Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/UNeFT40voZ1n_z7U7ptxrZV9tEQ.roa
File: UNeFT40voZ1n_z7U7ptxrZV9tEQ.roa (raw, json)
Hash identifier: ijNxfDqySybbwZmClNHWudmdm1HsNGXQ5jceTw82U4U=
Subject key identifier: 50:D7:85:4F:8D:2F:A1:9D:67:FF:3E:D4:EE:9B:71:AD:95:7D:B4:44
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A062D1A4778F4724CFA971BCCCEF3B20F3
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/UNeFT40voZ1n_z7U7ptxrZV9tEQ.roa
Signing time: Wed 02 Sep 2026 15:51:41 +0000
ROA not before: Wed 02 Sep 2026 15:51:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215761
IP address blocks: 13.143.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:d1:a4:77:8f:47:24:cf:a9:71:bc:cc:ef:3b:20:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 2 15:51:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50d7854f8d2fa19d67ff3ed4ee9b71ad957db444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7d:19:93:e4:9e:e9:83:44:58:56:e8:f7:23:
94:13:8a:1f:a4:61:69:c1:2d:4b:ba:65:43:a9:5c:
fa:a1:a2:d9:da:68:ba:9c:78:3a:51:e1:11:84:37:
d7:13:44:0b:aa:e4:04:e4:70:cb:1a:41:19:15:08:
9e:b1:98:46:83:34:62:bd:20:c7:f6:86:bd:7b:2c:
f7:7f:90:cb:20:27:78:22:a4:8c:70:d9:69:3d:e7:
15:14:36:ea:02:88:bf:20:d2:66:42:32:61:f6:e5:
2e:bf:b5:8a:8a:5b:18:2a:0b:ca:41:67:d4:53:f5:
d1:e3:7e:26:d3:0a:ce:16:e8:9b:08:6f:55:4a:14:
28:43:7b:4f:a7:e3:1b:9a:da:39:d5:0b:8a:26:48:
8e:5b:ea:4d:7e:28:92:eb:0f:c4:cb:40:03:bd:af:
91:27:47:8b:c7:7a:61:2a:59:1d:f9:6d:c3:e2:0f:
10:31:19:63:d8:bf:fe:f1:1a:24:b5:db:a0:89:f4:
92:81:74:ae:c2:88:a9:41:b1:22:91:1d:d1:ab:65:
49:1a:97:4c:b2:37:fb:3e:b3:f1:cb:27:b5:91:63:
5d:ca:1e:bd:e1:38:dc:78:98:4a:f3:b5:27:7d:71:
33:07:98:43:74:ac:7e:ae:68:b9:f4:32:33:e1:3a:
86:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D7:85:4F:8D:2F:A1:9D:67:FF:3E:D4:EE:9B:71:AD:95:7D:B4:44
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/UNeFT40voZ1n_z7U7ptxrZV9tEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.222.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:c0:4b:44:72:25:03:67:a3:7e:f5:48:a3:18:08:fd:e7:b6:
ea:ac:d9:cf:d4:8e:7c:fc:40:41:00:da:17:d1:bf:a5:94:0a:
4d:1c:32:23:9c:b0:b5:31:fb:71:cb:7a:3d:41:e3:ca:68:30:
b1:b2:ad:51:45:16:3c:3c:73:0a:c2:e3:37:42:d6:d2:16:83:
fd:82:d0:82:74:c6:96:09:72:e2:74:61:9f:02:90:92:97:ea:
e6:89:79:20:43:d2:14:0e:b6:34:a9:64:e8:4f:c6:b1:1a:29:
9c:8e:b8:ee:76:a3:99:7c:2a:22:26:6f:7b:a6:6f:42:35:5b:
87:72:7d:3a:9c:4e:81:8b:6e:f2:d8:c9:e6:9d:53:4d:db:08:
b1:3e:b1:1d:1e:f8:c3:80:e7:8a:ac:fc:71:9e:bc:60:a6:78:
f1:b2:8a:52:aa:c8:66:17:25:e8:73:ff:35:28:a3:0c:0a:cb:
39:48:f8:51:8c:06:c4:e8:6b:32:63:64:19:d5:47:38:1f:7b:
47:56:c7:f9:1f:94:40:42:88:2b:b3:60:c8:55:f2:56:54:2e:
a7:a0:48:5f:37:5e:61:77:03:4a:0e:ca:2f:92:4a:e2:1f:e7:
74:72:b9:67:ce:53:f8:a6:b1:8e:a5:d2:f2:a8:e0:1d:bb:e5:
82:f4:fe:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:46 2026 by rpki-client