Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/qNPvnN43tBUu6uSxZ6YK-Ms6Cqk.roa
File: qNPvnN43tBUu6uSxZ6YK-Ms6Cqk.roa (raw, json)
Hash identifier: qnoInaavjDtgWg+hLmE5FTrMtqSqU/DcumUbe9GaMb8=
Subject key identifier: A8:D3:EF:9C:DE:37:B4:15:2E:EA:E4:B1:67:A6:0A:F8:CB:3A:0A:A9
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0221AFCB60E642A158F7A7ACF4BE5DE1A
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/qNPvnN43tBUu6uSxZ6YK-Ms6Cqk.roa
Signing time: Fri 21 Aug 2026 02:16:29 +0000
ROA not before: Fri 21 Aug 2026 02:16:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 13.143.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:22:1a:fc:b6:0e:64:2a:15:8f:7a:7a:cf:4b:e5:de:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 21 02:16:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8d3ef9cde37b4152eeae4b167a60af8cb3a0aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:81:4f:db:07:bf:ae:07:a5:e1:a4:5b:ef:
c8:d3:8d:04:52:9a:5d:94:a1:aa:30:f1:df:01:a3:
aa:4f:c7:8d:99:da:63:79:a5:8a:60:2d:c3:da:e7:
80:f0:1e:e4:b4:54:c6:2b:9a:d8:8b:32:64:88:80:
bd:68:ab:df:b6:1f:7e:01:0a:cd:1e:20:cf:fd:ee:
e1:d4:f3:5d:f9:65:d0:c4:d9:ec:d7:de:8d:1d:ab:
91:d7:0d:f4:7d:83:35:6e:11:f7:a5:79:c5:41:6a:
f1:38:54:d0:a9:f5:d7:b1:39:cd:a8:a5:0a:ae:4d:
fa:fa:de:ae:5c:29:4b:4f:64:b4:b1:8b:bc:12:73:
9e:5a:ca:f6:6f:55:01:31:c2:20:26:6d:5c:5c:9c:
32:03:f7:5c:bc:60:86:3d:97:7a:ae:7b:82:25:9b:
14:91:69:d4:e8:7a:fb:35:c5:37:fc:69:fd:a9:52:
d2:bc:9b:d7:cc:6e:e0:01:24:0e:5e:93:dc:44:65:
12:fe:cc:be:c2:14:53:d5:77:a9:72:88:29:a7:f0:
65:02:75:08:31:1b:db:25:15:67:5e:f7:58:47:4b:
ea:ee:fe:9c:2e:8d:71:f4:fd:6e:3d:2e:1b:37:a6:
dc:79:42:3c:62:bc:49:a4:b7:04:fc:31:ab:5b:92:
5b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D3:EF:9C:DE:37:B4:15:2E:EA:E4:B1:67:A6:0A:F8:CB:3A:0A:A9
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/qNPvnN43tBUu6uSxZ6YK-Ms6Cqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.208.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:12:64:1a:d3:f1:96:f9:af:be:82:63:6d:e5:f1:3b:6d:d2:
3b:b2:1b:b1:51:7a:d3:1e:1a:3d:5e:7b:85:fd:f6:72:e0:83:
1b:93:57:57:be:4d:06:63:61:8f:3c:cd:8b:6e:4b:27:07:39:
eb:7b:cc:25:08:98:b7:8d:f3:f1:e9:dd:31:b9:0d:30:c0:b9:
3e:90:04:3a:1c:d0:e9:f4:b5:46:c6:70:ff:4e:4f:b3:c0:c3:
4c:03:f6:00:bb:8b:38:fe:58:3d:6d:71:16:3d:35:d8:4e:3f:
79:75:2d:8b:76:4c:05:b2:e7:9f:39:d4:bc:28:7c:13:a8:5c:
3c:30:b7:44:88:00:97:f9:4f:37:15:7c:de:f5:26:68:b3:3b:
54:c5:f6:66:aa:26:18:48:a8:76:ec:c1:db:f3:2f:15:b4:64:
88:fd:16:43:36:bf:69:b3:d8:31:1b:10:b5:a2:26:cd:9f:7d:
7b:ea:30:8a:24:ac:73:98:2d:dc:c5:15:eb:77:be:0f:69:47:
a7:d0:32:02:5f:84:5e:a0:57:35:60:40:cc:64:2b:9d:96:ec:
29:32:90:6a:e3:c8:bc:a3:e7:d3:69:80:0f:57:15:8d:f8:13:
e7:26:23:31:ae:96:7f:ad:fc:c2:4f:cf:5d:25:02:0b:fd:f5:
ea:bd:32:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:27:19 2026 by rpki-client