Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Pb3lh1bUzeUlzdVI89JkyozxFtg.roa
File: Pb3lh1bUzeUlzdVI89JkyozxFtg.roa (raw, json)
Hash identifier: gzATuBHjoHVjq6SfIQNNJCA+jajKb8BASKCRwOmmLEg=
Subject key identifier: 3D:BD:E5:87:56:D4:CD:E5:25:CD:D5:48:F3:D2:64:CA:8C:F1:16:D8
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F240300E47C172FFE4F7D33BC1CF76D36
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Pb3lh1bUzeUlzdVI89JkyozxFtg.roa
Signing time: Thu 02 Jul 2026 18:06:44 +0000
ROA not before: Thu 02 Jul 2026 18:06:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198585
IP address blocks: 13.143.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 05:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:24:03:00:e4:7c:17:2f:fe:4f:7d:33:bc:1c:f7:6d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 2 18:06:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3dbde58756d4cde525cdd548f3d264ca8cf116d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3c:92:7e:3d:b7:1f:1c:fc:35:31:28:ba:3c:
99:33:d6:f7:ec:82:38:d7:37:b2:d2:92:8e:60:9d:
b3:2e:30:53:b8:26:8c:78:c4:2d:c9:e8:e9:5e:19:
4b:b0:ad:5d:73:fd:49:e2:c3:e6:23:2e:a3:74:b9:
54:44:9b:96:fc:67:d0:41:af:14:21:b1:aa:7a:a1:
fe:54:e3:d1:1d:29:f8:66:cf:0d:79:b7:c0:56:11:
3c:75:73:e3:3c:93:20:6f:3e:7e:e1:73:56:7d:99:
9f:60:98:ab:a2:34:0f:09:ae:55:de:a0:4a:2d:bc:
04:b6:b6:53:2b:78:81:a3:ab:96:64:57:80:81:ef:
fb:5a:d2:35:35:32:79:fe:64:e8:b8:a3:97:aa:ff:
58:bd:14:65:86:06:f5:45:7d:db:42:4c:73:9a:22:
da:04:23:cd:1a:12:ee:2e:61:c3:ed:1d:ef:13:48:
42:b2:72:cc:2e:7c:d7:44:a6:60:13:88:13:e6:20:
d1:87:74:26:d5:7d:c0:fd:ce:d1:47:19:41:d6:1b:
99:c1:9b:77:29:0c:48:a5:21:0d:a3:e8:3b:65:a3:
19:70:6e:7b:2b:91:0f:7e:8f:3f:bb:2b:c8:90:7d:
d6:e0:6f:79:0d:bd:ac:67:1a:3c:43:6b:d7:68:8b:
56:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BD:E5:87:56:D4:CD:E5:25:CD:D5:48:F3:D2:64:CA:8C:F1:16:D8
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Pb3lh1bUzeUlzdVI89JkyozxFtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.255.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ae:4a:ce:ea:8c:b4:df:8e:7e:63:76:60:6a:09:e0:0e:83:
21:d3:49:14:b2:5d:b1:7e:cc:34:24:81:95:82:5e:83:97:68:
d2:9b:72:09:b4:7f:f3:d8:92:9e:fe:2d:59:d0:1e:ab:1d:f1:
77:46:15:62:8e:d7:eb:7f:6c:91:36:ea:ee:2e:0c:6a:37:cb:
02:8e:c7:a3:2d:dd:4d:db:40:21:5d:00:cd:c7:01:c0:e4:02:
48:81:1e:e9:f4:0b:5a:e2:d9:45:86:d5:55:be:76:2a:18:77:
62:97:5d:9d:1a:c6:2b:9e:8f:dd:08:09:57:29:fa:35:00:eb:
74:5e:c2:20:52:97:5c:d3:87:26:db:e8:b1:69:a4:91:7f:1f:
bf:48:07:30:86:3d:85:15:f2:99:e2:b6:44:a2:a3:33:43:03:
cd:23:0c:d8:c9:71:70:78:c9:ac:17:a6:21:e6:3f:2c:78:67:
68:9d:7d:93:05:07:c3:95:5a:35:6c:60:f7:bd:f1:23:2c:43:
be:4e:0c:e1:b5:46:3f:71:ce:64:07:22:e6:d6:25:b1:f9:37:
f4:21:02:61:92:22:d0:69:d4:e6:2a:67:5c:37:1a:42:ec:21:
a2:ac:00:2a:40:66:33:f6:db:bd:c9:e8:ba:6c:88:ef:8e:b0:
d2:27:58:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 14:10:26 2026 by rpki-client