Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jh92YX9CIcDC1OBKY79OINL5MnE.roa
File: jh92YX9CIcDC1OBKY79OINL5MnE.roa (raw, json)
Hash identifier: Map/MFysZwVSHdvdJdAJwuWk39zUlMab0Bm7ZsxHlA0=
Subject key identifier: 8E:1F:76:61:7F:42:21:C0:C2:D4:E0:4A:63:BF:4E:20:D2:F9:32:71
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A18437ED2BBD022BB93DE8D883245A2591
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jh92YX9CIcDC1OBKY79OINL5MnE.roa
Signing time: Wed 28 Oct 2026 20:33:40 +0000
ROA not before: Wed 28 Oct 2026 20:33:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60404
IP address blocks: 13.143.203.0/24 maxlen: 24
191.223.138.0/23 maxlen: 24
191.223.142.0/23 maxlen: 24
201.8.72.0/23 maxlen: 24
201.58.128.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:37:ed:2b:bd:02:2b:b9:3d:e8:d8:83:24:5a:25:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 28 20:33:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e1f76617f4221c0c2d4e04a63bf4e20d2f93271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:39:a2:dc:ee:e7:a7:ce:4d:c6:b2:b8:d2:5b:
57:52:7f:7e:5c:31:24:9a:99:ab:9d:56:06:b0:c1:
35:21:69:28:4e:a3:89:63:aa:43:90:39:56:13:b3:
9d:84:ff:56:34:8e:4f:d0:86:dc:d2:81:17:6c:85:
73:67:17:f8:ba:db:ab:93:11:fb:8f:8a:27:d9:13:
05:84:ef:92:b5:09:ec:54:3c:dc:f9:ec:b3:b7:87:
21:b1:21:34:a5:fd:ec:5c:fc:3b:9c:d7:75:b3:d8:
36:15:f0:98:77:b0:63:0c:1f:db:9b:6d:aa:52:0c:
d3:72:b0:fa:d6:55:2f:9d:5a:3a:1f:34:f9:40:57:
6a:a7:8a:bf:e2:0f:12:dc:3d:bd:65:ad:3f:c4:87:
b9:9b:99:fe:5e:f6:30:c1:53:5a:52:0f:ee:cb:5b:
f5:7c:40:3f:d7:fa:cb:4c:b3:78:4f:e5:2d:be:a0:
c7:37:fa:d9:a7:50:01:0c:5c:1f:66:86:e5:1e:47:
0c:e2:20:31:cf:0d:7e:61:6e:6a:2d:84:0c:96:d1:
9b:12:de:db:81:26:ec:15:35:51:71:f8:aa:54:29:
bf:6c:4f:93:bf:2e:b7:73:98:f6:70:2a:b0:ad:93:
f6:97:f7:1c:fa:1f:08:a7:66:e9:19:19:19:f6:e7:
e2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1F:76:61:7F:42:21:C0:C2:D4:E0:4A:63:BF:4E:20:D2:F9:32:71
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jh92YX9CIcDC1OBKY79OINL5MnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.203.0/24
191.223.138.0/23
191.223.142.0/23
201.8.72.0/23
201.58.128.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:bc:3e:b7:90:57:55:01:01:d1:9c:09:14:b8:ee:f6:db:1c:
47:69:54:72:69:5b:18:30:f6:06:6e:86:76:54:78:91:fa:66:
18:52:1a:0f:1d:89:7e:1e:fe:6d:79:de:cb:d8:2d:43:e3:96:
0d:e9:e0:94:b7:9a:a3:9c:a8:1f:11:71:ab:28:f3:c2:f9:99:
f3:4e:44:ca:fc:52:c7:c5:8c:86:e8:3d:7f:b7:7e:33:c5:eb:
96:60:fe:14:b0:35:6c:3c:2f:6a:98:68:90:ad:73:05:5b:04:
c1:10:2a:11:53:f7:b6:69:9a:f4:f1:f0:2d:9f:4f:51:a5:b5:
8d:52:b9:2f:fb:bc:22:9d:31:f1:39:36:6e:31:9b:73:38:e8:
ad:7f:f7:75:9a:58:9d:c0:1d:ff:8f:76:ad:7a:5a:f9:8b:1f:
3d:b0:8b:a2:9b:a8:46:64:59:b5:63:4a:25:d9:08:95:87:f6:
5f:12:c0:df:a4:1b:36:7f:9c:04:9d:3c:e8:31:d3:3a:4e:36:
92:a6:04:17:55:bb:7b:8e:75:de:19:dd:b7:a0:5a:0f:7f:c7:
5e:e2:0c:67:4a:3a:87:86:a8:cb:1a:94:ba:03:46:4b:ca:37:
74:a1:fc:27:61:78:c3:d1:11:06:f0:23:ff:e2:0d:66:5f:7f:
46:46:27:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:26:01 2026 by rpki-client