Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/pmRR1REuUFGlAYMyxGC3bE3nnto.roa
File: pmRR1REuUFGlAYMyxGC3bE3nnto.roa (raw, json)
Hash identifier: y2XQLDdXUbKnnTIlw3Ghs1SJHJXCfOu737uNKg+jOZo=
Subject key identifier: A6:64:51:D5:11:2E:50:51:A5:01:83:32:C4:60:B7:6C:4D:E7:9E:DA
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FF74E4F9690947C0B1971A422CA405317
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/pmRR1REuUFGlAYMyxGC3bE3nnto.roa
Signing time: Wed 12 Aug 2026 18:48:52 +0000
ROA not before: Wed 12 Aug 2026 18:48:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 13.143.116.0/23 maxlen: 24
37.46.20.0/24 maxlen: 24
37.46.21.0/24 maxlen: 24
37.46.22.0/24 maxlen: 24
37.46.23.0/24 maxlen: 24
177.202.120.0/23 maxlen: 24
177.202.122.0/23 maxlen: 24
191.223.128.0/22 maxlen: 24
201.24.160.0/23 maxlen: 24
201.24.170.0/23 maxlen: 24
201.25.162.0/23 maxlen: 24
201.25.174.0/23 maxlen: 24
201.25.180.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 20:49:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:4e:4f:96:90:94:7c:0b:19:71:a4:22:ca:40:53:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 12 18:48:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a66451d5112e5051a5018332c460b76c4de79eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e8:50:e5:d3:63:aa:81:bf:db:c2:9e:48:9b:
63:3c:d0:c5:02:d1:39:07:7f:04:17:ec:6c:d2:09:
12:24:56:ae:44:9d:9d:ce:c0:9b:70:f8:47:84:c8:
fc:14:96:26:50:d0:02:42:73:57:21:53:ee:44:ab:
ed:2a:18:81:0b:fa:14:28:5b:24:76:15:ae:68:69:
cb:82:10:f8:49:b4:fa:9f:13:26:ff:eb:06:26:05:
a0:e3:34:78:62:d3:3a:f1:31:3d:8c:46:7d:41:fe:
be:0b:31:bd:0e:6b:d0:aa:a0:52:20:d4:5a:ad:27:
15:df:84:16:15:45:85:e8:ad:fc:ba:c6:0f:c2:1d:
a5:3a:dd:0a:78:fe:20:17:d5:36:0c:ac:d6:e6:f0:
9d:b1:d1:cb:a4:1d:d7:7d:c8:7d:7d:43:f5:f9:6a:
43:19:c0:49:f8:7a:99:c2:b8:ad:02:61:23:44:91:
9d:01:15:0e:55:2d:14:0a:7a:93:55:e2:a7:c1:a1:
2c:6e:37:1e:00:66:3b:85:b8:07:13:d3:a0:28:b0:
96:ac:c5:15:af:61:f6:72:99:11:54:bd:f7:0e:db:
a0:af:9b:5c:4f:15:b3:a9:28:e8:43:eb:e0:87:f7:
d6:f5:cf:3a:4b:1d:06:6c:30:d4:49:66:f0:24:45:
97:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:64:51:D5:11:2E:50:51:A5:01:83:32:C4:60:B7:6C:4D:E7:9E:DA
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/pmRR1REuUFGlAYMyxGC3bE3nnto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.116.0/23
37.46.20.0/22
177.202.120.0/22
191.223.128.0/22
201.24.160.0/23
201.24.170.0/23
201.25.162.0/23
201.25.174.0/23
201.25.180.0/23
Signature Algorithm: sha256WithRSAEncryption
07:fb:a7:6d:aa:fe:b9:06:63:f5:bf:30:7f:bd:e5:d6:d2:52:
f5:25:82:f9:e7:a1:1c:f1:6c:dc:64:b0:66:16:8f:0b:df:0b:
60:ab:b2:8f:f6:5e:e5:a3:76:e0:1d:91:53:9a:43:da:6c:be:
f3:1f:32:f5:2e:a7:72:c3:01:b4:94:d4:50:23:96:9f:e1:28:
b5:12:80:f2:2c:e5:da:1a:2d:95:1d:c3:27:1b:13:87:a9:fe:
2c:94:64:a4:5a:80:06:cc:b3:b4:f2:72:3a:bf:6c:05:40:08:
36:78:96:a7:39:25:be:5a:df:a3:13:01:91:6d:95:53:df:7b:
5c:3a:68:ea:60:67:b9:18:38:a0:d9:ad:be:0c:b4:37:98:77:
8e:59:ca:f3:2f:e0:f6:6c:b1:b6:55:ef:2e:ed:23:48:8e:65:
4b:1e:00:ab:f8:06:e3:96:b3:6a:e6:48:ad:35:27:d4:42:ad:
33:92:36:51:41:ea:18:25:ea:54:e7:dc:db:53:52:f4:25:b9:
52:63:23:f2:19:f2:79:d3:7f:bf:15:31:e9:3f:2c:9f:ac:f8:
83:38:67:7b:92:c6:c9:2f:23:b3:a4:c8:51:2e:ce:c0:7b:67:
a2:07:7e:5b:32:e3:be:5d:94:ce:81:eb:fd:66:39:f1:53:7f:
ec:d0:24:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:52 2026 by rpki-client