Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/DywbrQrBA2GMYC_NCCJ2h4RyuRY.roa
File: DywbrQrBA2GMYC_NCCJ2h4RyuRY.roa (raw, json)
Hash identifier: b+Eu/hAqyzqVuLcKdTasWsvu13TsH8Ban5rJbRlsylk=
Subject key identifier: 0F:2C:1B:AD:0A:C1:03:61:8C:60:2F:CD:08:22:76:87:84:72:B9:16
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FAEE8BA70F026380C0743110ED3AB3A0F
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/DywbrQrBA2GMYC_NCCJ2h4RyuRY.roa
Signing time: Wed 29 Jul 2026 17:25:15 +0000
ROA not before: Wed 29 Jul 2026 17:25:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44547
IP address blocks: 13.143.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:e8:ba:70:f0:26:38:0c:07:43:11:0e:d3:ab:3a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 29 17:25:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f2c1bad0ac103618c602fcd082276878472b916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6a:76:8e:88:b9:11:ab:0b:68:ff:4c:cb:08:
b3:93:4b:ed:22:ba:78:bb:88:47:15:93:65:30:7d:
fa:7d:73:3f:23:21:ad:75:84:56:50:1a:04:87:f3:
be:07:70:b5:1f:a7:47:cc:e5:83:83:8e:8b:51:4f:
5c:21:1b:d2:74:e1:14:02:83:f2:c6:3b:f9:0a:28:
66:33:2c:95:4a:20:a2:ac:ec:5c:70:ae:05:8d:5d:
06:bf:3b:2e:9f:86:c3:81:31:58:fa:81:a3:ff:2a:
c9:70:c8:f5:2d:2f:3f:0f:ba:8d:f7:8f:ee:b5:09:
25:fd:eb:95:bd:55:8a:f6:f6:5f:3c:6d:f8:58:59:
6f:b1:4b:f0:62:af:76:09:89:21:09:26:bc:62:a5:
09:bd:cd:ff:3e:d1:e7:e7:df:dd:ef:ac:71:cb:15:
fc:91:59:25:06:ca:06:d3:c7:01:bc:05:15:fa:d9:
40:db:5f:43:fa:1c:b0:ff:c9:d4:1f:f5:24:d6:fa:
bc:da:2c:b0:ac:ec:36:a1:25:8b:e0:0f:2b:ff:94:
fb:10:75:e7:f8:9b:03:bd:1f:fa:62:c5:f6:9a:0a:
8a:25:d6:5f:8a:14:34:fb:75:1c:2a:4c:fd:ec:b3:
1e:6b:d4:46:73:5b:0f:4d:77:f5:e0:e3:e0:fc:88:
04:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2C:1B:AD:0A:C1:03:61:8C:60:2F:CD:08:22:76:87:84:72:B9:16
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/DywbrQrBA2GMYC_NCCJ2h4RyuRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.223.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ff:b7:0c:62:a4:f2:8a:3f:fe:1d:dc:28:ae:df:ea:a1:76:
ee:f5:4c:41:7a:13:20:f4:1c:de:c5:d2:aa:00:e7:2a:96:1e:
a9:ca:86:e9:d7:f0:3d:67:6b:b5:57:69:0b:68:65:d5:37:79:
4c:8a:a6:b4:b7:0d:16:a8:df:e5:4a:3c:db:c9:4f:95:4c:4e:
9a:f5:00:f2:ea:c8:c4:30:60:eb:5a:d3:30:49:6d:37:a4:1f:
c5:f6:9d:35:eb:6d:60:4b:17:b0:2c:4f:7b:fc:9e:74:70:3f:
32:44:2c:bb:fc:b0:87:d4:db:6b:9b:3f:7c:12:97:13:95:8e:
98:f9:24:b1:fd:59:91:c8:7b:61:97:48:5f:27:98:bf:a7:b1:
e7:10:ce:6d:63:79:03:c5:c9:42:5a:ab:1a:24:ee:ed:de:e3:
de:02:67:d3:25:af:c1:44:9b:e1:f5:f5:e2:13:13:d1:52:f7:
e8:2c:b3:b3:86:22:b9:27:f6:5a:d1:6f:53:d8:4f:b1:8d:77:
62:80:31:dd:43:48:e5:c3:90:38:ae:84:2e:9e:91:83:02:96:
82:a7:5f:3c:e4:d8:ae:b6:c2:69:1d:e6:b4:72:27:42:d8:e8:
b4:3f:1b:e2:69:5a:c3:15:f1:2c:45:7c:e0:5b:3d:09:44:09:
de:eb:2b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:51:43 2026 by rpki-client