Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/PzFBLhwupt67rZs22sro0qW6LiU.roa
File: PzFBLhwupt67rZs22sro0qW6LiU.roa (raw, json)
Hash identifier: cloOLTDUfD5P4E9pYuwBFajWpqd/ZNWh3QmRt2W5Bvo=
Subject key identifier: 3F:31:41:2E:1C:2E:A6:DE:BB:AD:9B:36:DA:CA:E8:D2:A5:BA:2E:25
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A08305C4F446B72E1ABC80C42E6264FC2F
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/PzFBLhwupt67rZs22sro0qW6LiU.roa
Signing time: Tue 08 Sep 2026 21:56:28 +0000
ROA not before: Tue 08 Sep 2026 21:56:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 13.143.219.0/24 maxlen: 24
31.77.252.0/24 maxlen: 24
179.254.72.0/24 maxlen: 24
179.254.74.0/24 maxlen: 24
179.254.77.0/24 maxlen: 24
179.254.79.0/24 maxlen: 24
179.254.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:83:05:c4:f4:46:b7:2e:1a:bc:80:c4:2e:62:64:fc:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 8 21:56:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f31412e1c2ea6debbad9b36dacae8d2a5ba2e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a7:6c:73:fb:6e:1d:a9:29:99:65:19:ab:83:
71:66:03:78:72:a3:11:cb:11:a0:98:5d:59:c9:65:
b0:b8:43:70:93:d8:f7:26:7e:7a:46:15:f3:2a:93:
44:c9:de:7f:a8:15:8b:cf:52:28:d5:19:51:90:b8:
30:6b:6b:db:a9:11:c0:ad:4e:0e:83:99:79:b4:cc:
b8:ed:8e:c7:96:4d:1e:f3:97:f8:34:1d:9a:6c:96:
8e:35:ab:a5:6e:e1:6a:50:09:2a:5a:d7:58:20:8d:
36:84:38:92:69:35:e4:2b:01:f3:42:65:f9:7f:13:
6a:32:67:06:db:60:0b:63:3b:de:1e:de:5c:18:da:
d4:a8:e8:3e:e6:89:92:c8:88:23:56:8b:1c:cd:09:
c1:d2:ca:97:c7:1c:78:fd:36:09:7c:8a:ce:27:74:
d1:2e:16:28:dd:cf:1d:94:18:37:90:a0:27:e4:73:
cd:d2:a6:fd:84:9a:c5:c7:b5:e4:35:15:a1:a3:82:
28:18:59:ef:41:a3:9a:52:42:a1:47:15:2d:4c:a4:
74:76:ec:71:d5:68:00:64:9b:00:a5:76:62:fd:96:
e9:83:b6:1f:30:33:a1:86:32:69:2c:4c:02:82:85:
f7:ec:42:79:03:eb:ff:28:47:8c:c4:d2:16:69:44:
8f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:31:41:2E:1C:2E:A6:DE:BB:AD:9B:36:DA:CA:E8:D2:A5:BA:2E:25
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/PzFBLhwupt67rZs22sro0qW6LiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.219.0/24
31.77.252.0/24
179.254.72.0/24
179.254.74.0/24
179.254.77.0/24
179.254.79.0/24
179.254.107.0/24
Signature Algorithm: sha256WithRSAEncryption
57:f1:41:18:19:32:f6:e5:09:f4:f9:01:e6:53:1f:3f:d4:5d:
c8:17:7a:33:e5:6e:3f:90:97:f9:a8:45:22:c6:48:f2:26:75:
16:bc:77:20:4a:9a:98:7e:dd:cb:6c:a8:0b:ce:58:66:1b:8a:
60:dd:ed:fb:89:f2:c8:2e:a6:aa:c7:e6:c0:07:1d:9c:c8:00:
f3:1c:99:09:a2:37:9e:81:f2:4c:3f:22:2e:87:8d:a4:aa:13:
32:a6:4d:16:09:8f:a0:7f:30:49:ba:c9:69:90:69:af:84:89:
c7:e2:b9:41:1a:00:50:a0:34:11:6f:40:a2:73:ed:f8:81:cf:
5a:a8:21:36:08:b9:7d:4b:df:e5:4c:da:56:d0:ff:b4:ce:cc:
cf:2d:07:41:bb:52:37:94:6e:b8:64:01:20:df:e6:79:9f:82:
5a:da:b5:28:49:59:9f:e6:de:68:0d:64:0a:be:b5:85:eb:5d:
6d:d1:7c:30:83:96:d4:44:6e:73:16:cd:43:8b:44:ce:3c:1c:
2f:8f:76:1a:72:ee:d4:95:ee:6e:ef:0f:1b:f6:a9:9c:af:a6:
a7:b9:bb:44:b0:ee:68:92:21:02:47:79:fd:c5:fc:c4:7c:72:
08:64:c7:c1:41:29:2d:72:2a:43:f4:ff:40:04:2a:ab:44:a7:
f7:f0:1c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:43:13 2026 by rpki-client