Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/eHwYJWpTX2QD2tZSmGY_WYDlFTg.roa
File: eHwYJWpTX2QD2tZSmGY_WYDlFTg.roa (raw, json)
Hash identifier: rvnG0b6HyYn4JpJ/RfoRjQor17oA2sjDaJB1M/+luMY=
Subject key identifier: 78:7C:18:25:6A:53:5F:64:03:DA:D6:52:98:66:3F:59:80:E5:15:38
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A08CFB840F9A24952B6A8C56FFA4B24FF7
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/eHwYJWpTX2QD2tZSmGY_WYDlFTg.roa
Signing time: Thu 10 Sep 2026 20:21:28 +0000
ROA not before: Thu 10 Sep 2026 20:21:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197283
IP address blocks: 13.143.164.0/24 maxlen: 24
13.143.165.0/24 maxlen: 24
31.76.31.0/24 maxlen: 24
31.76.101.0/24 maxlen: 24
179.198.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:fb:84:0f:9a:24:95:2b:6a:8c:56:ff:a4:b2:4f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 10 20:21:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=787c18256a535f6403dad65298663f5980e51538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4b:a6:f7:c7:bb:fa:57:78:2c:f7:28:d9:c0:
57:b7:ca:11:52:03:c5:db:aa:78:be:42:61:46:39:
6c:0a:0b:d1:0b:6b:91:4b:52:3b:ac:9b:27:0a:bb:
eb:6f:61:13:f1:64:17:3b:eb:a4:77:e3:08:66:54:
ee:b9:cd:cf:9a:20:40:b2:f9:99:97:2b:5c:14:be:
2f:2d:c4:eb:ed:31:e2:66:07:56:60:b6:90:95:a4:
72:6d:71:13:26:01:d7:1f:d7:7d:a6:c3:5c:96:f1:
ba:83:d2:c9:5c:a9:fc:7d:40:b5:28:8a:48:35:e0:
bd:eb:28:2f:14:f0:71:dc:cf:f6:dd:16:ec:eb:e7:
46:f2:80:c1:5f:db:f5:08:65:04:4a:08:0c:5d:31:
70:b8:23:83:07:5c:a9:52:1c:ef:cf:1f:62:26:f8:
77:76:35:3d:bd:f5:1b:2b:29:3c:b4:c2:ea:e3:cb:
3b:6e:ca:34:52:de:2a:17:cd:91:7e:a0:d4:f9:25:
ba:ca:c6:c5:42:cd:2c:e2:c6:a5:36:22:a0:47:17:
35:54:57:62:35:93:e0:f1:66:fe:c4:81:ad:e9:16:
b1:bd:e1:56:7c:d5:33:fd:20:41:04:49:3c:bc:b7:
37:1a:53:e2:ab:ec:71:c4:9b:5c:15:89:c5:d5:13:
77:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7C:18:25:6A:53:5F:64:03:DA:D6:52:98:66:3F:59:80:E5:15:38
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/eHwYJWpTX2QD2tZSmGY_WYDlFTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.164.0/23
31.76.31.0/24
31.76.101.0/24
179.198.49.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:ed:2d:eb:58:3b:34:0b:ca:8a:36:5d:22:b4:5b:8c:7f:00:
2c:99:2d:11:be:02:cd:aa:09:22:d5:e1:5f:48:47:6d:28:30:
d3:5a:9f:d3:aa:0c:34:96:3c:e1:5c:76:aa:34:14:ec:43:a1:
c5:33:09:d3:02:9d:22:44:db:84:26:8b:48:17:a3:10:4e:b3:
4f:7d:39:e6:3d:00:96:a7:91:56:8b:28:71:d1:22:09:fe:6f:
db:1f:9a:b3:d2:da:d3:e6:41:81:4e:83:10:4e:90:c1:42:aa:
be:bc:2e:61:33:21:62:d5:d1:82:63:cc:73:7d:32:c6:5a:7e:
7e:a1:c6:1a:ef:fd:95:7f:39:92:40:4f:17:0b:95:ba:0a:73:
9c:e5:4e:c0:38:5a:4a:a2:91:76:0f:36:d8:00:f5:56:3e:0c:
bf:ce:e8:b5:80:be:01:41:90:22:27:19:78:ea:53:ef:e0:4a:
19:2c:98:73:bd:2b:43:db:4b:cd:fe:3b:c4:c8:0a:e0:b3:24:
bc:38:4b:d4:8e:b1:67:e8:aa:a8:1d:ac:e7:32:0f:e2:f5:25:
5d:55:cf:3c:09:d6:e4:f8:d4:dc:66:a6:f9:fe:3c:75:18:e2:
3f:e9:39:ec:c5:60:97:88:fc:2b:c6:ed:9f:60:79:a6:ad:b1:
32:09:80:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:40 2026 by rpki-client