Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/D8aeGhsjVabJN3nA064qFLK4Rsw.roa
File: D8aeGhsjVabJN3nA064qFLK4Rsw.roa (raw, json)
Hash identifier: GO3zYgYt/Li7cDaR9BmFU9IBnJ+aonW/oBvfSAW4I50=
Subject key identifier: 0F:C6:9E:1A:1B:23:55:A6:C9:37:79:C0:D3:AE:2A:14:B2:B8:46:CC
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F4CEF63A36BA08ECDCF923D69DE9ED18D
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/D8aeGhsjVabJN3nA064qFLK4Rsw.roa
Signing time: Fri 10 Jul 2026 16:49:44 +0000
ROA not before: Fri 10 Jul 2026 16:49:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213316
IP address blocks: 13.143.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4c:ef:63:a3:6b:a0:8e:cd:cf:92:3d:69:de:9e:d1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 10 16:49:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fc69e1a1b2355a6c93779c0d3ae2a14b2b846cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1f:da:2c:30:73:a8:ef:d8:27:7f:f6:af:d9:
99:1f:36:dd:fd:f2:f9:6b:b5:59:5e:4d:c8:db:c2:
fb:c5:e2:06:dc:30:0b:0d:89:49:a3:a7:10:2f:ba:
51:ee:b4:59:b8:8c:f2:66:d5:e2:10:82:f0:f5:bc:
b7:52:27:a4:35:0f:8f:84:9c:49:ce:94:c6:d2:3e:
6e:25:82:b9:16:3c:d0:55:6f:ee:fd:94:16:11:c3:
aa:bd:20:2b:21:60:b9:cc:6e:58:3f:4b:5e:c7:0a:
58:1d:dc:d9:21:fa:30:e5:50:70:02:f5:95:d5:c2:
bb:87:65:dd:64:ec:dc:69:2a:ec:fb:a8:92:ca:16:
90:65:d8:67:8c:1e:e4:79:36:76:3e:68:eb:f8:a0:
5f:0d:e1:48:bc:92:c4:1b:18:39:d2:52:a5:da:1c:
d0:7a:e5:d8:e2:45:11:fd:1d:68:bd:8a:d3:7e:75:
9a:eb:f5:e6:38:9e:cc:ac:b9:c2:aa:2e:00:96:c1:
47:38:25:1b:f7:9f:65:14:72:9f:73:8b:27:fa:8e:
a3:a7:b5:d3:5d:48:03:8f:6a:da:72:ae:72:57:9f:
44:76:21:6a:e0:57:32:4d:ec:66:1b:a7:b8:42:3f:
ac:dc:2b:0b:a3:96:72:81:93:79:d8:69:47:99:a0:
49:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C6:9E:1A:1B:23:55:A6:C9:37:79:C0:D3:AE:2A:14:B2:B8:46:CC
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/D8aeGhsjVabJN3nA064qFLK4Rsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.241.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:a9:a6:a6:ee:ef:90:df:2e:9e:76:dc:dc:f1:d4:d8:b0:bc:
cf:67:43:99:7c:2c:f9:19:03:24:a4:55:97:47:87:8a:a8:71:
66:25:7e:68:33:e0:e4:e7:d5:0a:18:7b:8f:0e:15:5c:94:2a:
a4:1a:32:f9:6b:bc:35:e1:d3:6e:8e:4e:2c:5c:c9:4e:f7:37:
95:25:28:71:a3:58:8c:42:41:72:84:21:d5:06:d5:0f:7a:c0:
78:e9:5d:ff:fb:f2:5b:b0:ae:4a:a7:9d:52:ff:a4:c2:1a:5a:
ba:e9:fd:9c:74:48:fa:83:33:73:49:b8:b2:8d:65:c1:26:61:
c1:9d:86:df:72:15:67:b0:e0:40:73:8a:2c:2f:25:67:6f:fd:
c2:09:e5:27:7c:5b:89:bd:c3:4d:a6:64:96:e4:10:02:9a:20:
78:5f:d8:63:56:80:b9:16:9f:0f:18:e4:24:21:7d:ed:b8:6e:
8e:2b:21:4e:0d:3a:fb:1e:7a:e7:27:02:c5:34:22:ed:7a:32:
c8:ef:19:a8:b9:32:85:7b:e2:00:76:80:b2:d2:c9:a0:7f:df:
48:f6:9a:aa:f8:8a:81:51:be:0e:05:0c:c7:87:7f:cf:8a:83:
57:77:6b:b4:df:28:b4:db:81:50:61:76:ab:c1:ab:e4:96:11:
8b:20:07:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9M72Oja6COzc+SPWnentGNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNzEwMTY0OTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmM2OWUxYTFiMjM1NWE2YzkzNzc5YzBkM2FlMmExNGIyYjg0NmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2R/aLDBzqO/YJ3/2r9mZHzbd/fL5
a7VZXk3I28L7xeIG3DALDYlJo6cQL7pR7rRZuIzyZtXiEILw9by3UiekNQ+PhJxJ
zpTG0j5uJYK5FjzQVW/u/ZQWEcOqvSArIWC5zG5YP0texwpYHdzZIfow5VBwAvWV
1cK7h2XdZOzcaSrs+6iSyhaQZdhnjB7keTZ2Pmjr+KBfDeFIvJLEGxg50lKl2hzQ
euXY4kUR/R1ovYrTfnWa6/XmOJ7MrLnCqi4AlsFHOCUb959lFHKfc4sn+o6jp7XT
XUgDj2racq5yV59EdiFq4FcyTexmG6e4Qj+s3CsLo5ZygZN52GlHmaBJIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA/GnhobI1WmyTd5wNOuKhSyuEbMMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvRDhhZUdoc2pWYWJKTjNuQTA2NHFGTEs0UnN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADY/xMA0G
CSqGSIb3DQEBCwUAA4IBAQA7qaam7u+Q3y6edtzc8dTYsLzPZ0OZfCz5GQMkpFWX
R4eKqHFmJX5oM+Dk59UKGHuPDhVclCqkGjL5a7w14dNujk4sXMlO9zeVJShxo1iM
QkFyhCHVBtUPesB46V3/+/JbsK5Kp51S/6TCGlq66f2cdEj6gzNzSbiyjWXBJmHB
nYbfchVnsOBAc4osLyVnb/3CCeUnfFuJvcNNpmSW5BACmiB4X9hjVoC5Fp8PGOQk
IX3tuG6OKyFODTr7HnrnJwLFNCLtejLI7xmouTKFe+IAdoCy0smgf99I9pqq+IqB
Ub4OBQzHh3/PioNXd2u03yi024FQYXarwavklhGLIAfh
-----END CERTIFICATE-----
Generated at Mon Jul 13 12:48:11 2026 by rpki-client