Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ldsx2Sb7F2iYG0UeV1bOIUidwgE.roa
File: ldsx2Sb7F2iYG0UeV1bOIUidwgE.roa (raw, json)
Hash identifier: StFN7HCdnPTrFLOpbJBM7aUp2/WNARqmXVWM7ztDEAY=
Subject key identifier: 95:DB:31:D9:26:FB:17:68:98:1B:45:1E:57:56:CE:21:48:9D:C2:01
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A082BE5B3D1DB6522440D6FE3AA9EF4414
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ldsx2Sb7F2iYG0UeV1bOIUidwgE.roa
Signing time: Tue 08 Sep 2026 20:38:28 +0000
ROA not before: Tue 08 Sep 2026 20:38:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12741
IP address blocks: 13.143.114.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:be:5b:3d:1d:b6:52:24:40:d6:fe:3a:a9:ef:44:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 8 20:38:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95db31d926fb1768981b451e5756ce21489dc201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:76:33:05:ad:6e:ac:15:cf:cb:30:63:97:d5:
4a:4c:1f:69:ab:35:11:78:cb:bc:fd:29:68:6d:bf:
6f:36:d8:c0:67:c8:b6:bb:f5:b8:7f:a6:52:f5:ec:
b8:62:2e:58:e0:c6:aa:02:df:45:22:40:13:9c:5c:
87:e6:ff:ba:4a:b0:d7:52:35:d6:3a:2b:06:c9:54:
cf:cd:3b:5e:09:dc:56:80:93:6f:7d:e9:59:c0:36:
86:60:ea:14:69:df:bd:5b:d8:28:9d:d6:77:a8:6a:
cf:a9:79:d2:3d:c8:cf:e2:de:03:91:b6:47:bd:39:
54:7a:73:11:24:7a:56:7e:58:49:02:09:00:bd:dc:
80:36:55:62:9e:cd:85:1c:ef:c6:6b:93:d0:cb:74:
eb:9a:97:c3:5d:55:14:05:f8:54:95:cd:02:28:b4:
04:5b:d4:92:43:db:3c:cc:00:f9:03:ca:30:fa:1b:
bd:e9:ec:8a:7c:6d:6e:07:b7:7f:8a:e3:65:e3:21:
42:12:61:c6:08:e1:c8:c7:8b:48:98:12:25:f6:93:
48:7f:f6:00:2b:e1:13:47:3b:c0:98:3a:fd:5d:57:
7b:ee:56:1c:51:5b:d0:8a:12:08:ad:35:7c:39:21:
f5:ca:4d:e1:9a:63:1d:7c:bb:a2:7b:4e:ff:99:f9:
dd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DB:31:D9:26:FB:17:68:98:1B:45:1E:57:56:CE:21:48:9D:C2:01
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ldsx2Sb7F2iYG0UeV1bOIUidwgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.114.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:c8:e7:80:8e:d4:29:c1:83:ec:c3:1b:e3:db:62:b8:ed:a6:
b9:d5:24:15:d8:b3:18:1c:e3:81:56:aa:d2:07:f6:66:0d:82:
ca:ad:d6:50:77:b3:db:58:45:2a:4a:45:a0:d9:07:be:d2:93:
8d:b0:06:fe:06:13:10:52:d8:22:cd:73:37:cc:20:12:70:d6:
3f:8b:1e:c8:84:84:6b:3c:7a:e2:26:c6:a8:8f:c4:03:c5:fb:
24:82:e6:3f:b6:e5:93:1d:f8:b2:3c:22:79:bb:23:28:ef:e0:
25:5d:91:01:54:10:ac:0e:ea:fe:ae:b4:4d:ef:4a:5b:a6:fc:
f1:c0:f3:4b:cf:46:24:18:89:80:77:d1:06:84:14:47:7d:a7:
1f:5c:98:86:9b:82:d2:71:bc:3f:aa:59:4c:d8:98:f7:20:9a:
e8:a6:92:ad:fc:d5:e9:05:7c:a7:d4:c7:07:d9:9f:df:b6:59:
44:7f:8d:64:72:e0:2b:b0:2b:bd:56:9a:3d:53:34:e1:2c:28:
80:1e:61:f1:94:93:86:56:c0:b2:94:93:cb:17:7d:79:7d:e8:
87:89:9b:7c:7e:3e:45:9c:5f:a6:03:7d:fc:fc:23:34:61:2b:
9c:d6:b9:ef:5f:d1:a5:f6:e4:d7:e1:87:3c:e1:b1:51:5a:f2:
9c:a5:9a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:13 2026 by rpki-client