Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/WAbKdLCnWyUl4q_yW6okANLTKNI.roa
File: WAbKdLCnWyUl4q_yW6okANLTKNI.roa (raw, json)
Hash identifier: Sirl+gO1g/HPEAohEcL+8qY5GROg8hZy0eWRFTGYmhc=
Subject key identifier: 58:06:CA:74:B0:A7:5B:25:25:E2:AF:F2:5B:AA:24:00:D2:D3:28:D2
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0200450DB0F33AEA824F160113B3FAFF7
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/WAbKdLCnWyUl4q_yW6okANLTKNI.roa
Signing time: Thu 20 Aug 2026 16:32:28 +0000
ROA not before: Thu 20 Aug 2026 16:32:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51248
IP address blocks: 13.143.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:04:50:db:0f:33:ae:a8:24:f1:60:11:3b:3f:af:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 20 16:32:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5806ca74b0a75b2525e2aff25baa2400d2d328d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:28:b7:c0:d0:07:ad:6c:d2:2b:bb:c9:b6:eb:
4c:81:21:8e:6e:3d:15:b6:a8:68:9c:d4:a9:87:20:
bf:ed:d1:c3:46:22:2a:7e:09:29:09:ae:56:d6:2e:
2e:7b:f5:37:b4:8c:a0:30:15:2c:ab:d1:98:a7:83:
03:a6:ed:34:59:da:c2:e3:7c:33:81:3e:8f:ee:bd:
4e:34:78:86:09:66:98:de:6b:f5:de:b7:83:c0:97:
a0:af:eb:09:83:f0:ea:8c:cb:78:a2:8d:90:ed:49:
b9:63:c0:4d:cb:37:8a:dd:b8:28:5c:28:90:9d:ff:
54:56:d2:02:13:52:bf:1b:16:ce:7e:ba:b3:b6:2b:
24:1c:02:53:fe:08:e6:43:45:83:d5:67:72:a5:54:
f1:4b:89:69:b4:1a:f2:c4:23:cb:70:9c:14:f0:c4:
6f:4b:12:3d:f2:f1:70:3d:a0:54:d6:d8:50:e9:0a:
96:bf:51:fe:76:1a:46:22:57:89:b4:d5:d3:5e:fa:
e5:75:db:26:76:dc:0e:47:07:80:92:00:92:d5:59:
18:de:62:84:4d:62:fd:ac:56:d1:9c:28:9b:c2:3a:
15:8e:ce:d5:b4:06:79:4b:38:74:e7:10:45:1b:92:
b2:09:52:da:45:82:05:43:b1:66:29:5a:88:49:36:
ec:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:06:CA:74:B0:A7:5B:25:25:E2:AF:F2:5B:AA:24:00:D2:D3:28:D2
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/WAbKdLCnWyUl4q_yW6okANLTKNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.234.0/24
Signature Algorithm: sha256WithRSAEncryption
82:3f:f6:9c:4c:36:fb:61:a2:d3:13:8f:79:9f:48:89:f3:cc:
af:88:f8:63:f5:76:c0:a0:f8:e7:3f:ef:fb:d4:7d:40:3f:5d:
6f:c2:00:a5:71:e8:67:30:86:1c:ca:ce:42:7d:60:93:1a:47:
92:5a:b4:8e:ed:37:f0:87:e9:67:ea:be:fa:87:23:9d:cf:86:
d7:03:51:fa:e3:17:4a:d0:85:06:a6:0a:2e:14:d9:44:f0:10:
ec:21:26:1f:9b:1f:2b:9f:89:bd:c2:93:6d:5b:1d:b4:72:d2:
43:f1:4e:b7:fe:80:3e:37:4e:f0:88:45:0e:13:43:5e:55:c5:
42:7f:25:c0:8e:a3:7f:b7:01:54:dd:7e:d4:dc:36:b2:84:b5:
51:d7:f7:bf:be:ec:5f:67:e8:28:cc:9b:0a:11:12:5f:94:fa:
81:06:54:85:61:8d:e7:ff:26:43:5f:17:58:d4:99:f6:ce:86:
f5:86:8c:33:5a:c8:17:fd:e8:3b:61:38:90:14:3a:63:18:52:
f5:1d:33:59:85:78:be:02:37:a9:9c:f6:a9:52:15:c9:f8:bd:
57:47:af:d6:24:4b:40:24:46:25:4f:8f:b4:c1:28:a8:8d:23:
42:7a:bb:47:3d:1d:64:d6:ee:d2:0f:85:57:09:dc:eb:4e:5c:
b8:e9:5c:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAgBFDbDzOuqCTxYBE7P6/3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwODIwMTYzMjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODA2Y2E3NGIwYTc1YjI1MjVlMmFmZjI1YmFhMjQwMGQyZDMyOGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyii3wNAHrWzSK7vJtutMgSGObj0V
tqhonNSphyC/7dHDRiIqfgkpCa5W1i4ue/U3tIygMBUsq9GYp4MDpu00WdrC43wz
gT6P7r1ONHiGCWaY3mv13reDwJegr+sJg/DqjMt4oo2Q7Um5Y8BNyzeK3bgoXCiQ
nf9UVtICE1K/GxbOfrqztiskHAJT/gjmQ0WD1WdypVTxS4lptBryxCPLcJwU8MRv
SxI98vFwPaBU1thQ6QqWv1H+dhpGIleJtNXTXvrlddsmdtwORweAkgCS1VkY3mKE
TWL9rFbRnCibwjoVjs7VtAZ5Szh05xBFG5KyCVLaRYIFQ7FmKVqISTbsFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFgGynSwp1slJeKv8luqJADS0yjSMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvV0FiS2RMQ25XeVVsNHFfeVc2b2tBTkxUS05JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADY/qMA0G
CSqGSIb3DQEBCwUAA4IBAQCCP/acTDb7YaLTE495n0iJ88yviPhj9XbAoPjnP+/7
1H1AP11vwgClcehnMIYcys5CfWCTGkeSWrSO7Tfwh+ln6r76hyOdz4bXA1H64xdK
0IUGpgouFNlE8BDsISYfmx8rn4m9wpNtWx20ctJD8U63/oA+N07wiEUOE0NeVcVC
fyXAjqN/twFU3X7U3DayhLVR1/e/vuxfZ+gozJsKERJflPqBBlSFYY3n/yZDXxdY
1Jn2zob1howzWsgX/eg7YTiQFDpjGFL1HTNZhXi+AjepnPapUhXJ+L1XR6/WJEtA
JEYlT4+0wSiojSNCertHPR1k1u7SD4VXCdzrTly46Vwx
-----END CERTIFICATE-----
Generated at Fri Sep 18 16:27:10 2026 by rpki-client