Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/VeQIo9ww_HbbpzG4QHBa3ZtgafE.roa
File: VeQIo9ww_HbbpzG4QHBa3ZtgafE.roa (raw, json)
Hash identifier: jU3/M+gbSE7OZrTvfoXXQ4as9P3Kok+61G1JuZfAtRU=
Subject key identifier: 55:E4:08:A3:DC:30:FC:76:DB:A7:31:B8:40:70:5A:DD:9B:60:69:F1
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A09175C17065C581F1AD3150E63BB3A03F
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/VeQIo9ww_HbbpzG4QHBa3ZtgafE.roa
Signing time: Fri 11 Sep 2026 17:13:28 +0000
ROA not before: Fri 11 Sep 2026 17:13:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47516
IP address blocks: 13.143.223.0/24 maxlen: 24
31.77.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 16:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:75:c1:70:65:c5:81:f1:ad:31:50:e6:3b:b3:a0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 11 17:13:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55e408a3dc30fc76dba731b840705add9b6069f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a1:20:32:6d:65:81:db:4f:ee:61:4d:be:ee:
a3:b5:b5:55:7d:92:db:3e:4c:e6:ab:a5:70:61:2d:
9d:fa:b4:70:da:a9:5e:3c:85:d9:b8:f8:78:88:fa:
60:bd:af:27:1e:2a:5a:be:df:93:fc:c4:c5:70:03:
99:09:65:cd:16:ca:15:3b:10:f8:27:df:ed:3e:42:
54:25:48:6e:b0:bc:1d:c5:d3:21:a9:d6:8a:48:61:
f3:25:02:75:bb:07:0b:2f:8e:8e:85:4a:55:d0:bb:
27:9e:e5:da:09:09:1c:9d:66:f0:b8:13:5c:da:6d:
a5:8c:b2:ff:69:a4:8c:53:d7:0f:2b:b4:97:9f:20:
2d:4c:50:3e:ad:9d:41:92:3a:5a:b3:16:c9:05:21:
2f:10:44:42:13:c1:e7:6e:d0:d4:c6:06:72:9f:fb:
ff:e5:97:31:00:f4:9c:59:0c:96:6f:98:6a:78:3e:
e2:e0:cc:c7:de:87:fa:ef:42:62:06:64:d1:f0:08:
e9:d3:21:dd:29:1d:1a:02:9d:2c:cc:72:a4:77:54:
81:ae:0e:be:84:eb:77:99:bb:23:91:40:7f:f9:15:
ca:c8:c4:6d:4e:75:76:44:f2:31:89:0d:b3:82:cc:
85:24:67:ee:a0:80:91:0b:96:78:cd:f9:d8:25:23:
11:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E4:08:A3:DC:30:FC:76:DB:A7:31:B8:40:70:5A:DD:9B:60:69:F1
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/VeQIo9ww_HbbpzG4QHBa3ZtgafE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.223.0/24
31.77.69.0/24
Signature Algorithm: sha256WithRSAEncryption
64:8d:96:29:d1:2b:b8:3a:87:ce:93:10:22:fa:c0:52:25:fb:
74:5d:12:0f:db:76:87:05:84:77:d0:9d:3a:e9:af:24:46:63:
62:8a:7a:48:9b:f5:ca:04:0c:9c:96:1f:07:0f:39:f6:a0:01:
64:73:ab:f8:3d:03:13:38:e5:92:b0:50:c8:e1:47:05:91:d4:
91:87:d5:6d:23:1f:56:01:9b:8d:f6:7d:37:bd:34:1e:a0:1b:
dd:00:d4:6b:da:aa:51:a6:f1:cc:52:66:29:69:ee:fe:66:4c:
10:4d:a5:05:72:9a:2c:22:92:bf:d0:e9:89:ba:c4:e2:99:0f:
10:7d:b2:59:0d:c8:e0:64:23:90:77:9f:89:d0:e5:79:cd:ce:
e4:06:b7:b1:89:ce:82:be:e7:6a:68:ac:a2:77:97:c6:b6:12:
04:05:1d:b0:aa:94:a0:22:fb:27:dd:1b:17:e4:2a:70:c2:65:
83:bf:a3:91:54:01:d0:41:de:e3:d4:ed:28:58:15:c3:05:1e:
dd:a5:9d:ce:9c:f4:55:8f:ab:7b:bc:5c:9a:58:7c:fd:ab:78:
10:21:ef:a1:b9:e0:ad:7b:01:ef:4c:01:46:89:3c:13:03:f3:
c9:ba:86:09:ba:6d:fa:9b:35:1c:96:40:d8:b8:2d:c1:92:fa:
52:3e:d8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 02:19:21 2026 by rpki-client