Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Jp69Jy1w4SIEd5OU2OFfj3H9jiE.roa
File: Jp69Jy1w4SIEd5OU2OFfj3H9jiE.roa (raw, json)
Hash identifier: IsJh7Uog16ry1u4Q4rT9mzIIz2ILW1Y1eQX+vVvl/eU=
Subject key identifier: 26:9E:BD:27:2D:70:E1:22:04:77:93:94:D8:E1:5F:8F:71:FD:8E:21
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FFC00092D393D92BE2FA7B45F2B91BDE2
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Jp69Jy1w4SIEd5OU2OFfj3H9jiE.roa
Signing time: Thu 13 Aug 2026 16:41:28 +0000
ROA not before: Thu 13 Aug 2026 16:41:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219153
IP address blocks: 13.143.204.0/23 maxlen: 24
13.143.212.0/23 maxlen: 24
13.143.224.0/23 maxlen: 24
13.143.228.0/23 maxlen: 24
31.77.34.0/23 maxlen: 24
31.77.36.0/23 maxlen: 24
31.77.42.0/23 maxlen: 24
179.254.116.0/23 maxlen: 24
179.254.118.0/23 maxlen: 24
179.254.120.0/23 maxlen: 24
179.254.122.0/23 maxlen: 24
201.10.82.0/23 maxlen: 24
201.10.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fc:00:09:2d:39:3d:92:be:2f:a7:b4:5f:2b:91:bd:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 13 16:41:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=269ebd272d70e12204779394d8e15f8f71fd8e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:85:92:42:64:33:54:be:00:58:97:de:7f:58:
bc:1d:08:f4:ef:08:e9:79:3d:64:03:33:2d:ce:fd:
0c:2b:40:43:1b:18:83:b6:97:fa:be:2f:13:35:84:
f1:93:11:90:c7:8c:90:e5:ea:e0:92:0e:75:9b:82:
b2:ba:cd:4f:09:4c:9a:df:84:f9:78:cd:71:e9:b0:
4e:13:7f:ff:db:45:f0:d3:90:6f:04:9d:4b:f7:00:
11:26:de:1b:5c:55:71:f4:54:7c:ce:96:38:0c:4e:
a0:8f:e1:09:93:d2:c5:c6:6a:fa:42:9a:93:4f:0c:
86:21:04:33:71:7a:5b:cb:4e:60:13:f7:e4:a7:e0:
75:d6:29:bb:36:37:0c:54:2a:22:a3:89:f1:89:eb:
e3:ee:83:db:2a:a6:c2:78:05:ae:ad:64:6f:69:d1:
a0:44:28:70:cd:bd:d7:b7:a2:c5:df:90:0f:37:44:
d8:2a:63:d4:71:b9:e7:88:cd:f7:9a:58:e0:9e:29:
9d:4b:1a:0b:06:8e:76:2a:84:1c:31:b9:ed:81:6d:
ec:09:83:cc:eb:44:2b:4f:b9:1b:ac:3a:04:92:40:
46:29:19:03:36:d8:0c:7b:52:1a:fb:8c:08:2f:c3:
30:34:b5:96:e1:e8:c0:37:78:06:9d:ff:01:16:1d:
aa:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9E:BD:27:2D:70:E1:22:04:77:93:94:D8:E1:5F:8F:71:FD:8E:21
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Jp69Jy1w4SIEd5OU2OFfj3H9jiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.204.0/23
13.143.212.0/23
13.143.224.0/23
13.143.228.0/23
31.77.34.0-31.77.37.255
31.77.42.0/23
179.254.116.0-179.254.123.255
201.10.82.0/23
201.10.88.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:3d:06:b8:0e:01:dc:03:53:51:b9:06:3b:6a:71:66:cb:ee:
35:1d:20:59:bc:57:13:24:ae:7e:39:f0:65:41:d1:38:f9:70:
37:a6:c4:71:ee:9e:8e:80:1e:6f:b2:9b:3d:b6:d4:5e:db:cc:
22:a3:ee:21:d8:7a:0e:7f:2f:e0:ad:da:1e:13:a8:a0:53:f5:
0d:6a:3b:30:42:7c:2a:4b:64:fd:d8:97:db:1e:1c:d1:f6:ef:
79:ac:59:1f:cb:8e:bb:d7:ad:14:f3:79:27:fc:b6:2c:91:2c:
cf:29:84:6b:b5:75:8b:0b:73:9f:a3:48:a2:73:8f:bf:fa:a2:
50:26:9a:11:82:7f:7b:10:d1:f8:01:5f:2c:42:84:a3:e3:5a:
72:b0:e8:f9:2f:5d:2b:ba:e0:52:a0:60:3e:77:8d:ef:fd:59:
11:a1:45:60:a4:be:0f:5a:65:6f:3a:ed:60:20:5c:22:77:05:
39:72:89:92:ea:93:dd:a2:33:5f:1c:3c:df:51:aa:e1:d2:01:
eb:4f:15:9d:ea:f8:f6:06:6a:44:22:e1:f1:d4:b6:48:a5:a1:
de:c2:fb:83:54:6d:43:d6:1a:67:30:40:d9:a8:2d:04:5f:ac:
4a:84:cf:0b:ce:bf:a3:b1:a5:3e:ae:5c:6a:ac:f5:7a:51:63:
03:f3:27:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:45:36 2026 by rpki-client