Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8QVxbzkSKdSB-aUl1NFAq47CEzk.roa
File: 8QVxbzkSKdSB-aUl1NFAq47CEzk.roa (raw, json)
Hash identifier: SNl8Iga7WyiufcUsaFyrZ5fciiY1nrB/pDidB24V1/w=
Subject key identifier: F1:05:71:6F:39:12:29:D4:81:F9:A5:25:D4:D1:40:AB:8E:C2:13:39
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0B042E2378E7D7C33198A354BC484C9B9
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8QVxbzkSKdSB-aUl1NFAq47CEzk.roa
Signing time: Thu 17 Sep 2026 16:46:08 +0000
ROA not before: Thu 17 Sep 2026 16:46:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19318
IP address blocks: 13.143.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:42:e2:37:8e:7d:7c:33:19:8a:35:4b:c4:84:c9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 17 16:46:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f105716f391229d481f9a525d4d140ab8ec21339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:87:13:b8:65:dc:ec:da:bd:0a:72:05:0a:83:
dd:5b:68:34:b6:a7:bf:df:78:16:40:56:7a:58:f1:
2d:0b:1a:1e:ef:1c:c5:fd:2e:b0:3a:88:1c:da:28:
17:8d:8d:04:f0:d5:6f:df:7c:11:fc:73:ac:77:7e:
38:15:d0:91:ea:84:74:e3:0f:d5:a1:1d:2c:3d:8a:
bf:40:36:bc:9d:05:b6:16:cf:30:3c:ca:5d:82:34:
99:b4:74:ed:57:9d:3b:f2:0b:b4:9b:a3:b7:94:41:
1b:d7:31:68:18:2f:2c:7c:57:a5:85:7c:2e:1a:fa:
2d:ea:1f:38:b9:df:a5:ae:91:aa:d6:75:ec:29:29:
7c:88:2e:25:e7:45:b9:fc:9c:43:af:bb:53:e8:62:
5d:32:a1:39:3e:a5:98:55:9f:4e:4d:5d:ee:4c:bf:
ca:4a:3f:bf:62:cb:04:79:c6:28:1d:61:bf:2b:7f:
41:d2:21:fb:cb:3d:c7:ee:ab:36:89:ca:b2:1f:ad:
c3:ea:c4:59:34:21:e5:34:e2:3b:c0:7a:e2:d4:30:
bf:86:9b:d0:f4:5e:f4:38:2f:19:eb:31:a5:16:b0:
b3:c4:ee:5d:c8:62:df:cb:63:74:62:9e:e0:e7:15:
7e:cc:b2:55:16:50:45:7d:71:0d:49:b7:af:0a:f1:
46:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:05:71:6F:39:12:29:D4:81:F9:A5:25:D4:D1:40:AB:8E:C2:13:39
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8QVxbzkSKdSB-aUl1NFAq47CEzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.247.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:53:9c:12:d4:5b:72:66:0a:e3:e9:c7:19:c5:35:04:ee:68:
b9:83:6e:cb:52:e0:8c:b1:3e:a8:93:ef:93:4a:7f:78:b9:60:
fa:ee:cc:7e:6f:44:48:c5:15:73:d9:23:bf:cb:db:ba:8e:44:
57:fa:b6:6e:94:24:8b:4c:26:a3:86:d7:53:20:b4:50:f7:97:
bf:39:b0:12:94:48:ff:dc:45:0c:c5:2f:f9:cf:a4:d4:0e:98:
80:82:6c:ed:d9:6e:86:d4:96:6a:8d:7f:33:26:3f:dd:5e:09:
47:42:76:af:3b:a4:25:aa:58:2e:24:ba:96:2d:d0:aa:c8:0a:
eb:01:b4:0d:35:13:f7:10:10:13:cb:a7:2d:e1:44:81:06:2f:
1e:7b:4c:49:c3:11:6e:08:81:3c:da:de:08:e3:22:ba:6f:6f:
52:65:a7:c5:ab:b9:30:8d:93:f6:ee:62:d0:0f:d0:ab:97:33:
b5:a0:38:67:4a:b4:dd:aa:9b:83:c6:31:ce:dd:b6:60:7a:4a:
d7:2d:e5:98:42:b7:2b:46:50:61:a2:b2:27:56:20:f8:77:c7:
19:9f:03:dc:95:1e:e8:ee:cf:a1:32:0b:51:43:13:f1:01:18:
fc:09:b7:df:2d:cd:5d:ff:65:cb:5b:ca:c6:4e:1e:c5:3c:68:
3e:fd:d2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:27:17 2026 by rpki-client