Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/VosGmw4_I0siFanxgCdtFoQKoTU.roa
File: VosGmw4_I0siFanxgCdtFoQKoTU.roa (raw, json)
Hash identifier: rbgpjHb49+S2NXep4MfFljMszGZUpThxCXlmWUW9pnU=
Subject key identifier: 56:8B:06:9B:0E:3F:23:4B:22:15:A9:F1:80:27:6D:16:84:0A:A1:35
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A10E22B00199BE4BD2B1DF5FEECA6B2B7F
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/VosGmw4_I0siFanxgCdtFoQKoTU.roa
Signing time: Mon 05 Oct 2026 22:15:16 +0000
ROA not before: Mon 05 Oct 2026 22:15:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197283
IP address blocks: 13.143.164.0/24 maxlen: 24
13.143.165.0/24 maxlen: 24
31.76.31.0/24 maxlen: 24
31.76.101.0/24 maxlen: 24
179.198.49.0/24 maxlen: 24
191.217.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:22:b0:01:99:be:4b:d2:b1:df:5f:ee:ca:6b:2b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 5 22:15:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=568b069b0e3f234b2215a9f180276d16840aa135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:46:ca:f3:65:42:a6:6d:b4:bf:1b:9b:09:87:
c6:4e:69:f0:13:a8:04:fb:de:e5:5e:04:a7:cf:c4:
8d:ac:ad:bb:d9:5f:19:d0:e5:ec:ba:90:ac:5f:be:
3a:9c:f6:dc:f9:1e:1e:a9:36:7d:35:f6:14:b3:35:
d2:a3:60:4f:bf:c5:51:15:ad:2c:e6:73:b1:00:96:
8b:a5:b1:16:ae:95:96:f5:37:53:ba:e9:d7:74:24:
b1:38:3b:53:79:19:ed:42:80:0b:4d:47:b7:0a:45:
77:52:81:3b:12:2b:88:b1:12:51:c5:08:5d:6a:61:
24:e0:7e:6c:82:8a:f3:7e:51:82:55:15:1d:9f:c2:
ca:62:13:3d:4b:76:3b:b2:bc:4e:5c:bb:47:d6:04:
64:f6:b8:b1:c4:a5:ef:96:38:11:64:ab:d8:4a:5f:
1f:fb:26:d1:dd:89:e8:11:a7:37:e9:50:6a:8a:e8:
6d:33:b7:5a:f0:e2:1b:be:af:fc:24:af:42:12:44:
dc:19:38:e2:81:9b:0a:24:b0:6b:33:f8:c1:7d:be:
d0:20:e1:6e:c4:a8:47:9a:ea:7f:f1:3f:a8:db:0e:
df:f8:d7:dc:b7:7e:f2:fb:28:d8:c4:76:fd:0d:6d:
5d:93:9e:bc:1b:cf:de:5c:54:dc:a7:64:7b:7b:9a:
05:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8B:06:9B:0E:3F:23:4B:22:15:A9:F1:80:27:6D:16:84:0A:A1:35
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/VosGmw4_I0siFanxgCdtFoQKoTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.164.0/23
31.76.31.0/24
31.76.101.0/24
179.198.49.0/24
191.217.238.0/24
Signature Algorithm: sha256WithRSAEncryption
14:77:98:ba:a5:4e:69:2e:a8:61:c5:94:74:a8:0d:df:1e:90:
df:ad:7e:0e:95:09:9c:1c:bd:8c:be:4f:0b:d1:bb:a7:d6:c5:
6e:ce:b2:8a:5b:6a:d2:40:33:e4:d0:c4:3a:08:db:dd:6c:90:
7d:63:70:79:59:88:af:12:b8:08:13:84:f4:d4:8a:12:d3:4b:
ab:da:63:a5:af:47:08:86:1e:23:2c:ee:4e:3b:71:e8:43:b3:
45:8b:d5:3f:dd:a8:89:a8:80:53:e5:07:1c:ac:a5:90:f0:38:
f8:5e:64:8e:aa:d6:21:ac:ae:11:63:4a:36:fb:0a:8d:b4:77:
e9:76:b0:29:83:43:02:b4:18:5b:10:8c:04:5e:24:40:d4:be:
74:01:35:82:92:5b:75:df:74:57:18:36:3e:23:fd:39:5f:37:
7d:1d:b0:61:a2:28:b2:a4:f8:3a:92:f8:5a:86:47:a2:4d:76:
53:ee:aa:1c:f2:e8:62:23:4e:6f:8a:1a:a7:2e:b3:bf:44:3d:
2e:ae:dc:e4:2b:b3:9e:d1:1a:0c:88:62:c3:54:1d:f9:58:3a:
60:a1:25:d4:8b:95:72:a7:0b:c1:66:5d:7c:6f:59:06:d2:f3:
69:1d:4c:95:78:97:b1:de:f5:b4:0a:3c:d5:e9:b0:f0:5b:92:
ee:0d:94:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:28:58 2026 by rpki-client