Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/XzrZa02p6RBQ2pOYyIG3R1J28LQ.roa
File: XzrZa02p6RBQ2pOYyIG3R1J28LQ.roa (raw, json)
Hash identifier: YEyS+N8ZSOC0p/3kmCPqCJHKAPf+iXOCKGtWAQSJsUQ=
Subject key identifier: 5F:3A:D9:6B:4D:A9:E9:10:50:DA:93:98:C8:81:B7:47:52:76:F0:B4
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A01C0118B00AC649BD9AAC9900C14FEC93
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/XzrZa02p6RBQ2pOYyIG3R1J28LQ.roa
Signing time: Wed 19 Aug 2026 21:50:28 +0000
ROA not before: Wed 19 Aug 2026 21:50:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218964
IP address blocks: 13.143.209.0/24 maxlen: 24
13.143.230.0/24 maxlen: 24
13.143.231.0/24 maxlen: 24
31.77.52.0/24 maxlen: 24
179.254.88.0/24 maxlen: 24
179.254.89.0/24 maxlen: 24
179.254.90.0/24 maxlen: 24
179.254.93.0/24 maxlen: 24
179.254.96.0/24 maxlen: 24
179.254.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1c:01:18:b0:0a:c6:49:bd:9a:ac:99:00:c1:4f:ec:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 19 21:50:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f3ad96b4da9e91050da9398c881b7475276f0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:ec:2f:10:eb:3f:43:9c:c2:51:05:c6:50:
7e:98:76:3c:ee:b8:d3:83:3f:0c:62:58:25:bc:be:
5f:c4:30:d9:4c:7f:01:7a:ff:07:75:5b:05:ee:ac:
95:89:e8:d7:ac:c1:ba:20:92:41:5d:19:98:95:90:
58:fd:51:8b:1d:7a:34:46:4c:3e:ac:4e:9b:38:73:
fd:70:2f:a8:49:fe:c5:a5:bd:f2:13:8c:07:fe:a0:
3e:50:af:c4:b5:79:ea:15:94:86:28:94:13:cd:ac:
30:d0:99:fa:c1:a1:ae:9d:22:2d:17:a0:69:13:08:
7b:27:b9:c2:3c:c9:bb:80:37:68:76:42:c2:34:0f:
79:7c:a5:c7:76:d7:64:b9:ad:6c:db:c2:d7:18:11:
38:7e:57:5c:c9:f6:e8:46:94:5a:ba:44:30:a7:b9:
2e:17:3a:ea:9d:c2:b9:53:52:de:4a:2b:81:a2:9b:
0e:03:2c:cb:17:86:78:aa:ff:6b:f3:12:1e:d2:24:
94:71:bb:63:6b:2b:57:ab:ad:5f:dd:bc:2a:93:d4:
f7:fa:7f:ee:97:83:0c:e2:0e:fb:0a:76:e1:80:5a:
ff:e1:09:2c:41:01:9a:82:af:f7:b5:47:db:f5:93:
8b:3f:4e:ff:0c:91:1e:3b:fa:43:36:b2:db:78:9f:
da:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3A:D9:6B:4D:A9:E9:10:50:DA:93:98:C8:81:B7:47:52:76:F0:B4
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/XzrZa02p6RBQ2pOYyIG3R1J28LQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.209.0/24
13.143.230.0/23
31.77.52.0/24
179.254.88.0-179.254.90.255
179.254.93.0/24
179.254.96.0/24
179.254.98.0/24
Signature Algorithm: sha256WithRSAEncryption
85:96:a0:f6:92:20:bf:f1:aa:21:2f:7c:cc:fd:6c:d9:62:38:
7d:bc:cc:eb:89:ff:91:50:34:09:7e:dc:89:41:b0:3a:e1:c6:
53:ed:07:f7:ae:aa:94:2b:b1:3f:49:81:30:ea:c8:32:b7:c7:
35:3e:61:44:fe:c8:71:eb:a8:8c:47:9f:51:95:1a:89:99:0b:
11:79:a3:a3:b6:cb:85:74:eb:67:74:32:b3:2e:8e:80:61:f9:
6e:ae:2c:a5:cd:29:c2:f0:14:ac:15:fd:88:eb:12:ff:c5:8e:
90:68:fc:62:ec:05:ab:f9:5c:e3:69:00:e3:c8:14:f6:04:c5:
9f:d8:db:b2:11:c6:29:ee:d1:d5:1b:a8:6b:86:64:2a:d7:c6:
6c:50:3d:8c:94:a3:97:98:17:b5:33:ac:05:c6:bb:df:d3:53:
17:a8:62:d1:60:d5:0d:5e:4b:39:fb:88:02:c4:67:69:16:1c:
2f:93:fd:a6:73:6c:10:99:c1:be:d1:05:df:9c:bc:df:b2:86:
20:e2:1e:e5:37:9d:8a:30:58:fc:eb:87:aa:a1:23:b3:23:27:
65:61:fc:d6:70:8d:f3:06:6b:b1:07:87:75:60:6b:07:c2:c8:
e1:b9:b7:23:5f:0e:9a:5c:19:2f:76:3e:f7:09:17:7e:ed:47:
1c:fd:5e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:21:07 2026 by rpki-client