f:ea:b0:a0:12:bf:e3:3c:6c:d2:12:0d:aa:ab:
7f:1b:0c:f3:56:c1:3c:b3:9a:dc:e2:a0:5f:83:d0:d2:51:d3:
aa:55:7e:40
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8aDUUU5kKNt23uwWMldhfkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNjMwMTk0MTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzYyNTE2ZGM1MjhmZTQwYmNmMGIyYmRkM2YyYjI4ZWY3YmJhNjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA6K+BlXB1riIa8Ka7g7g/7BzQc+
WdzW+wUw2CKg7kmRSS9dtuIlesA0yiFesQvnkVqv2zzVEk/u7FMp8ufI+mVLCw0b
QIOUBlV7KB4CVh4R4IOKqfgVOKev+ZQS8o4NfHaP7b6EJ78kM47fwkHa3i0vpr4d
DH7iSUm68vp8Io+jlCo7kkp5kgcTII8cN6PlZSMlMEO7Y1vrr10Be8gYrH6pw4oa
83lTofO7cSeUthMeYD8yQzLo/HlcoXpmfVVACzkaOnnfATgDjd3S6hzVCXgjsy/z
pnixiRK/i6UiJQP6Ehg3Dtb85WPTPcGUehY3CpPWH3m3GgqzWSYteMB5EQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPNiUW3FKP5AvPCyvdPyso73u6ZYMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvODJKUmJjVW9fa0M4OExLOTBfS3lqdmU3cGxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAhs6AwQA
DY+KMA0GCSqGSIb3DQEBCwUAA4IBAQAWfRO0S3W+xCyXgzcFjv1duzwvuwNnB3JD
m0xkYXnXNaMBHvtKMPA2IKwRSl2uQNr6EEL+3jF6Kr/LRMVtKj3RbMNjmC3hqMzI
rzAb5zPkS6r++ozyaNHnjFrRh8uihwfEnz9Ef6P7+m5ZmOzBmmMhKbiwVB8JX18S
987nC/q0msUZMNJRJ3Jma7qQWLyWU6YTHLfSiehbv7UVdVxUjznIIUXQ1blTl1vy
6ElZKBBUzWqDlWi3db/iMY4ee0OcpZ+LOojDWSFmJrRHEXiuH4L57rKlb4+5ELQJ
PYBnb+qwoBK/4zxs0hINqqt/GwzzVsE8s5rc4qBfg9DSUdOqVX5A
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:39 2026 by rpki-client