Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Q-q6GESgPFLYiysuqqBZgbivXoA.roa
File: Q-q6GESgPFLYiysuqqBZgbivXoA.roa (raw, json)
Hash identifier: lQyf/SZOYsOrdkjG/kVnXjZET0o+0e7Owaic860AXic=
Subject key identifier: 43:EA:BA:18:44:A0:3C:52:D8:8B:2B:2E:AA:A0:59:81:B8:AF:5E:80
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F9AB7AA3E19F5663B1437D1E954F6C690
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Q-q6GESgPFLYiysuqqBZgbivXoA.roa
Signing time: Sat 25 Jul 2026 19:19:15 +0000
ROA not before: Sat 25 Jul 2026 19:19:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219153
IP address blocks: 13.143.204.0/23 maxlen: 24
13.143.212.0/23 maxlen: 24
13.143.224.0/23 maxlen: 24
13.143.228.0/23 maxlen: 24
179.254.116.0/23 maxlen: 24
179.254.118.0/23 maxlen: 24
179.254.120.0/23 maxlen: 24
179.254.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9a:b7:aa:3e:19:f5:66:3b:14:37:d1:e9:54:f6:c6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 25 19:19:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43eaba1844a03c52d88b2b2eaaa05981b8af5e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7b:0d:c0:d2:e2:3a:3a:5d:f9:7a:a0:33:76:
40:96:16:64:8c:8a:35:9b:4e:4f:de:b7:71:5a:3e:
d2:fb:bf:87:57:58:ff:c5:3b:31:9d:85:1f:0b:fe:
bc:fd:80:6d:1f:d5:03:f0:2f:a8:03:83:90:d8:28:
68:d6:2d:79:bb:69:b5:0c:5d:a3:95:96:75:d3:a4:
d9:7f:9b:e8:f9:cc:5c:02:ce:7b:d5:4f:97:ca:36:
aa:ac:b4:61:49:61:9a:52:b0:ed:62:c2:33:de:05:
23:f3:00:e0:50:95:57:02:f2:1f:41:07:c7:49:5d:
8b:43:58:07:cf:34:0d:09:be:66:fa:25:6f:5a:12:
c1:1e:37:2b:8f:84:85:25:e8:58:b3:8d:87:82:bf:
31:cb:b3:86:60:7f:83:14:f1:2a:dc:f9:3e:53:2e:
3f:01:a5:6d:d8:bb:5d:1e:be:bf:8c:c7:59:8c:1c:
9d:b8:8d:cd:c7:ec:9c:ab:02:c6:65:2b:db:d7:7b:
68:69:2f:8c:a1:a5:65:0e:f8:88:aa:fa:63:d5:c0:
66:af:9f:02:06:72:83:2f:c4:a6:f7:84:8f:f4:82:
48:42:f1:a5:b1:ce:69:e1:28:73:b0:fa:f9:00:14:
8d:2e:7f:46:ed:17:4a:78:d5:f9:ec:d4:43:47:7d:
9a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EA:BA:18:44:A0:3C:52:D8:8B:2B:2E:AA:A0:59:81:B8:AF:5E:80
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Q-q6GESgPFLYiysuqqBZgbivXoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.204.0/23
13.143.212.0/23
13.143.224.0/23
13.143.228.0/23
179.254.116.0-179.254.123.255
Signature Algorithm: sha256WithRSAEncryption
5d:2d:3c:3b:0c:5c:b7:a4:96:e0:5c:0c:2e:8b:6c:b8:67:c7:
3a:cf:a2:55:27:87:b3:10:f0:83:05:0f:4e:7e:5a:48:05:92:
17:b9:32:bf:ca:6b:af:6d:02:9a:3e:e8:77:39:8e:f3:17:4c:
24:f7:57:24:db:16:37:15:ae:4f:36:19:28:dc:cd:49:b2:4c:
8f:69:cd:ed:2c:9f:93:48:b1:4f:17:b7:bd:51:34:1b:f1:9b:
da:d0:2d:bf:9f:cb:2d:7a:64:b7:8d:11:37:29:06:a4:4d:aa:
80:ee:dd:90:bb:42:06:4d:27:0e:5f:fe:a1:3e:9a:a4:61:68:
00:0d:5c:bc:c1:bf:d6:91:b6:ff:f7:ae:b9:fd:fd:94:fa:d9:
b1:fd:5e:a9:13:55:a5:9a:f2:04:1c:ea:3d:d3:e3:b1:88:1c:
00:4d:43:c3:36:15:d4:b3:ba:38:15:eb:d2:82:b0:2a:4a:8a:
0f:59:fa:f2:79:a8:be:44:cf:ec:e6:0e:f2:fa:ba:36:03:c1:
71:a1:0d:24:f0:90:89:00:3f:5d:83:53:fd:cd:d6:48:e4:8a:
fc:c8:7b:2b:12:87:bd:61:0b:9b:d8:da:93:d2:8a:f4:c8:70:
86:26:56:05:15:0f:e5:ac:bb:cd:02:55:54:8b:cc:cd:15:2e:
62:76:e0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:54:24 2026 by rpki-client