Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/aDZYo6Ob9j9HZiPEx_ms4ngXIFg.roa
File: aDZYo6Ob9j9HZiPEx_ms4ngXIFg.roa (raw, json)
Hash identifier: OKBbEEHLebSxfQCsXkoiTvdSQ821WXPtwYdtQuvhTik=
Subject key identifier: 68:36:58:A3:A3:9B:F6:3F:47:66:23:C4:C7:F9:AC:E2:78:17:20:58
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FDE000A3B54ADFD978B6E5538B43ED9A4
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/aDZYo6Ob9j9HZiPEx_ms4ngXIFg.roa
Signing time: Fri 07 Aug 2026 20:52:52 +0000
ROA not before: Fri 07 Aug 2026 20:52:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15731
IP address blocks: 13.143.227.0/24 maxlen: 24
13.143.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:de:00:0a:3b:54:ad:fd:97:8b:6e:55:38:b4:3e:d9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 7 20:52:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=683658a3a39bf63f476623c4c7f9ace278172058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c3:11:ed:a2:e1:26:d5:3b:72:7b:93:20:76:
9f:49:e1:e9:fc:0d:6b:e6:35:49:3e:ff:40:56:46:
b2:05:87:67:42:e5:77:3d:ea:7d:24:bf:2e:1e:af:
44:c7:f8:78:2d:c8:73:d0:bb:6d:70:03:36:6c:5c:
57:73:58:7d:97:9b:cc:c0:c0:d3:86:72:33:7c:f6:
80:47:ae:98:00:0d:a9:37:d5:4e:c5:bb:e2:f1:c1:
96:73:55:c7:b5:08:61:59:d8:8d:cb:bd:a0:ad:16:
5a:c3:7b:fb:32:df:5a:ea:f9:be:f7:61:b7:52:e0:
a6:f3:95:56:a4:69:15:84:7e:9b:7d:ac:3e:f4:cb:
91:7f:0c:70:0b:13:f9:1b:0a:cc:41:f7:f2:c7:5f:
df:47:da:28:ca:d0:93:cf:1c:e7:48:a5:fc:44:ea:
ff:e4:ab:d3:15:a8:be:01:36:01:ed:ed:50:6f:1d:
b4:c3:40:4d:4e:da:81:88:ff:b5:25:26:81:22:bf:
63:e4:b0:56:77:e4:64:0e:35:af:33:84:69:bf:56:
81:f7:c3:02:d7:3d:94:cf:a6:a2:56:36:a5:bf:c0:
24:ee:99:e5:0b:b9:27:b4:f7:a3:8b:b0:93:ab:b3:
d9:e0:32:2e:54:e4:09:a4:65:7f:14:89:bf:6b:57:
21:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:36:58:A3:A3:9B:F6:3F:47:66:23:C4:C7:F9:AC:E2:78:17:20:58
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/aDZYo6Ob9j9HZiPEx_ms4ngXIFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.227.0/24
13.143.248.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:47:b1:f1:3d:16:c5:19:a0:ec:98:52:b4:8f:ee:ea:6e:15:
40:e5:b6:3a:ce:fc:6d:55:6a:40:43:68:1f:13:93:5f:ef:5a:
33:48:f6:ca:a9:a5:c3:f3:c2:b6:1d:44:3d:71:b9:d7:f8:80:
ca:82:c1:b3:54:08:05:7f:01:86:4c:0a:7c:1b:f9:e7:54:dd:
41:65:0b:fc:73:45:ee:68:18:fa:20:a6:ab:3c:77:83:1c:b9:
7c:a1:a8:4f:1c:32:f8:c2:63:3d:ef:7d:25:9e:85:16:0d:90:
e0:62:aa:58:32:48:3f:12:05:fe:42:6d:a1:63:be:17:cd:9b:
5c:b5:4a:75:5b:11:a8:e7:c0:61:2b:1e:15:dd:9c:1b:f3:89:
bb:25:35:1a:f3:f4:b6:67:82:17:4e:cd:82:57:7d:c9:f3:1e:
ca:d8:dc:9b:f1:7f:7e:8b:b6:74:d4:cf:75:0d:53:3f:c2:92:
f4:b0:52:ce:cb:b8:aa:91:c0:69:70:a7:64:78:c7:f0:f7:da:
f6:a5:64:d8:00:f2:a3:11:b8:b6:29:38:8c:a0:5f:d9:ac:0e:
ae:a5:6f:7b:b7:53:1a:03:95:bf:90:67:3e:03:43:74:ac:17:
1a:08:86:2c:ef:3c:0f:f9:54:5e:97:1c:e5:2a:5c:6a:46:56:
a7:d7:10:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 04:40:49 2026 by rpki-client