Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Wdt2zeXPWzAjfo_AQBGDFdbXPxs.roa
File: Wdt2zeXPWzAjfo_AQBGDFdbXPxs.roa (raw, json)
Hash identifier: 3FfoBVgmZax22Nx2gP5BLwi6GEggUyIP5LWdkP5hnvk=
Subject key identifier: 59:DB:76:CD:E5:CF:5B:30:23:7E:8F:C0:40:11:83:15:D6:D7:3F:1B
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0A0CA9F7D0A22A8B542F1721A48828B09
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Wdt2zeXPWzAjfo_AQBGDFdbXPxs.roa
Signing time: Mon 14 Sep 2026 16:40:28 +0000
ROA not before: Mon 14 Sep 2026 16:40:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215102
IP address blocks: 13.143.246.0/24 maxlen: 24
31.77.0.0/24 maxlen: 24
31.77.139.0/24 maxlen: 24
201.10.80.0/24 maxlen: 24
201.10.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:ca:9f:7d:0a:22:a8:b5:42:f1:72:1a:48:82:8b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 14 16:40:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59db76cde5cf5b30237e8fc040118315d6d73f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ac:f1:f9:9a:42:21:7a:e3:01:14:5a:57:f1:
b6:36:5d:33:c9:45:2e:0a:43:10:ae:48:33:6e:71:
0c:cd:ad:74:c3:52:5d:6c:5a:8c:56:7b:26:b8:f1:
2c:52:09:f7:de:38:16:7a:ed:86:b4:5f:2b:02:db:
ed:72:03:22:45:a5:70:14:e5:f1:31:f3:bc:ad:54:
f3:4a:d3:be:75:e4:71:a9:56:e2:25:44:3b:b3:af:
57:d2:a8:f4:9c:79:c6:f7:3f:a4:18:a6:76:b8:d6:
02:a2:d0:3a:23:f0:ef:a9:48:b3:43:04:7a:a2:d9:
55:2b:f5:ce:9f:49:0c:6c:b9:41:c6:5e:94:82:dd:
59:67:97:18:fe:29:24:fc:c2:70:3f:cd:2a:29:b2:
08:4d:9b:c9:6c:15:d3:d3:fe:eb:45:a9:25:06:67:
84:a7:29:57:c7:4c:7e:46:32:ea:04:04:d4:8e:6a:
45:34:6a:6c:f3:47:1d:70:a2:4b:90:1b:07:fb:99:
19:85:74:53:7e:c0:58:66:0f:c3:c5:d1:09:da:49:
3d:c9:b7:7e:0f:99:a0:13:b8:9b:e0:ef:23:fd:0c:
9e:f3:16:6b:07:29:81:a0:43:64:32:76:1c:6f:49:
b9:43:14:80:56:5e:04:69:c1:92:3d:47:c0:61:54:
03:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DB:76:CD:E5:CF:5B:30:23:7E:8F:C0:40:11:83:15:D6:D7:3F:1B
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Wdt2zeXPWzAjfo_AQBGDFdbXPxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.246.0/24
31.77.0.0/24
31.77.139.0/24
201.10.80.0/24
201.10.87.0/24
Signature Algorithm: sha256WithRSAEncryption
94:e2:da:6c:70:a4:ed:14:8f:3e:f7:a2:cb:93:45:fa:2b:50:
e8:1b:88:79:c1:1a:e0:a2:6c:46:15:b7:dd:a6:5f:0f:46:dd:
84:67:a8:0e:c0:5b:ec:b9:94:6b:f6:b2:3a:71:02:d5:1c:6e:
f6:67:ef:e7:5b:c8:27:ac:7e:8a:8b:d8:da:29:3e:2a:1b:c8:
c8:9c:7b:32:3e:aa:17:2d:5a:28:2c:cd:1a:17:b9:71:b5:44:
51:a0:55:b4:8a:8f:9f:ae:4f:fb:06:9f:40:58:d3:bc:30:80:
df:d5:51:f9:5d:31:ec:ff:48:eb:b9:a6:d1:41:99:11:2f:54:
fb:01:42:53:ba:91:74:a1:17:cc:c8:fd:8d:29:62:03:1d:0e:
ad:7b:e0:8c:f0:80:14:80:c5:9e:fc:5a:0d:8d:f6:f5:5f:96:
ec:c4:82:ba:45:4d:fb:78:e4:a1:fb:bd:3c:64:88:5a:aa:0e:
2e:31:e4:46:ac:e1:04:20:e9:78:50:98:63:a8:2a:49:3c:7d:
ec:6f:16:4f:b8:6f:88:f8:c9:69:fe:c5:94:2b:d7:40:b1:82:
44:f8:48:0d:c9:82:e5:87:83:18:93:c6:eb:2c:d3:0c:96:12:
7c:91:43:35:58:36:4c:82:4e:d5:03:7d:64:2c:cd:37:22:53:
74:03:b1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:19 2026 by rpki-client