Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xZle_XTDOnvOIpnXGqLnMEVFERw.roa
File: xZle_XTDOnvOIpnXGqLnMEVFERw.roa (raw, json)
Hash identifier: TYY8DtBMPynBc7x5tuGCh7VSeWpf9F5hAKmfnnsDfNM=
Subject key identifier: C5:99:5E:FD:74:C3:3A:7B:CE:22:99:D7:1A:A2:E7:30:45:45:11:1C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A034A428F8713EDF56933B6F640C0A7DE8
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xZle_XTDOnvOIpnXGqLnMEVFERw.roa
Signing time: Mon 24 Aug 2026 16:39:28 +0000
ROA not before: Mon 24 Aug 2026 16:39:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4766
IP address blocks: 13.143.88.0/22 maxlen: 24
13.143.92.0/22 maxlen: 24
13.143.96.0/22 maxlen: 24
31.77.176.0/23 maxlen: 24
177.202.126.0/23 maxlen: 24
179.198.0.0/22 maxlen: 24
179.198.12.0/22 maxlen: 24
179.198.16.0/22 maxlen: 24
179.198.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:a4:28:f8:71:3e:df:56:93:3b:6f:64:0c:0a:7d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 24 16:39:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5995efd74c33a7bce2299d71aa2e7304545111c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2a:6a:d9:20:24:f3:be:ad:0f:a8:5e:6d:a7:
c4:12:1a:b3:a2:89:61:9c:4a:7c:5c:6e:a9:2e:2e:
96:c9:3e:c9:34:18:92:86:13:ce:0f:4c:59:ac:05:
ca:e9:3a:31:65:02:fc:bd:af:bf:d0:70:95:fa:9c:
5e:41:48:36:12:f7:57:64:b6:bf:78:65:34:d6:8f:
d2:94:48:ba:c9:3a:79:b0:11:9a:8d:63:12:3a:71:
19:93:5b:a7:d4:6c:26:68:64:53:45:48:5c:06:e2:
41:59:70:d6:89:cb:41:3f:fb:73:87:0e:96:d2:33:
05:e5:9b:1c:ab:51:2e:6a:9c:1a:ff:ec:a8:72:63:
c9:4a:d1:22:ec:47:b8:a4:c5:31:4a:a8:4a:fc:5d:
8f:77:57:ed:3c:ac:b9:36:d7:e6:0c:f9:50:f8:27:
f9:69:26:be:80:28:35:3f:03:86:02:80:31:36:b9:
b7:50:65:97:5e:6e:01:f1:9e:93:27:44:bd:94:d2:
3a:bf:75:ac:10:6f:47:80:1e:f5:97:36:e3:9a:1a:
71:dd:e9:08:1b:3f:0c:99:43:b4:c8:c9:78:85:0e:
1f:2c:eb:04:49:56:ca:e7:da:80:ad:02:1e:8f:26:
5b:b6:5c:db:d3:f6:01:fb:ce:98:9c:62:3c:fe:4f:
8c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:99:5E:FD:74:C3:3A:7B:CE:22:99:D7:1A:A2:E7:30:45:45:11:1C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xZle_XTDOnvOIpnXGqLnMEVFERw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.88.0-13.143.99.255
31.77.176.0/23
177.202.126.0/23
179.198.0.0/22
179.198.12.0-179.198.19.255
179.198.24.0/22
Signature Algorithm: sha256WithRSAEncryption
89:de:09:9c:1d:04:45:d6:6e:f6:e0:6d:b2:3c:cc:0c:63:4f:
dd:1a:23:17:15:e8:af:05:6b:80:c4:3f:0b:31:07:0c:fd:d4:
6f:1e:af:49:28:74:e2:c8:18:b3:09:3b:61:32:03:5e:6b:01:
b8:d9:5b:22:34:ce:26:22:cc:1c:80:5f:b4:0a:28:00:fc:7d:
e8:c6:77:66:4b:48:89:25:97:77:c0:c5:9f:36:af:fd:e5:5c:
1d:ea:e4:7a:23:fc:0e:34:1e:75:20:78:61:5f:c7:c6:9a:05:
fe:51:c6:cc:db:66:26:eb:e6:bf:a8:af:98:8b:56:f2:b5:d9:
3d:de:c1:1c:cf:83:80:d8:ba:e9:19:ff:bf:e7:56:8b:13:2e:
38:37:5d:e8:b2:1f:64:90:ec:7e:f9:32:7c:47:1d:12:9c:59:
27:ec:6e:b7:ec:f2:6f:27:8d:7b:18:a3:70:25:38:6c:07:69:
bb:bd:c8:3c:ba:1d:72:b1:2e:2c:8d:52:3b:12:c7:c7:41:c8:
09:06:ac:8d:17:17:84:da:de:05:31:5b:5b:33:30:64:5a:5f:
e7:2b:b1:3d:8c:2f:b8:df:cd:00:d2:03:4e:df:61:e2:65:df:
cc:0a:35:05:db:6b:cf:2e:31:d4:b8:0c:67:86:64:94:e3:19:
44:2b:86:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:56 2026 by rpki-client