Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/a-R8PlrK7wjRfw0bLduFzUnzcEg.roa
File: a-R8PlrK7wjRfw0bLduFzUnzcEg.roa (raw, json)
Hash identifier: aiitnIFKyQoypa3CEkV0ECGAkUmSNBH1UyfJ9YGU8I0=
Subject key identifier: 6B:E4:7C:3E:5A:CA:EF:08:D1:7F:0D:1B:2D:DB:85:CD:49:F3:70:48
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A06D9821B643C42C5C91A0356F4E249471
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/a-R8PlrK7wjRfw0bLduFzUnzcEg.roa
Signing time: Fri 04 Sep 2026 18:04:41 +0000
ROA not before: Fri 04 Sep 2026 18:04:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 13.143.116.0/23 maxlen: 24
31.77.1.0/24 maxlen: 24
31.77.2.0/24 maxlen: 24
37.46.20.0/24 maxlen: 24
37.46.21.0/24 maxlen: 24
37.46.22.0/24 maxlen: 24
37.46.23.0/24 maxlen: 24
177.202.120.0/23 maxlen: 24
177.202.122.0/23 maxlen: 24
191.223.128.0/22 maxlen: 24
201.24.160.0/23 maxlen: 24
201.24.170.0/23 maxlen: 24
201.25.162.0/23 maxlen: 24
201.25.174.0/23 maxlen: 24
201.25.180.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:98:21:b6:43:c4:2c:5c:91:a0:35:6f:4e:24:94:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 4 18:04:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6be47c3e5acaef08d17f0d1b2ddb85cd49f37048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b0:32:4e:3a:6f:e3:29:e0:64:bf:c1:3a:20:
46:20:c5:99:ad:66:9b:93:24:7a:cd:ce:9a:60:41:
fe:8d:0e:c3:1f:b8:05:2f:22:1e:8d:65:05:75:d4:
df:22:3b:5e:fc:22:67:06:39:70:77:2d:fd:15:38:
44:0f:be:a3:84:ff:a2:1f:5f:13:b4:58:94:83:13:
d4:15:10:d0:72:9f:29:47:2a:3f:17:77:78:de:9f:
35:e2:8e:b0:42:4c:06:9d:9d:78:5f:38:af:67:ae:
30:df:e1:99:82:52:f3:55:ab:89:1a:af:a0:1f:cb:
42:99:6c:24:77:0f:c9:e9:a8:15:f6:ec:d3:5f:9d:
a0:44:26:3b:92:b6:63:d1:a5:25:c1:b5:c0:70:d4:
3f:7f:c7:87:09:18:f2:9d:9d:1f:1e:24:a8:22:eb:
65:8d:d5:c1:c6:6d:5a:51:89:18:9b:a9:db:32:a0:
40:c9:14:2a:8e:82:1d:91:1a:da:91:cd:36:43:4c:
ee:4d:cd:9f:b1:db:59:77:8d:3c:b2:76:57:73:4c:
f6:6c:aa:09:ba:08:a9:31:8a:79:98:34:79:cf:73:
cb:1b:a6:6c:a6:c4:94:af:43:56:9f:12:3f:14:69:
64:65:de:3c:fb:d2:68:82:2f:e2:70:d8:7b:2d:c5:
e1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E4:7C:3E:5A:CA:EF:08:D1:7F:0D:1B:2D:DB:85:CD:49:F3:70:48
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/a-R8PlrK7wjRfw0bLduFzUnzcEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.116.0/23
31.77.1.0-31.77.2.255
37.46.20.0/22
177.202.120.0/22
191.223.128.0/22
201.24.160.0/23
201.24.170.0/23
201.25.162.0/23
201.25.174.0/23
201.25.180.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:33:ed:82:a7:f1:65:55:e4:b7:3b:8c:05:56:5d:e0:12:12:
b0:b7:85:52:76:a6:d7:9c:c8:47:1e:42:51:0e:ce:97:b8:32:
66:26:4d:45:f2:1b:b6:92:05:28:c1:51:9a:36:be:e8:97:5f:
ad:22:06:07:ab:69:b4:5b:8d:0f:b6:d4:7f:3c:83:27:14:85:
10:c4:7b:39:bb:c9:0d:26:ff:8d:91:3e:6e:34:41:14:96:ec:
8f:d9:76:f8:00:59:eb:99:f7:dd:37:fe:83:c0:14:4e:af:cb:
ad:c3:92:12:5f:d3:71:1a:25:62:46:d0:41:b0:40:56:79:7e:
04:54:23:e4:16:d3:28:a3:c4:a8:10:99:dd:a2:a7:3c:dc:3e:
12:d2:81:c9:7a:36:c8:9a:90:0c:d5:3b:ac:52:ba:f3:02:36:
d0:6e:63:91:c6:76:b4:a0:9e:4a:54:96:ba:fd:d9:53:8b:0e:
44:14:37:b6:61:e7:ef:0b:94:c0:f7:42:1e:0f:77:bc:40:ff:
f5:ab:95:c0:88:ce:f0:7e:1c:ff:da:85:d7:f6:e9:a4:88:2b:
18:43:e1:22:71:50:a1:86:c6:0f:a6:c0:40:d6:c4:ea:7a:2f:
47:20:71:4e:c8:2c:87:21:13:4a:3d:d7:c9:a6:c2:a5:18:d9:
a1:7f:63:f6
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAaBtmCG2Q8QsXJGgNW9OJJRxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwOTA0MTgwNDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmU0N2MzZTVhY2FlZjA4ZDE3ZjBkMWIyZGRiODVjZDQ5ZjM3MDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrAyTjpv4yngZL/BOiBGIMWZrWab
kyR6zc6aYEH+jQ7DH7gFLyIejWUFddTfIjte/CJnBjlwdy39FThED76jhP+iH18T
tFiUgxPUFRDQcp8pRyo/F3d43p814o6wQkwGnZ14XzivZ64w3+GZglLzVauJGq+g
H8tCmWwkdw/J6agV9uzTX52gRCY7krZj0aUlwbXAcNQ/f8eHCRjynZ0fHiSoIutl
jdXBxm1aUYkYm6nbMqBAyRQqjoIdkRrakc02Q0zuTc2fsdtZd408snZXc0z2bKoJ
ugipMYp5mDR5z3PLG6ZspsSUr0NWnxI/FGlkZd48+9Jogi/icNh7LcXhbQIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFGvkfD5ayu8I0X8NGy3bhc1J83BIMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvYS1SOFBscks3d2pSZncwYkxkdUZ6VW56Y0VnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQBDY90MAwD
BAAfTQEDBAAfTQIDBAIlLhQDBAKxyngDBAK/34ADBAHJGKADBAHJGKoDBAHJGaID
BAHJGa4DBAHJGbQwDQYJKoZIhvcNAQELBQADggEBAI8z7YKn8WVV5Lc7jAVWXeAS
ErC3hVJ2ptecyEceQlEOzpe4MmYmTUXyG7aSBSjBUZo2vuiXX60iBgerabRbjQ+2
1H88gycUhRDEezm7yQ0m/42RPm40QRSW7I/ZdvgAWeuZ9903/oPAFE6vy63DkhJf
03EaJWJG0EGwQFZ5fgRUI+QW0yijxKgQmd2ipzzcPhLSgcl6NsiakAzVO6xSuvMC
NtBuY5HGdrSgnkpUlrr92VOLDkQUN7Zh5+8LlMD3Qh4Pd7xA//WrlcCIzvB+HP/a
hdf26aSIKxhD4SJxUKGGxg+mwEDWxOp6L0cgcU7ILIchE0o918mmwqUY2aF/Y/Y=
-----END CERTIFICATE-----
Generated at Fri Sep 18 16:25:38 2026 by rpki-client