Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/h_qFdDQq5RlR4YoIQyWqhk60asc.roa
File: h_qFdDQq5RlR4YoIQyWqhk60asc.roa (raw, json)
Hash identifier: yzxwexm6q0z3jkxD7+ajtjYZMLQqIwwCNP0S+aNb4p0=
Subject key identifier: 87:FA:85:74:34:2A:E5:19:51:E1:8A:08:43:25:AA:86:4E:B4:6A:C7
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0202E6CF9B0E17C0578581F68CCB12E40
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/h_qFdDQq5RlR4YoIQyWqhk60asc.roa
Signing time: Thu 20 Aug 2026 17:18:28 +0000
ROA not before: Thu 20 Aug 2026 17:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218914
IP address blocks: 13.143.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:2e:6c:f9:b0:e1:7c:05:78:58:1f:68:cc:b1:2e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 20 17:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87fa8574342ae51951e18a084325aa864eb46ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7e:7a:37:88:bb:b6:8f:1c:31:96:ba:a0:75:
a5:6d:6f:f6:75:ba:a6:51:89:f3:6f:51:a9:dd:10:
9f:f2:f7:b2:1d:8e:48:bc:7b:96:96:1b:07:32:2b:
9c:7f:c0:ba:46:5c:c3:2a:ed:fc:e5:1c:fc:e6:b1:
51:da:8b:05:df:b5:22:92:60:11:2e:86:61:8a:ac:
46:c7:29:bd:6a:32:ce:d0:0d:74:2b:b1:61:a3:e4:
a3:e4:ad:7e:66:af:6a:60:44:d6:3c:b5:24:64:88:
39:af:53:f8:03:ae:ef:d3:6b:ec:06:10:e8:a8:f2:
4e:a6:c6:20:ba:7d:d9:4b:cd:b7:27:37:93:d0:c5:
67:6c:c6:53:cc:14:83:59:a7:be:bf:9a:6d:81:bd:
79:31:cc:fc:88:20:2f:26:ab:e4:cc:34:98:65:48:
b4:bd:5d:bd:7f:1f:88:41:2b:1a:b4:d4:37:a2:2c:
e9:7b:cb:d5:73:e0:8d:0b:16:a8:bf:c1:ab:8e:49:
73:85:d8:61:a7:c3:04:f4:6f:cd:a2:50:f8:ee:d3:
5d:4b:20:5f:fa:4e:1e:7c:28:5a:25:69:11:aa:1b:
b0:38:90:79:7a:f3:e0:fa:26:11:8f:21:2d:99:1a:
29:39:d4:e2:32:65:78:91:3c:da:45:f8:3e:d9:38:
4f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FA:85:74:34:2A:E5:19:51:E1:8A:08:43:25:AA:86:4E:B4:6A:C7
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/h_qFdDQq5RlR4YoIQyWqhk60asc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.130.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:49:34:77:63:af:bc:f4:0a:b8:6a:0d:0f:03:99:6c:25:e8:
db:50:34:73:50:39:c0:b7:7a:d3:98:59:f5:94:a1:2c:5e:27:
d1:44:fe:ef:11:cc:89:80:fe:ba:9e:e0:14:1e:03:cd:0f:6a:
aa:5d:5c:2b:e9:61:5f:c3:25:4e:47:5c:98:94:00:78:ee:64:
38:f8:a0:ba:9d:57:8e:ab:9a:18:ff:8b:48:43:3a:54:4f:0e:
69:0d:84:ca:6d:13:c5:40:84:a5:97:8f:cb:9c:80:71:6a:1a:
62:1c:0d:6e:8f:b3:8f:b7:48:9b:73:12:39:b8:e9:61:04:1d:
b1:d2:79:ac:cc:e1:ad:c1:7d:66:f0:3e:34:86:60:92:b4:51:
73:c0:ba:de:a0:d1:2d:66:bd:db:bc:84:fb:b1:2e:df:ce:a5:
60:e3:5d:2b:b1:f0:46:b8:63:0b:3b:4b:55:c8:0c:86:1d:50:
7d:84:56:00:1e:6f:ca:ff:9b:a4:4d:07:22:39:fb:ce:09:1a:
64:2e:67:5e:db:db:b9:12:53:78:64:9e:03:70:65:60:b4:3f:
85:5f:1b:73:a8:9c:19:8c:7b:4c:dd:c3:1c:43:61:bc:cb:e5:
e0:68:d0:60:8f:18:8d:22:76:c7:33:c1:1f:c1:f5:2e:f1:cc:
68:70:75:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:53:09 2026 by rpki-client