Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/nYF7qoSLbWqveaUBEgclpBu-Zy0.roa
File: nYF7qoSLbWqveaUBEgclpBu-Zy0.roa (raw, json)
Hash identifier: KDi++NlSoWMZrvfijCywQiKsg+Jj2fNriX3NFTUed8E=
Subject key identifier: 9D:81:7B:AA:84:8B:6D:6A:AF:79:A5:01:12:07:25:A4:1B:BE:67:2D
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FC8ABE88B94BEC5699C18D05F8B7F1FED
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/nYF7qoSLbWqveaUBEgclpBu-Zy0.roa
Signing time: Mon 03 Aug 2026 17:28:57 +0000
ROA not before: Mon 03 Aug 2026 17:28:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 13.143.116.0/23 maxlen: 24
37.46.20.0/24 maxlen: 24
37.46.21.0/24 maxlen: 24
37.46.22.0/24 maxlen: 24
37.46.23.0/24 maxlen: 24
177.202.120.0/23 maxlen: 24
177.202.122.0/23 maxlen: 24
191.223.128.0/22 maxlen: 24
201.24.160.0/23 maxlen: 24
201.24.170.0/23 maxlen: 24
201.25.162.0/23 maxlen: 24
201.25.174.0/23 maxlen: 24
201.25.180.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:ab:e8:8b:94:be:c5:69:9c:18:d0:5f:8b:7f:1f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 3 17:28:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d817baa848b6d6aaf79a501120725a41bbe672d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a8:59:29:ab:e5:49:5e:00:27:5f:01:8c:33:
ea:36:43:09:3b:3d:81:28:a2:39:94:cd:17:09:37:
a3:8e:19:96:b0:8d:c2:fd:69:38:c4:26:60:79:7f:
1b:46:f7:1f:5f:33:f5:1e:3d:de:3f:f4:b7:77:45:
7d:ac:c6:d9:6d:9c:c4:c0:57:27:0a:90:98:de:ce:
31:e4:d5:15:e9:97:41:47:6c:21:77:84:c9:77:50:
b1:39:c5:50:29:99:ad:c6:15:9c:10:74:06:41:f4:
fe:ce:d1:f7:3e:49:a8:79:9a:47:ff:e0:17:11:39:
44:92:be:aa:a3:ed:2c:d0:7f:d4:08:63:e7:e3:11:
fe:29:bb:55:06:64:70:b4:fa:de:67:e0:aa:ee:05:
4c:30:a3:40:f2:ca:1f:3f:cb:1a:91:6b:70:67:d4:
f3:32:2b:3a:78:7a:c9:93:fd:d8:55:7a:21:53:9d:
18:37:18:51:12:54:ea:8a:ea:df:86:d7:78:9c:ea:
81:86:0c:db:ce:26:16:a1:5b:ce:65:91:cb:af:b9:
4e:d5:73:cc:8b:27:b0:23:6a:d2:60:a3:b4:12:0d:
7e:7e:77:0e:5c:8b:91:53:7a:2f:74:7b:5d:af:b6:
05:56:ed:de:da:6f:a5:0e:e5:d7:05:a3:32:bd:f7:
81:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:81:7B:AA:84:8B:6D:6A:AF:79:A5:01:12:07:25:A4:1B:BE:67:2D
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/nYF7qoSLbWqveaUBEgclpBu-Zy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.116.0/23
37.46.20.0/22
177.202.120.0/22
191.223.128.0/22
201.24.160.0/23
201.24.170.0/23
201.25.162.0/23
201.25.174.0/23
201.25.180.0/23
Signature Algorithm: sha256WithRSAEncryption
00:a2:bb:ac:c3:7e:13:0e:c8:6f:1b:2c:23:08:8c:8f:14:40:
cb:af:71:44:a3:dc:d8:94:67:7b:65:75:90:c4:7c:54:cb:67:
18:10:3c:c5:65:9b:b9:c9:0a:57:34:22:19:bb:34:66:aa:0f:
dc:d6:03:d3:31:dc:51:1d:45:b7:ea:8e:aa:49:31:de:d1:6c:
9c:35:4d:d0:bb:2d:81:d0:95:e7:f9:42:bb:da:70:ed:39:18:
e3:73:a7:c9:c9:92:4f:d7:8a:12:af:2e:f6:b8:5d:dc:44:bd:
02:5f:88:93:69:2d:fa:c0:a7:81:30:b1:e2:26:c9:75:1c:71:
9f:60:db:d2:19:c9:5e:d6:6e:a6:73:db:d6:87:fe:e3:74:56:
e4:10:dd:ad:72:d3:d3:ae:ba:32:a0:80:58:c8:44:1e:63:c4:
4b:f6:8c:60:c5:04:ce:04:46:54:02:fa:89:da:df:b4:a3:53:
22:39:7a:68:15:ed:37:8a:71:cb:27:6f:91:98:37:85:3c:ec:
d2:d5:fe:09:64:57:5a:13:87:56:88:20:a5:b1:9a:43:d5:ac:
15:b1:40:26:a9:5f:c1:c3:3d:15:2e:c4:b9:d9:7f:e1:f0:e1:
b7:0c:b0:d4:bf:05:bc:c2:7b:21:af:76:f0:1f:53:18:cc:ed:
5d:d3:58:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:52:41 2026 by rpki-client