Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TGRLgukce_6ObZGxLwA8DCA_RCM.roa
File: TGRLgukce_6ObZGxLwA8DCA_RCM.roa (raw, json)
Hash identifier: QIsAJnHwTRlkgUhm4x6I7z3QQBwnFuWq85vZerqfPJI=
Subject key identifier: 4C:64:4B:82:E9:1C:7B:FE:8E:6D:91:B1:2F:00:3C:0C:20:3F:44:23
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FDDCAF1188A653A4FB1929C73F9F1E06F
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TGRLgukce_6ObZGxLwA8DCA_RCM.roa
Signing time: Fri 07 Aug 2026 19:54:52 +0000
ROA not before: Fri 07 Aug 2026 19:54:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201021
IP address blocks: 13.143.211.0/24 maxlen: 24
13.143.218.0/24 maxlen: 24
13.143.226.0/24 maxlen: 24
13.143.238.0/24 maxlen: 24
13.143.250.0/24 maxlen: 24
31.77.58.0/24 maxlen: 24
185.176.95.0/24 maxlen: 24
201.10.81.0/24 maxlen: 24
201.10.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dd:ca:f1:18:8a:65:3a:4f:b1:92:9c:73:f9:f1:e0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 7 19:54:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c644b82e91c7bfe8e6d91b12f003c0c203f4423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6e:1c:1c:aa:86:a2:ae:59:c4:ca:a0:93:cb:
4a:94:93:8b:a6:83:fa:44:73:21:8f:76:11:8f:ba:
da:2b:0b:ec:5f:2b:3e:37:eb:f5:be:48:96:72:d2:
ed:4e:a3:1a:41:00:5f:79:d3:73:31:9a:58:d0:57:
e1:e8:be:0c:58:25:8c:40:b9:21:9d:38:64:2a:66:
c2:ee:70:71:d5:67:9f:ff:44:2a:3c:af:bb:f7:d6:
6e:57:9d:02:f6:99:d4:d7:39:50:3c:d9:70:29:2b:
31:ef:ec:32:b3:ab:3f:5d:3b:48:ad:d0:ac:af:7b:
c8:08:5a:ba:f0:07:f4:fc:e7:8d:c4:88:7c:06:ec:
cf:07:f8:aa:70:db:55:99:8d:4c:af:ec:b3:c7:31:
15:f0:34:d8:63:f5:47:19:27:71:8f:3e:08:5f:ff:
0c:47:df:f6:58:6e:49:9d:18:e2:26:fb:03:6c:48:
aa:a9:f8:46:53:d9:4a:01:16:aa:fc:b8:63:37:22:
75:b9:5e:1f:25:5d:d3:bb:0d:8d:02:29:af:c4:78:
e6:8f:1f:df:08:b4:df:d3:8e:12:11:1b:0c:b5:8d:
9f:ea:50:72:9b:6b:b1:8a:a3:80:43:37:5f:ad:bf:
65:5a:29:ba:49:77:b0:4b:16:ec:de:52:81:3a:60:
bc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:64:4B:82:E9:1C:7B:FE:8E:6D:91:B1:2F:00:3C:0C:20:3F:44:23
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TGRLgukce_6ObZGxLwA8DCA_RCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.211.0/24
13.143.218.0/24
13.143.226.0/24
13.143.238.0/24
13.143.250.0/24
31.77.58.0/24
185.176.95.0/24
201.10.81.0/24
201.10.95.0/24
Signature Algorithm: sha256WithRSAEncryption
90:34:31:c8:43:ab:59:1f:ea:1f:25:47:2c:a3:73:b2:42:0f:
e8:b6:f5:9b:de:8f:a9:c0:7a:5a:dc:c4:da:76:4d:21:e5:b9:
09:02:ba:f5:15:7a:eb:e2:2a:35:0f:c9:a7:a8:fb:93:f6:a2:
46:09:e9:68:12:d2:cd:29:ce:5c:81:9a:d8:f6:42:79:be:9d:
98:15:4b:2b:51:0f:20:d5:46:28:6e:2d:68:00:d8:b1:79:84:
51:52:75:bd:51:f8:c1:2e:93:fb:ac:a0:12:0e:32:76:a0:e1:
04:48:a6:ef:81:3c:6c:41:53:40:23:a6:9b:a6:95:d0:5e:b2:
b4:b1:e9:ec:ec:08:22:74:07:aa:1d:60:0c:9b:eb:b5:bb:e1:
f2:19:d6:b2:35:01:62:e4:ee:0e:7d:4d:84:70:0e:af:00:82:
6a:49:03:9e:ec:db:48:70:f8:84:e3:22:8f:3d:e6:aa:35:0b:
27:a9:af:93:d5:0c:9a:ae:25:ef:a1:5b:b5:68:8f:c6:35:28:
a9:02:6d:2b:4f:53:4c:bf:17:94:01:35:94:be:a1:f4:39:17:
ec:e3:ef:49:0b:eb:24:84:d9:b3:5b:b9:a8:fb:44:d8:5e:aa:
9c:8a:5b:21:be:a2:8b:dc:92:31:c3:0f:52:0b:eb:99:ac:88:
a3:62:8c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:15 2026 by rpki-client