Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/vzvWfg37fh4mEbgXcSuR__6eCpE.roa
File: vzvWfg37fh4mEbgXcSuR__6eCpE.roa (raw, json)
Hash identifier: HNdm++zVoWdHcc+GmB+rZ4FGc83xI1B6whDIrv5FlkM=
Subject key identifier: BF:3B:D6:7E:0D:FB:7E:1E:26:11:B8:17:71:2B:91:FF:FE:9E:0A:91
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FC8B8BAFEFD9E1C26A5E56B2EF11DA12D
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/vzvWfg37fh4mEbgXcSuR__6eCpE.roa
Signing time: Mon 03 Aug 2026 17:42:57 +0000
ROA not before: Mon 03 Aug 2026 17:42:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3320
IP address blocks: 13.143.122.0/24 maxlen: 24
144.31.145.0/24 maxlen: 24
201.14.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:b8:ba:fe:fd:9e:1c:26:a5:e5:6b:2e:f1:1d:a1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 3 17:42:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf3bd67e0dfb7e1e2611b817712b91fffe9e0a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c0:f2:c5:c4:3b:ac:32:5a:90:e0:f1:ed:60:
31:ca:1e:a8:5d:b6:bf:e6:76:4e:bd:79:5a:bf:24:
89:48:db:24:6f:75:4d:09:26:f6:b2:40:7f:9a:2a:
03:84:41:e7:6d:49:57:d2:4b:3e:33:a2:34:9a:ca:
ab:e3:15:36:c3:94:fc:1e:95:6b:e6:60:bb:c0:53:
34:01:70:4d:c7:76:a2:f5:83:4c:0f:5b:77:91:b1:
9d:1d:b8:e9:db:cf:20:ec:93:a2:24:e7:79:b8:3c:
13:01:a1:b4:5d:26:f6:c8:d2:6d:ee:df:a6:cc:ec:
75:5a:cc:49:61:84:8e:d6:4b:d4:c0:f5:14:8a:25:
47:e6:cf:de:a6:3d:d0:7c:a5:8d:13:c1:f1:14:78:
8b:1a:38:a0:f4:a3:62:5a:c6:70:39:07:27:ff:1e:
bc:0b:d1:c8:39:a2:4b:e9:53:77:1d:85:1c:8e:ea:
cd:4e:ab:73:dd:a2:9a:62:19:19:4b:a0:fa:ec:d8:
b2:7f:46:8b:ca:3c:54:11:97:b3:ee:4d:12:0e:ed:
30:74:a7:d4:24:8e:e1:0f:25:9c:e6:7a:fc:82:dd:
40:56:7b:d8:f8:d3:57:2c:2e:7d:07:6f:50:7f:f1:
1d:3a:13:72:b6:b1:10:97:15:b5:58:f0:73:b6:7d:
7a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3B:D6:7E:0D:FB:7E:1E:26:11:B8:17:71:2B:91:FF:FE:9E:0A:91
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/vzvWfg37fh4mEbgXcSuR__6eCpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.122.0/24
144.31.145.0/24
201.14.224.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:ff:dc:f3:a5:90:cc:f6:f2:d8:ac:4b:2a:c9:71:f3:fb:59:
30:07:3a:f2:e2:1b:59:9f:ab:42:3b:f2:b4:2f:7b:2f:79:51:
a6:98:93:02:d7:b4:17:10:b2:a7:ad:4a:75:33:ae:65:51:31:
ce:f7:4d:93:0f:67:b2:7f:76:b8:8c:28:51:f9:32:38:00:f1:
56:d8:a9:bb:f9:54:2d:56:0a:d4:a6:79:e0:e2:4b:f6:42:75:
f6:a4:5a:bd:88:33:e5:f4:1e:61:bc:2e:8d:78:46:83:2b:53:
64:85:a9:52:83:87:79:36:39:20:9d:46:f8:12:d4:dd:9f:dd:
6a:dc:ac:d6:71:c0:54:7d:9b:cf:63:df:e7:21:02:89:cf:c7:
a3:e2:c5:69:0c:64:9f:f3:1f:69:33:8e:c1:4d:d4:c2:2a:85:
74:48:be:32:68:cb:8a:38:50:58:df:f9:92:d9:eb:3b:3f:ac:
c3:d9:0c:10:47:ca:5d:f9:14:e1:97:e1:2a:7d:4c:44:6d:95:
54:51:c4:11:a0:ca:18:e0:c5:f2:e7:dd:16:d7:b9:9e:68:27:
da:ff:a1:c2:a5:f4:95:0c:65:c8:4a:58:88:63:61:ef:2d:0b:
d2:79:66:9d:ad:c4:8e:5c:70:46:3f:93:70:6f:1d:4a:26:5b:
88:c3:42:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:51:32 2026 by rpki-client