Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/nSPJLwSOemyvgKEoy891YJ2KeSE.roa
File: nSPJLwSOemyvgKEoy891YJ2KeSE.roa (raw, json)
Hash identifier: d20WEbtN3FmA/UjKcA0RGjNTdJ1I9p3yoCGu9Uv3qXc=
Subject key identifier: 9D:23:C9:2F:04:8E:7A:6C:AF:80:A1:28:CB:CF:75:60:9D:8A:79:21
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0221AFC26CE226C704FB4D9669D2D770F
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/nSPJLwSOemyvgKEoy891YJ2KeSE.roa
Signing time: Fri 21 Aug 2026 02:16:28 +0000
ROA not before: Fri 21 Aug 2026 02:16:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 13.143.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:22:1a:fc:26:ce:22:6c:70:4f:b4:d9:66:9d:2d:77:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 21 02:16:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d23c92f048e7a6caf80a128cbcf75609d8a7921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:91:76:e8:b5:fb:32:23:ba:28:a8:9c:a7:6f:
1a:7d:6f:4c:96:c2:cc:c3:25:11:11:de:7a:85:d2:
11:90:03:03:ed:b4:83:5b:c0:4e:02:1c:78:d2:2a:
30:7b:1e:c5:78:1a:aa:37:3d:ff:02:d3:73:3d:72:
d9:b7:40:67:c7:31:50:aa:2a:fb:45:99:50:64:77:
83:f9:94:07:53:7c:12:fb:31:d8:dd:f3:55:e8:80:
b4:b0:4a:67:4e:6d:6f:e4:c3:69:7d:fb:98:14:82:
72:c6:53:65:1b:52:b4:b3:b1:20:04:51:ae:01:c5:
cc:38:96:7f:b8:27:39:69:4c:4a:47:b2:b5:0d:46:
cb:c2:d6:be:e4:76:d1:98:ca:45:36:ea:a7:5a:c6:
19:8a:b1:f1:6d:b1:47:3d:a2:97:9f:91:9b:4e:af:
7f:e9:72:66:6d:aa:c8:0c:ab:47:88:fa:5c:d5:c6:
10:34:0a:fd:1d:ab:b9:de:42:c9:c8:ae:19:33:f5:
ed:6b:f8:ef:fa:02:0f:40:da:e5:2e:6b:c4:5c:ff:
b0:b6:1d:a7:48:17:c7:34:1c:2c:74:1c:57:e7:c9:
03:56:10:73:ec:4a:3d:d2:1c:8d:48:92:61:d6:4c:
a4:22:60:e1:f1:b6:c8:75:ba:16:12:77:75:26:31:
50:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:23:C9:2F:04:8E:7A:6C:AF:80:A1:28:CB:CF:75:60:9D:8A:79:21
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/nSPJLwSOemyvgKEoy891YJ2KeSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.208.0/24
Signature Algorithm: sha256WithRSAEncryption
67:06:10:f8:96:36:5e:c7:9c:4e:6d:b1:80:d0:aa:a5:17:54:
7b:b3:45:32:46:09:ec:e3:d2:22:72:6c:35:44:33:d7:04:a4:
4a:d1:6e:b2:21:42:b7:9d:50:70:0b:49:20:38:1c:94:4f:47:
81:43:e3:21:38:c1:8e:6f:2f:d6:92:38:7b:6f:75:6f:a2:cd:
f6:c4:11:f0:03:88:90:22:e8:9e:7f:3f:99:97:bf:fa:30:a8:
e0:91:c2:42:02:ee:99:37:12:5d:3c:92:2f:38:2f:b2:e0:ac:
f9:11:c5:92:5c:49:65:76:57:c3:48:dc:4e:ff:2e:f1:5a:bc:
44:89:41:4c:1c:ca:4a:bd:8f:5d:3b:9f:5a:24:18:2e:d0:b5:
8e:44:95:87:11:18:a3:17:28:3a:3e:40:ba:ce:6f:6f:8c:75:
dd:3f:5a:bf:8f:f0:db:65:e0:98:e4:36:4d:c3:21:21:e7:bb:
03:dd:bf:1f:8e:72:2f:1d:01:57:37:1d:08:01:92:82:86:16:
19:c9:2f:c3:36:4b:57:61:20:c5:f9:bb:c7:61:74:13:00:fb:
f6:fc:b1:0d:1e:9b:ed:de:db:25:d2:d8:0f:32:0c:79:c7:5a:
00:2f:0a:9f:69:54:ce:25:37:e2:7e:a8:f2:b5:25:3b:4f:9a:
09:28:a6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:22 2026 by rpki-client