Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/F-VKhWRIIRh588f7RbOsSmrxZdA.roa
File: F-VKhWRIIRh588f7RbOsSmrxZdA.roa (raw, json)
Hash identifier: pr0+65NdCI6nP3cx2Il6cou6QG6pCFnIDp+2pmoWxjQ=
Subject key identifier: 17:E5:4A:85:64:48:21:18:79:F3:C7:FB:45:B3:AC:4A:6A:F1:65:D0
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A17E62CD6CC8FFB4640BF16EC8A9C276AD
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/F-VKhWRIIRh588f7RbOsSmrxZdA.roa
Signing time: Tue 27 Oct 2026 17:22:46 +0000
ROA not before: Tue 27 Oct 2026 17:22:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218964
IP address blocks: 13.143.209.0/24 maxlen: 24
13.143.230.0/24 maxlen: 24
13.143.231.0/24 maxlen: 24
31.77.3.0/24 maxlen: 24
31.77.4.0/24 maxlen: 24
31.77.5.0/24 maxlen: 24
31.77.52.0/24 maxlen: 24
31.77.74.0/24 maxlen: 24
179.254.76.0/24 maxlen: 24
179.254.78.0/24 maxlen: 24
179.254.88.0/24 maxlen: 24
179.254.89.0/24 maxlen: 24
179.254.90.0/24 maxlen: 24
179.254.93.0/24 maxlen: 24
179.254.96.0/24 maxlen: 24
179.254.98.0/24 maxlen: 24
201.8.75.0/24 maxlen: 24
201.8.76.0/24 maxlen: 24
201.8.77.0/24 maxlen: 24
201.8.78.0/24 maxlen: 24
201.8.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:62:cd:6c:c8:ff:b4:64:0b:f1:6e:c8:a9:c2:76:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 27 17:22:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17e54a856448211879f3c7fb45b3ac4a6af165d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:24:8a:26:98:7d:d6:d0:94:10:94:8f:54:13:
e6:c5:8d:87:2c:7b:df:7b:4a:62:df:f6:4d:35:a1:
f9:f7:22:48:f7:0d:b1:d6:e7:26:51:50:1a:cf:6d:
ed:1b:1c:a8:73:b1:fb:cd:ff:45:de:20:b4:b4:b0:
40:11:22:b6:a1:74:a1:1c:82:16:af:50:8a:20:75:
a0:3c:4e:b0:12:b9:19:4c:42:39:78:d3:d8:3a:1c:
69:dc:2c:f1:94:c2:2e:96:06:59:36:fa:20:07:71:
b9:3e:1f:3c:86:33:3f:1d:a4:ac:de:67:14:27:d2:
56:bd:38:a5:ee:74:fa:02:71:b2:31:30:48:f8:c2:
4f:5c:63:dc:47:42:53:53:a5:88:50:cf:5e:f4:98:
9f:f8:2a:1f:ee:6b:4a:bf:72:10:a6:1e:55:81:8e:
be:d8:61:b3:40:b6:0e:4c:55:f0:a3:ec:ef:f1:47:
8f:e4:ed:64:5b:33:a7:0a:8c:eb:e9:90:91:03:59:
5a:e4:fe:45:c8:a4:26:6f:de:84:d9:57:03:2c:11:
f5:8d:05:02:93:e9:d4:c4:57:ce:55:99:4b:6a:49:
8a:f4:b2:86:4f:7c:b0:ba:6b:c1:ff:b4:80:f7:4a:
53:90:0f:0b:4a:fa:6a:d1:e7:94:96:50:ef:0f:ae:
43:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E5:4A:85:64:48:21:18:79:F3:C7:FB:45:B3:AC:4A:6A:F1:65:D0
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/F-VKhWRIIRh588f7RbOsSmrxZdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.209.0/24
13.143.230.0/23
31.77.3.0-31.77.5.255
31.77.52.0/24
31.77.74.0/24
179.254.76.0/24
179.254.78.0/24
179.254.88.0-179.254.90.255
179.254.93.0/24
179.254.96.0/24
179.254.98.0/24
201.8.75.0-201.8.79.255
Signature Algorithm: sha256WithRSAEncryption
b8:d8:b8:6f:b7:55:d4:7f:81:df:9e:47:3e:b3:31:97:3a:22:
27:57:52:cb:ec:b3:c8:a5:92:5a:4a:62:a1:99:a5:d4:03:71:
fc:94:7d:7d:59:0f:bb:f9:d3:b9:0c:b4:32:e7:6f:62:40:f0:
35:2e:f7:0f:09:4e:df:94:13:40:2f:51:eb:03:00:6b:bf:5a:
a1:85:d9:f9:91:1e:f5:9c:67:a5:7b:d5:86:b2:70:4b:18:18:
18:4b:8b:04:42:2f:76:d8:fd:5b:25:61:38:d2:a3:76:d3:db:
1a:7a:21:b6:2d:ec:ec:5a:39:13:59:97:a0:03:e4:6f:53:73:
c3:9f:cf:65:b4:f7:cf:f1:c8:ae:09:c8:9d:c4:bf:78:a6:20:
3f:f2:f9:93:50:70:1a:f4:16:28:f6:94:78:bb:20:44:67:b6:
94:a2:7b:46:c8:82:b3:25:be:5e:8f:6d:37:8d:cf:2d:61:fd:
ac:02:21:65:4c:04:6e:6d:75:43:02:65:ff:d3:f6:68:10:15:
3f:18:63:b2:d7:c6:6f:1f:1c:c4:e3:bd:63:49:b8:a3:a7:6f:
6a:33:af:64:6a:77:8e:cd:c5:01:70:50:4f:73:3e:78:7d:b1:
ff:4c:53:f0:29:d2:10:a0:2a:02:b3:99:7f:d7:9f:3d:16:fe:
ce:34:12:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:41:47 2026 by rpki-client