Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/SJW2d4B2XprIJA4cvjR2oX4HSaw.roa
File: SJW2d4B2XprIJA4cvjR2oX4HSaw.roa (raw, json)
Hash identifier: 2KdTo7JlI6fgjlOuML7ZguRjrDqtUqQomExSyD2sQEs=
Subject key identifier: 48:95:B6:77:80:76:5E:9A:C8:24:0E:1C:BE:34:76:A1:7E:07:49:AC
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A13FF3B9432FF2B1C913FD2B96F77CD77B
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/SJW2d4B2XprIJA4cvjR2oX4HSaw.roa
Signing time: Thu 15 Oct 2026 14:24:59 +0000
ROA not before: Thu 15 Oct 2026 14:24:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219010
IP address blocks: 13.143.144.0/24 maxlen: 24
13.143.148.0/24 maxlen: 24
179.236.142.0/24 maxlen: 24
179.253.189.0/24 maxlen: 24
179.254.105.0/24 maxlen: 24
201.58.159.0/24 maxlen: 24
201.58.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:f3:b9:43:2f:f2:b1:c9:13:fd:2b:96:f7:7c:d7:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 15 14:24:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4895b67780765e9ac8240e1cbe3476a17e0749ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:dd:34:b2:b8:11:97:8b:43:5a:23:59:3a:
f6:4a:90:b5:d9:11:e8:d0:9b:56:43:80:74:eb:09:
e1:34:ff:d7:23:2d:c9:77:38:ad:03:6c:de:f5:4e:
7e:3e:a2:86:c4:e3:3d:94:d2:09:74:90:1d:f9:67:
d3:03:d0:80:56:db:f0:f0:ba:a6:2e:41:e4:87:25:
f0:66:02:ca:90:4c:d7:99:cc:df:e4:d1:37:a1:67:
a8:04:31:06:bb:3f:f4:f7:1e:35:79:26:95:64:2e:
74:1b:eb:2c:9c:03:36:54:18:dc:86:3c:6e:25:ce:
67:12:73:13:97:94:e8:1d:bb:47:1f:eb:c7:04:e3:
c1:da:18:8e:b2:09:5d:0e:c2:d6:4c:21:03:bb:0b:
71:b0:57:51:50:26:47:98:92:ff:68:67:1e:75:e8:
3e:5c:a8:e6:32:a3:20:99:4c:43:bc:b2:44:7e:ee:
a7:0e:a6:17:40:e4:22:b8:57:0f:0d:e2:ad:c8:60:
03:08:83:ce:b3:52:a7:1b:ad:4c:97:5f:15:7b:99:
d2:f0:62:83:b5:a1:9b:73:b8:0d:77:d1:28:49:a4:
f0:ef:71:92:83:fe:4e:98:cf:55:c7:dc:fc:ae:da:
08:c4:48:ba:67:85:2a:07:22:6b:4e:3d:20:79:36:
08:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:95:B6:77:80:76:5E:9A:C8:24:0E:1C:BE:34:76:A1:7E:07:49:AC
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/SJW2d4B2XprIJA4cvjR2oX4HSaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.144.0/24
13.143.148.0/24
179.236.142.0/24
179.253.189.0/24
179.254.105.0/24
201.58.159.0/24
201.58.171.0/24
Signature Algorithm: sha256WithRSAEncryption
55:05:10:3d:cf:5c:92:da:f0:6f:1b:b0:91:6d:f6:8f:a1:7f:
c0:fe:08:2f:2c:c5:c9:51:b1:8c:f3:e9:dc:43:c2:9b:8f:07:
e4:2d:4f:75:e9:16:03:9e:a9:e0:d1:29:d7:2c:d6:85:86:3f:
44:56:b8:ff:48:a8:4a:ec:79:bb:01:f8:97:2e:6f:8b:3a:a1:
51:bf:72:a5:69:ac:77:78:86:3f:da:cb:b6:11:1d:84:9b:d6:
5e:1b:07:d3:2f:2b:19:6c:e5:b8:26:9a:ec:14:8a:d7:ec:bc:
5d:b0:55:fb:d8:41:36:5c:b7:e1:71:78:8d:af:2f:2a:a9:d4:
41:57:4b:65:cd:39:1d:f0:3b:97:5e:43:bb:d0:6f:ff:20:bb:
b0:c3:97:aa:a2:7b:55:5f:5f:fc:c8:0b:bd:a6:df:2d:1b:f1:
d9:c5:bf:b2:86:d8:f2:de:c4:b3:99:e0:d3:0e:22:36:1c:a6:
27:51:af:af:f4:76:a7:ca:4e:99:9f:ca:ec:44:d2:94:53:81:
fd:e9:17:c9:fa:c5:48:54:8c:f2:9c:a5:97:41:41:ab:be:f2:
59:a6:a7:6c:3a:96:f7:9d:c6:7f:79:65:65:f6:bc:a2:65:b6:
0f:ea:92:41:1f:ab:e8:7b:74:ad:04:1a:87:ab:0d:4f:79:30:
01:67:75:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:46:51 2026 by rpki-client