Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/tOlwD3HX_UH_13us8OiPg37ej7U.roa
File: tOlwD3HX_UH_13us8OiPg37ej7U.roa (raw, json)
Hash identifier: eBOuJAkIYJyaAuoM+iZ+BmFO6f7m2oplp2xSvuBZ3Pk=
Subject key identifier: B4:E9:70:0F:71:D7:FD:41:FF:D7:7B:AC:F0:E8:8F:83:7E:DE:8F:B5
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F670AC5527A9D2FF57B76FB22C9F7E4AB
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/tOlwD3HX_UH_13us8OiPg37ej7U.roa
Signing time: Wed 15 Jul 2026 18:29:46 +0000
ROA not before: Wed 15 Jul 2026 18:29:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 2.26.131.0/24 maxlen: 24
2.27.90.0/24 maxlen: 24
13.143.201.0/24 maxlen: 24
13.143.202.0/24 maxlen: 24
13.143.210.0/24 maxlen: 24
13.143.245.0/24 maxlen: 24
13.143.249.0/24 maxlen: 24
13.143.251.0/24 maxlen: 24
31.77.49.0/24 maxlen: 24
31.77.50.0/24 maxlen: 24
31.77.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:67:0a:c5:52:7a:9d:2f:f5:7b:76:fb:22:c9:f7:e4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 15 18:29:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4e9700f71d7fd41ffd77bacf0e88f837ede8fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d9:6a:05:9d:da:dd:c2:55:26:16:ca:97:0e:
ba:17:9f:f6:31:12:d1:76:9c:92:a7:c7:3f:f0:27:
64:d7:9a:c5:56:58:5d:7d:27:07:e3:b7:84:69:7c:
55:2c:e4:f4:11:e2:dc:cc:57:11:ee:db:65:31:52:
a6:b6:af:1c:69:b1:de:d9:67:0b:13:4e:fd:d8:3c:
c7:4d:e1:79:98:20:e4:b9:5f:4e:35:2b:30:ee:0e:
ce:6e:f7:ce:f8:97:d4:0b:c0:70:f3:91:72:3e:a8:
ee:f5:65:90:f6:96:7e:4a:07:ed:28:f6:49:d3:46:
a7:59:51:7c:67:08:51:ae:13:71:86:52:08:8b:83:
3b:2c:4d:09:9d:99:52:87:df:41:43:fa:63:ad:d3:
f7:76:6c:2b:f0:68:78:08:56:24:6f:15:ce:1d:a3:
d0:91:c9:85:d3:a3:51:27:8c:bf:5f:f0:b9:71:dc:
39:af:71:8b:59:6b:ba:51:b4:77:1e:c9:aa:51:fe:
c5:da:b3:d7:1d:66:bb:e9:21:fb:c7:99:ee:a0:12:
80:9b:a8:95:da:f1:d3:84:a6:4e:49:ca:1c:28:a3:
e8:d0:b2:39:0c:6c:d8:92:13:f4:76:b4:8e:d1:ee:
d7:cd:7a:5b:62:31:59:d1:e9:05:d4:64:fb:76:48:
06:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E9:70:0F:71:D7:FD:41:FF:D7:7B:AC:F0:E8:8F:83:7E:DE:8F:B5
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/tOlwD3HX_UH_13us8OiPg37ej7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.131.0/24
2.27.90.0/24
13.143.201.0-13.143.202.255
13.143.210.0/24
13.143.245.0/24
13.143.249.0/24
13.143.251.0/24
31.77.49.0-31.77.51.255
Signature Algorithm: sha256WithRSAEncryption
55:5c:a4:c8:66:aa:12:69:99:67:f2:43:e1:51:1f:76:08:60:
1e:9d:cb:8f:72:57:b2:1d:01:a9:ca:ff:db:e6:49:fe:36:cf:
ea:02:75:f4:fc:4c:a0:e9:39:c3:c7:ae:a8:2c:00:21:14:48:
bb:c4:fa:b4:69:23:d8:9b:90:1f:da:8c:c7:ec:7a:38:06:51:
2b:52:4d:a0:af:00:7f:2b:fb:f5:59:af:cb:72:ea:5b:06:3a:
09:3c:ff:a9:a0:81:fe:3e:8a:8a:a1:cb:6b:22:5a:aa:01:58:
12:3e:70:cf:44:d5:15:94:40:e3:5e:66:66:34:2f:91:45:09:
73:d9:e8:dd:be:ad:10:dd:64:a6:f5:c3:c0:b7:b7:8e:99:a0:
fd:31:1c:28:82:30:a9:71:50:41:6e:9f:af:07:ae:96:e4:5c:
c3:74:e4:26:58:ff:b7:48:7b:88:11:1b:f3:45:b9:2c:cc:3d:
9e:22:bc:9d:6b:8a:8f:57:c3:ec:b7:66:1b:8a:de:ad:4c:20:
b5:79:03:34:d2:bb:0c:ed:b8:55:2b:e5:fc:f6:8e:4a:44:51:
32:66:d8:8d:12:6d:c6:40:5d:ce:c6:c7:fd:75:48:97:69:83:
4a:42:89:57:a8:63:89:6b:85:0e:36:81:68:92:4a:3a:20:54:
00:f0:02:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:53:49 2026 by rpki-client