Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_TFoGq18fbrtYIBiz-jPCOK2imE.roa
File: _TFoGq18fbrtYIBiz-jPCOK2imE.roa (raw, json)
Hash identifier: EhPKdeOuZ3Dlobyq7SSCSub6yXUXX1yVYGmgzplS63s=
Subject key identifier: FD:31:68:1A:AD:7C:7D:BA:ED:60:80:62:CF:E8:CF:08:E2:B6:8A:61
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A077F812BD4DA1F5CC5D8982126C9D79F0
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_TFoGq18fbrtYIBiz-jPCOK2imE.roa
Signing time: Sun 06 Sep 2026 18:25:41 +0000
ROA not before: Sun 06 Sep 2026 18:25:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218964
IP address blocks: 13.143.209.0/24 maxlen: 24
13.143.230.0/24 maxlen: 24
13.143.231.0/24 maxlen: 24
31.77.3.0/24 maxlen: 24
31.77.4.0/24 maxlen: 24
31.77.5.0/24 maxlen: 24
31.77.52.0/24 maxlen: 24
31.77.74.0/24 maxlen: 24
179.254.76.0/24 maxlen: 24
179.254.78.0/24 maxlen: 24
179.254.88.0/24 maxlen: 24
179.254.89.0/24 maxlen: 24
179.254.90.0/24 maxlen: 24
179.254.93.0/24 maxlen: 24
179.254.96.0/24 maxlen: 24
179.254.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:77:f8:12:bd:4d:a1:f5:cc:5d:89:82:12:6c:9d:79:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 6 18:25:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd31681aad7c7dbaed608062cfe8cf08e2b68a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:cc:ee:70:3e:5a:44:d8:6e:8c:19:a6:fb:
50:4a:a0:d4:27:b5:fe:3e:73:53:8c:f0:fe:25:3a:
7d:23:21:d6:c2:fe:5c:a6:7c:14:c9:c1:af:98:34:
41:c1:60:11:64:fe:82:9b:46:fb:ff:ef:c3:c6:21:
fd:0b:40:f8:61:32:e7:58:70:99:d1:3b:4b:33:c0:
8e:b0:76:0b:3b:47:0b:82:3a:ca:d3:f4:a4:5f:8a:
8e:cc:91:db:0a:72:1f:89:64:d6:e0:a4:df:0e:5e:
12:9d:6e:b2:d9:2e:4b:5c:ed:68:9a:c1:f5:2a:9b:
17:44:01:e4:eb:fa:c4:ca:f7:98:a7:81:3b:58:f2:
17:cf:55:ac:7c:1e:80:06:22:ae:40:bf:7d:ef:47:
b3:f9:f2:d6:08:ca:6a:64:2b:33:4c:d9:59:ab:02:
3d:61:21:d9:64:2d:ef:c2:9a:1e:3a:37:df:3c:01:
be:21:88:e6:f6:f4:18:16:c0:fa:a6:74:42:ba:b2:
a6:9c:ed:1c:22:8b:47:40:bc:82:ff:03:b8:9f:bf:
b7:b6:91:ba:34:7e:c5:e1:81:8d:a4:d2:c4:03:1f:
c2:eb:f5:5c:5f:d0:22:6b:fd:64:39:d2:d3:16:83:
86:6f:ac:f2:0d:72:65:51:75:41:d3:84:ac:cf:ca:
cf:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:31:68:1A:AD:7C:7D:BA:ED:60:80:62:CF:E8:CF:08:E2:B6:8A:61
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_TFoGq18fbrtYIBiz-jPCOK2imE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.209.0/24
13.143.230.0/23
31.77.3.0-31.77.5.255
31.77.52.0/24
31.77.74.0/24
179.254.76.0/24
179.254.78.0/24
179.254.88.0-179.254.90.255
179.254.93.0/24
179.254.96.0/24
179.254.98.0/24
Signature Algorithm: sha256WithRSAEncryption
31:ff:26:d3:59:69:8c:f9:40:c8:a5:d6:11:6a:d8:ca:81:4b:
6f:89:60:bc:2d:a2:d3:83:00:fa:c7:0d:b1:c0:fc:18:ab:3c:
ac:71:bf:03:ee:27:6f:be:69:a9:e3:59:b3:28:b7:ba:92:fd:
9b:db:2d:ff:08:a8:64:3b:fb:b7:7b:62:bb:bc:67:11:0f:4b:
e9:5b:0e:ab:38:bc:bc:67:5f:73:55:98:b1:1e:20:b8:6b:c0:
8f:70:cb:ce:79:ef:cb:d2:07:e2:88:ac:20:44:2f:00:b5:90:
0a:2d:bf:69:2a:49:2a:1e:68:03:44:c4:9a:75:3b:8f:8f:66:
e2:3d:c0:cc:4e:97:54:85:53:f3:26:09:a7:47:02:a0:6b:2b:
f5:f8:f2:27:e2:e1:3f:df:62:28:21:78:3e:26:88:b9:dd:ab:
c2:0f:8c:f7:a0:d7:b0:ba:90:ad:e5:dc:f4:d5:90:90:3b:72:
68:d6:bc:fc:c9:f0:c7:0b:0a:fc:20:de:b6:4f:dd:84:d4:07:
0e:b5:21:e0:c6:ae:00:7a:76:71:5d:57:10:42:24:57:86:bc:
b0:9b:3a:6e:30:75:bd:0d:6b:c9:73:a1:f8:d5:54:99:d3:92:
59:28:ec:06:30:3b:ad:6d:02:09:64:ff:af:34:a3:c4:e3:5b:
af:90:ec:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:25:41 2026 by rpki-client