Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/F8zBdNiXxDFuwMDeKYixd4Rm6PY.roa
File: F8zBdNiXxDFuwMDeKYixd4Rm6PY.roa (raw, json)
Hash identifier: Mb0noteLfWk/j8sarC52FMjJ0XrdZk5Yt52hHJaNGJU=
Subject key identifier: 17:CC:C1:74:D8:97:C4:31:6E:C0:C0:DE:29:88:B1:77:84:66:E8:F6
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F2EA5C9F55074314AF63756268FC412F4
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/F8zBdNiXxDFuwMDeKYixd4Rm6PY.roa
Signing time: Sat 04 Jul 2026 19:40:44 +0000
ROA not before: Sat 04 Jul 2026 19:40:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202831
IP address blocks: 13.143.134.0/24 maxlen: 24
31.77.232.0/24 maxlen: 24
144.31.222.0/24 maxlen: 24
150.241.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2e:a5:c9:f5:50:74:31:4a:f6:37:56:26:8f:c4:12:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 4 19:40:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17ccc174d897c4316ec0c0de2988b1778466e8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7d:0f:30:82:45:d1:03:7a:aa:b4:d5:c3:5a:
4e:61:8f:44:05:19:97:d3:9a:68:48:0d:52:06:1a:
2b:1d:b6:3d:08:ac:56:b5:19:09:c3:9a:51:1d:d4:
08:2e:9f:6a:b4:c1:23:15:fe:5c:8c:ee:ff:1b:32:
e1:64:5e:fa:b1:c4:ff:e8:e6:c0:71:ee:5c:b4:9b:
ef:d3:2c:68:ed:1b:2e:8a:b6:a9:83:27:18:14:e8:
61:f4:1a:e5:d3:c7:a9:d1:8d:fe:77:82:09:92:0c:
ff:89:0a:61:19:23:7b:af:fe:32:ae:29:4f:21:f4:
15:bc:22:34:f2:c0:99:81:a7:4a:a4:10:3d:0b:9f:
21:62:48:6a:62:53:e1:c8:7d:11:3d:dd:7b:ba:74:
1e:10:00:8e:f7:13:60:72:09:35:3f:32:d3:2e:ec:
3c:65:31:5c:f8:11:e7:c6:c8:3d:96:cc:bc:d4:45:
10:4c:76:04:92:34:90:f9:6d:00:0c:a5:a4:35:db:
15:9f:85:81:2f:a5:3d:fc:a8:28:aa:52:47:ea:9c:
4b:4f:7b:d7:f6:6e:3e:58:24:e4:4a:87:11:4f:de:
43:3f:c8:ba:98:ba:5d:39:7d:bd:70:88:4e:7b:76:
d3:d3:b8:74:ee:ce:db:52:47:c8:d4:39:ba:8f:26:
05:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CC:C1:74:D8:97:C4:31:6E:C0:C0:DE:29:88:B1:77:84:66:E8:F6
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/F8zBdNiXxDFuwMDeKYixd4Rm6PY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.134.0/24
31.77.232.0/24
144.31.222.0/24
150.241.85.0/24
Signature Algorithm: sha256WithRSAEncryption
25:55:70:79:11:e3:b6:0a:8b:3b:bd:53:45:d2:10:80:8c:a6:
ac:2b:ac:7a:e5:8f:3c:98:47:33:bb:26:cb:f4:b9:35:26:4a:
88:0f:12:31:12:70:9f:c2:4c:04:b6:a4:bf:19:79:ef:37:91:
e1:51:85:ba:7b:67:d2:88:23:6f:78:80:16:13:97:01:e0:4b:
05:52:07:59:a0:8e:13:6e:4a:39:f8:b1:e5:fa:70:f8:84:5a:
51:04:1f:54:73:1d:5c:10:53:e5:e1:da:f3:44:2e:0c:1a:cf:
4f:87:c7:db:12:8f:e7:ae:4b:9b:22:01:5d:05:ee:1b:03:92:
32:e2:6d:4a:07:d2:0c:4c:18:20:7f:42:e5:f0:80:c9:45:c4:
a9:2a:a0:bd:7a:c0:38:62:ff:11:3e:7b:b6:05:14:f2:1d:75:
20:85:1e:c3:d3:b5:db:5f:86:5f:73:b3:e0:72:fd:0f:97:04:
43:48:91:71:ce:8f:4f:64:43:02:fa:78:32:0e:8e:44:78:d4:
71:33:06:eb:56:06:92:5f:f1:40:d2:6b:01:dc:b5:c7:d2:cc:
24:cb:5f:1e:8e:95:26:81:8a:8e:2f:22:f8:df:45:bd:81:bb:
79:c1:2e:41:31:ab:5e:59:35:a5:6a:f1:a3:3d:c6:25:ed:0b:
ed:73:56:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:35 2026 by rpki-client