Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/uIj-3pEVT_BYwlOieouelpCyYIk.roa
File: uIj-3pEVT_BYwlOieouelpCyYIk.roa (raw, json)
Hash identifier: QFyN+Jm9MUc7Xq102x6HvoHaP+YZ8/mtPU+LNDvui2g=
Subject key identifier: B8:88:FE:DE:91:15:4F:F0:58:C2:53:A2:7A:8B:9E:96:90:B2:60:89
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FB9AB440FA6FB9186ACC8A9FDC6638DE2
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/uIj-3pEVT_BYwlOieouelpCyYIk.roa
Signing time: Fri 31 Jul 2026 19:33:56 +0000
ROA not before: Fri 31 Jul 2026 19:33:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219117
IP address blocks: 13.143.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b9:ab:44:0f:a6:fb:91:86:ac:c8:a9:fd:c6:63:8d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 31 19:33:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b888fede91154ff058c253a27a8b9e9690b26089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:39:16:c8:04:25:ec:fc:72:84:eb:62:95:
5f:c8:2b:c2:ba:42:80:d8:92:28:f3:98:92:12:f6:
5c:fe:2a:8d:de:fa:7f:75:8b:d8:e5:88:8c:97:14:
89:b5:6d:ac:74:91:f7:ce:bb:5c:01:96:63:4d:f9:
17:84:4f:15:92:f0:3c:f6:45:24:9b:c8:64:e9:6d:
32:f2:31:53:1d:97:07:c4:94:11:fe:96:71:47:8e:
33:f6:6f:8d:1e:19:5b:55:cc:c0:36:ad:42:9e:d4:
3e:48:ec:ff:bd:98:df:db:cb:81:93:e6:1d:9f:54:
a5:94:19:62:e3:4f:5a:f4:a6:7f:6b:c0:b1:51:9a:
d1:15:11:04:56:05:27:e4:07:d9:18:bf:d9:a7:fb:
8f:be:b4:36:17:a1:ee:d7:4b:b1:43:1e:e6:90:13:
e5:f2:0c:3f:23:c3:03:01:db:04:4a:41:2a:f5:b1:
34:dc:bc:bf:47:f4:2d:86:e3:96:55:67:50:52:53:
62:53:a8:a5:36:1b:b3:36:29:06:7c:a3:4d:aa:f3:
11:2d:15:62:be:d0:a4:47:6a:af:8b:ca:85:7e:9e:
d3:3e:46:fd:6a:95:dc:ab:a9:b5:7f:63:07:84:cc:
75:cc:70:91:f3:38:81:d1:b7:d4:f9:a8:31:04:1b:
51:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:88:FE:DE:91:15:4F:F0:58:C2:53:A2:7A:8B:9E:96:90:B2:60:89
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/uIj-3pEVT_BYwlOieouelpCyYIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.222.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:df:c9:51:68:42:51:0b:3a:8a:b6:f6:60:dc:81:6b:71:d8:
cd:c2:c2:9d:58:64:fa:12:e9:33:fa:0b:62:73:a0:c9:91:a8:
c4:83:07:94:c6:9a:b8:cd:06:ee:80:da:4a:cd:e7:1b:89:4d:
e9:d2:d2:89:cc:e3:5a:82:a6:61:62:51:1f:84:63:1b:e9:57:
c5:10:ef:4b:13:19:cc:22:2e:4d:53:11:d8:c8:d6:01:5f:b9:
4a:27:e3:79:12:e3:de:27:90:f4:d1:46:93:0b:66:0e:3f:53:
91:77:3c:d3:f3:36:77:e6:8d:7f:15:c1:0e:a4:00:12:e1:e1:
36:ca:fb:d3:fd:81:91:a8:6a:6d:21:f4:b4:75:e9:e4:7f:86:
76:ca:41:08:9b:0d:34:26:ff:c7:48:18:55:e4:47:58:1e:78:
91:13:ca:fd:db:f7:5a:09:2e:b1:d7:23:53:3d:dd:43:f7:f6:
d6:98:ec:a2:5c:b2:58:10:7e:3d:cf:7a:89:28:26:6f:87:84:
ab:49:b9:54:5e:8f:61:48:59:00:e5:04:a9:18:3d:e0:e9:3c:
38:b6:87:b1:c6:e6:5c:70:c3:59:be:97:be:dc:6e:76:c2:a3:
00:cf:da:12:76:82:47:ac:29:89:72:b0:29:01:e7:68:5a:88:
7e:d2:0e:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+5q0QPpvuRhqzIqf3GY43iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNzMxMTkzMzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODg4ZmVkZTkxMTU0ZmYwNThjMjUzYTI3YThiOWU5NjkwYjI2MDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfc5FsgEJez8coTrYpVfyCvCukKA
2JIo85iSEvZc/iqN3vp/dYvY5YiMlxSJtW2sdJH3zrtcAZZjTfkXhE8VkvA89kUk
m8hk6W0y8jFTHZcHxJQR/pZxR44z9m+NHhlbVczANq1CntQ+SOz/vZjf28uBk+Yd
n1SllBli409a9KZ/a8CxUZrRFREEVgUn5AfZGL/Zp/uPvrQ2F6Hu10uxQx7mkBPl
8gw/I8MDAdsESkEq9bE03Ly/R/QthuOWVWdQUlNiU6ilNhuzNikGfKNNqvMRLRVi
vtCkR2qvi8qFfp7TPkb9apXcq6m1f2MHhMx1zHCR8ziB0bfU+agxBBtRZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLiI/t6RFU/wWMJTonqLnpaQsmCJMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvdUlqLTNwRVZUX0JZd2xPaWVvdWVscEN5WUlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADY/eMA0G
CSqGSIb3DQEBCwUAA4IBAQBf38lRaEJRCzqKtvZg3IFrcdjNwsKdWGT6Eukz+gti
c6DJkajEgweUxpq4zQbugNpKzecbiU3p0tKJzONagqZhYlEfhGMb6VfFEO9LExnM
Ii5NUxHYyNYBX7lKJ+N5EuPeJ5D00UaTC2YOP1ORdzzT8zZ35o1/FcEOpAAS4eE2
yvvT/YGRqGptIfS0denkf4Z2ykEImw00Jv/HSBhV5EdYHniRE8r92/daCS6x1yNT
Pd1D9/bWmOyiXLJYEH49z3qJKCZvh4SrSblUXo9hSFkA5QSpGD3g6Tw4toexxuZc
cMNZvpe+3G52wqMAz9oSdoJHrCmJcrApAedoWoh+0g4t
-----END CERTIFICATE-----
Generated at Tue Aug 4 09:52:07 2026 by rpki-client