Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hu196417dQ6iabKJjzsCxjD7ulI.roa
File: hu196417dQ6iabKJjzsCxjD7ulI.roa (raw, json)
Hash identifier: vdRp7r5h1jCkauU2YnLAfw4gB5DluGy8jz29eXoADWA=
Subject key identifier: 86:ED:7D:EB:8D:7B:75:0E:A2:69:B2:89:8F:3B:02:C6:30:FB:BA:52
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1A2F07AAB8FFE8F39EC46357945FBEC90
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hu196417dQ6iabKJjzsCxjD7ulI.roa
Signing time: Tue 03 Nov 2026 19:43:51 +0000
ROA not before: Tue 03 Nov 2026 19:43:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219095
IP address blocks: 13.143.232.0/24 maxlen: 24
13.143.239.0/24 maxlen: 24
31.77.59.0/24 maxlen: 24
179.254.115.0/24 maxlen: 24
179.254.126.0/24 maxlen: 24
179.254.127.0/24 maxlen: 24
201.8.64.0/24 maxlen: 24
201.8.71.0/24 maxlen: 24
201.8.81.0/24 maxlen: 24
201.8.87.0/24 maxlen: 24
201.10.91.0/24 maxlen: 24
201.58.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a2:f0:7a:ab:8f:fe:8f:39:ec:46:35:79:45:fb:ec:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 3 19:43:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86ed7deb8d7b750ea269b2898f3b02c630fbba52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:d6:cb:05:12:17:13:3e:be:7e:7c:5d:10:
78:b1:08:ac:98:91:21:75:77:13:45:01:f8:56:b4:
8a:b8:cd:fe:41:3e:bd:55:80:70:7f:b9:d1:6a:6e:
71:0a:6a:19:66:39:07:02:d2:d5:a8:1f:d1:fd:73:
ee:a7:8a:b6:06:e3:c1:92:ce:06:ab:c1:72:54:56:
f8:4a:b3:4a:0c:31:b9:14:5f:d4:59:6b:b3:56:2f:
e8:4c:de:80:b4:4d:6b:65:ec:64:c3:1a:55:ba:0c:
24:ca:db:8b:1a:cf:8a:61:e6:b5:2c:4d:99:bb:04:
e8:bf:92:c3:39:54:5c:9f:21:fb:5f:d5:d5:9f:1d:
a1:94:68:f5:32:6b:a6:98:be:a3:5a:7b:e8:e7:cb:
80:cd:00:72:8c:60:80:73:88:80:5e:5e:65:c6:4d:
aa:fa:40:16:b9:0d:cc:bc:9a:62:f1:d9:20:9d:4d:
55:01:5e:bd:04:be:d4:02:be:b6:ed:b6:46:af:83:
62:b5:5f:f4:da:2f:4e:06:43:5a:d7:90:39:70:fb:
c8:dd:29:44:10:2a:a2:68:17:9f:5b:3a:a9:20:a7:
06:7f:9b:80:82:09:ca:46:57:01:5c:ce:84:8f:4e:
b1:8c:3d:40:d5:04:9b:10:99:37:91:72:21:1c:57:
35:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:ED:7D:EB:8D:7B:75:0E:A2:69:B2:89:8F:3B:02:C6:30:FB:BA:52
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hu196417dQ6iabKJjzsCxjD7ulI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.232.0/24
13.143.239.0/24
31.77.59.0/24
179.254.115.0/24
179.254.126.0/23
201.8.64.0/24
201.8.71.0/24
201.8.81.0/24
201.8.87.0/24
201.10.91.0/24
201.58.139.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:a9:cd:be:91:a8:8d:fc:09:b0:0e:48:38:d9:24:9f:84:b9:
4c:d9:97:a5:5e:c3:58:dc:08:93:c3:81:f2:a8:4d:93:30:2b:
63:14:b8:84:bf:5d:55:7d:de:69:a5:cc:3e:7c:c7:4c:22:c5:
b9:0f:fc:17:ef:66:36:db:1e:05:1d:40:f2:75:de:8a:6f:71:
4d:0f:13:5b:0d:42:f1:b4:a4:c8:ad:cf:26:88:7a:86:74:48:
9d:da:49:84:9e:16:7d:b0:cb:05:ff:83:a4:03:a5:fa:1b:1c:
ad:f0:46:77:aa:01:70:fb:47:fa:1e:4e:67:2f:f4:9b:73:e2:
4c:43:8e:1a:5d:04:9f:16:df:a8:e0:97:46:03:18:22:70:03:
eb:24:de:11:c6:e5:9c:e3:4f:77:1c:77:5f:4d:6c:60:0b:93:
a3:14:94:c9:38:54:73:4b:b1:eb:82:fc:a6:87:ed:33:16:f2:
12:f0:46:fc:92:51:0a:87:73:01:9f:8d:ec:13:33:1a:31:1b:
ac:5b:d8:86:15:a1:d1:d6:ad:45:eb:c2:d6:b0:a3:82:f1:6f:
9a:3f:87:3e:58:28:a2:35:ad:70:ac:d8:11:49:e6:16:e6:43:
5e:be:a0:54:ac:8a:62:87:6f:d7:c9:59:49:95:bd:f0:62:9b:
36:bb:86:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:44:05 2026 by rpki-client