Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9aSHqZh3PVugONWA8gREUW8bkXE.roa
File: 9aSHqZh3PVugONWA8gREUW8bkXE.roa (raw, json)
Hash identifier: t2VGXq7JSgPFOlNAvuen30LEp/JI+VUJhfk4kD/iWdY=
Subject key identifier: F5:A4:87:A9:98:77:3D:5B:A0:38:D5:80:F2:04:44:51:6F:1B:91:71
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0113D5BF15B3AEEBB461D6EF5F223A850
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9aSHqZh3PVugONWA8gREUW8bkXE.roa
Signing time: Mon 17 Aug 2026 19:40:28 +0000
ROA not before: Mon 17 Aug 2026 19:40:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215620
IP address blocks: 13.143.254.0/24 maxlen: 24
31.77.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:11:3d:5b:f1:5b:3a:ee:bb:46:1d:6e:f5:f2:23:a8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 17 19:40:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5a487a998773d5ba038d580f20444516f1b9171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4b:60:d4:61:13:cf:89:39:fe:c7:6b:f0:fc:
fc:46:93:f2:4c:f8:e6:bd:a8:e8:7a:cf:16:b1:72:
42:02:7d:19:d6:1a:5d:3d:b2:77:cc:f5:2d:43:bd:
75:a7:b5:4b:50:00:70:ff:37:40:90:7e:7a:3a:03:
66:92:1d:51:21:56:60:3f:0a:d9:c5:8d:6a:70:1b:
12:76:ff:2c:2d:7e:02:e3:d0:ca:fc:89:82:1f:ce:
f1:65:32:03:87:01:e0:e1:8e:65:1a:86:5e:e6:13:
f4:68:a4:47:6e:84:45:02:cc:d4:d7:51:f7:fe:aa:
e4:e8:7c:c7:e0:0e:f9:13:4c:c9:e5:0e:f9:7a:db:
37:67:ea:91:ba:b5:25:12:8b:d2:3a:ad:c4:ed:4f:
59:ca:ca:fe:e0:e9:0c:21:47:59:c0:b4:84:79:68:
e7:3f:70:3d:65:71:e6:58:39:3c:1f:eb:90:92:81:
5a:92:70:ec:da:51:e0:ca:e5:75:ac:22:b8:4f:4e:
0c:ec:9c:67:ff:f8:9d:3d:ce:14:08:fe:52:37:a3:
67:20:70:5e:1b:8c:0b:5d:21:b4:27:fa:f6:cf:ba:
ae:4a:23:3a:5f:51:88:f0:3c:32:ef:49:0f:bf:9e:
31:9e:07:c7:85:f3:b1:25:91:db:73:94:6f:c4:73:
d9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A4:87:A9:98:77:3D:5B:A0:38:D5:80:F2:04:44:51:6F:1B:91:71
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9aSHqZh3PVugONWA8gREUW8bkXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.254.0/24
31.77.171.0/24
Signature Algorithm: sha256WithRSAEncryption
96:df:e6:af:90:7a:65:f6:3e:c5:10:8d:2b:ac:cf:4e:ca:e5:
c2:a3:08:b0:2a:d2:78:2a:29:f2:ce:05:95:f9:8d:f9:a3:46:
c1:1b:5a:ec:83:46:a2:bb:12:77:ac:8f:af:85:64:2b:3f:4c:
54:f5:32:3f:9a:35:58:ea:00:47:ad:1b:88:b8:3f:28:5b:b2:
9e:f8:08:8c:fa:72:c9:61:31:95:6b:0f:72:6f:04:03:08:8e:
cb:89:00:14:fc:04:f0:1e:9c:47:18:2a:a8:7a:ad:d3:51:5e:
ca:e4:b8:27:35:11:c8:5a:ca:f9:8a:b3:95:50:eb:0c:c0:44:
4e:5b:e8:12:9d:11:45:7c:e0:b2:27:81:8b:d6:68:46:9b:c2:
1b:f1:10:3b:0a:ae:8c:bd:29:fa:80:ed:ba:10:46:1a:a5:0e:
9c:bd:46:13:d4:dd:90:5e:3b:03:cb:bd:21:49:63:57:fa:15:
53:31:7a:47:f1:65:92:99:fd:74:ec:a2:82:cf:ac:70:17:47:
d8:e5:00:de:6a:03:d9:30:52:be:51:91:97:80:ed:2b:1c:44:
b5:46:00:d2:d4:2b:60:5c:fb:c9:d6:68:9d:14:ce:ed:50:31:
ba:69:eb:19:83:9d:da:bd:5c:ff:ee:52:f4:55:35:e5:67:60:
cf:8e:11:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:13:37 2026 by rpki-client