Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/h3MT1cVcpk5VzZ2GtCT04mJ2nO8.roa
File: h3MT1cVcpk5VzZ2GtCT04mJ2nO8.roa (raw, json)
Hash identifier: kuZ38km6JNFUodVzm3qQk0uyLa0nuRq/oGijKdKCclY=
Subject key identifier: 87:73:13:D5:C5:5C:A6:4E:55:CD:9D:86:B4:24:F4:E2:62:76:9C:EF
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FC875E233C62AB4173A0A96418DA2E4FB
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/h3MT1cVcpk5VzZ2GtCT04mJ2nO8.roa
Signing time: Mon 03 Aug 2026 16:29:56 +0000
ROA not before: Mon 03 Aug 2026 16:29:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15731
IP address blocks: 13.143.219.0/24 maxlen: 24
13.143.227.0/24 maxlen: 24
13.143.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:75:e2:33:c6:2a:b4:17:3a:0a:96:41:8d:a2:e4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 3 16:29:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=877313d5c55ca64e55cd9d86b424f4e262769cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:43:d6:c6:9c:88:89:5d:df:88:11:a7:fd:6e:
74:7c:b8:35:b3:c6:41:be:3e:4b:25:f5:4d:47:07:
c0:27:50:b8:e7:2c:57:84:fb:de:1f:bd:36:3c:b9:
ac:12:c7:73:3d:5d:eb:5f:a3:14:c7:5e:9f:cf:ca:
df:69:1d:ae:9b:c6:1c:1b:5b:70:f9:3c:14:a1:b3:
ce:2c:35:21:b6:fa:b8:25:66:3d:16:0a:28:57:e8:
20:55:51:ab:40:65:fd:df:58:8c:e5:a6:75:c7:3d:
f8:dd:4f:a7:74:e2:6a:f2:8f:5d:2d:14:ce:25:7e:
b4:f1:47:fb:03:29:31:93:4f:1d:eb:b3:4f:1f:57:
c3:96:f6:b4:e2:0d:b0:cf:0b:7d:b4:56:85:47:c2:
33:4a:82:7e:d9:d7:20:04:88:49:45:05:dc:87:fd:
5e:f2:14:09:b1:09:69:bc:04:e4:3c:69:9e:14:e0:
34:78:b6:e4:10:05:f8:4b:be:44:ac:05:87:32:af:
84:6c:5c:d1:a8:2b:5d:68:90:9f:d1:ec:e9:1d:5e:
6a:34:92:4f:20:31:f3:07:e1:e2:a8:58:3c:6e:75:
41:e4:f6:1c:5a:25:a8:83:9f:82:38:bb:5e:fd:d5:
98:2f:dc:38:2a:21:e8:f2:15:c2:75:e6:8f:b4:0c:
ba:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:73:13:D5:C5:5C:A6:4E:55:CD:9D:86:B4:24:F4:E2:62:76:9C:EF
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/h3MT1cVcpk5VzZ2GtCT04mJ2nO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.219.0/24
13.143.227.0/24
13.143.248.0/24
Signature Algorithm: sha256WithRSAEncryption
73:6f:c3:0c:bc:b6:fa:de:ef:98:1c:0c:b4:1b:c6:90:31:09:
23:5c:76:66:74:c6:88:f9:15:74:6b:d3:61:fa:38:7b:eb:58:
63:27:a1:9a:f5:f0:f3:79:2a:64:a9:5e:b6:93:7c:d4:24:a1:
77:ca:14:06:a6:85:ba:fa:5b:37:8a:5a:21:47:0e:69:ab:e6:
6f:92:4e:09:bf:b5:71:d1:30:66:72:04:7e:e1:6d:57:ba:38:
a1:1f:a5:b7:fa:20:4f:79:ab:1f:e6:d5:ef:32:33:fc:69:4a:
20:49:b9:c8:56:a3:ec:49:00:5d:4e:7b:6b:f5:21:b8:04:58:
65:d0:f4:fd:a7:da:18:bd:66:9d:80:bc:90:57:49:cd:81:96:
16:37:b3:3e:57:bc:26:af:33:8d:9b:9c:62:1c:e6:05:4e:db:
66:17:3b:43:95:d1:8f:07:90:da:3b:49:66:83:de:f4:b5:ce:
44:a6:a5:ad:44:20:af:da:d5:fb:73:83:54:91:c7:b8:52:54:
46:b7:5a:9a:5d:91:65:35:6b:7b:dc:5d:7a:cb:2a:39:4f:32:
2a:42:aa:43:a9:03:1e:a5:fd:e4:d1:91:1a:28:ca:b0:df:43:
7b:9e:27:93:c4:b8:95:2d:44:2a:88:39:c5:2f:a7:cf:67:30:
8d:d2:c7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:51:40 2026 by rpki-client