Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xsJk7qOoAtzvm79h7Dv78yXg1zA.roa
File: xsJk7qOoAtzvm79h7Dv78yXg1zA.roa (raw, json)
Hash identifier: zHYEjXZUNdUXgQYHOpNXcKDHJzIL9ZkgIFbrhLa4bNs=
Subject key identifier: C6:C2:64:EE:A3:A8:02:DC:EF:9B:BF:61:EC:3B:FB:F3:25:E0:D7:30
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A049B49BCD5D46C109508C8E663BE7E9E3
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xsJk7qOoAtzvm79h7Dv78yXg1zA.roa
Signing time: Fri 28 Aug 2026 18:49:28 +0000
ROA not before: Fri 28 Aug 2026 18:49:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207513
IP address blocks: 2.27.57.0/24 maxlen: 24
13.143.139.0/24 maxlen: 24
13.143.143.0/24 maxlen: 24
144.31.13.0/24 maxlen: 24
144.31.29.0/24 maxlen: 24
144.31.91.0/24 maxlen: 24
144.31.92.0/24 maxlen: 24
144.31.100.0/24 maxlen: 24
144.31.101.0/24 maxlen: 24
144.31.102.0/24 maxlen: 24
144.31.111.0/24 maxlen: 24
144.31.112.0/24 maxlen: 24
144.31.113.0/24 maxlen: 24
144.31.144.0/24 maxlen: 24
144.31.248.0/24 maxlen: 24
150.241.80.0/24 maxlen: 24
177.1.202.0/24 maxlen: 24
177.1.203.0/24 maxlen: 24
179.254.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Aug 2026 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:49:b4:9b:cd:5d:46:c1:09:50:8c:8e:66:3b:e7:e9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 28 18:49:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6c264eea3a802dcef9bbf61ec3bfbf325e0d730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a6:fb:25:65:cb:39:7e:3f:45:63:66:05:8a:
7f:04:e6:f5:12:ba:7b:46:4e:31:aa:ec:f2:eb:93:
b8:20:32:ee:07:c4:44:32:15:3e:b9:02:a6:88:ac:
97:cc:2c:66:f6:5f:16:ab:7f:e6:6b:88:7b:6e:ef:
67:45:2d:61:0c:db:d6:6e:1b:ed:1c:88:58:78:3d:
c4:38:e4:4f:cd:fa:55:73:b5:76:36:ba:fc:54:41:
a3:81:46:50:5c:58:31:a5:b3:2c:50:0a:6a:ef:b5:
1e:e9:32:f1:3d:ee:5b:72:2c:32:0b:ae:d8:bb:e0:
bd:03:c3:f1:fc:e8:17:60:97:2e:a3:d0:33:33:02:
fa:b4:39:97:4b:2a:e2:fe:ce:e9:55:9c:49:e0:e8:
66:3e:20:03:aa:0c:24:b9:f1:16:1e:28:1f:03:9c:
59:4a:9f:6c:d9:fb:23:e7:c8:7b:72:83:3e:ab:95:
93:93:5f:71:34:aa:20:db:f0:90:e2:bb:48:34:cc:
a7:f5:4b:d2:c8:b0:b2:28:3e:da:3d:0b:ba:e8:ec:
f8:16:ac:d6:ff:fc:f3:a8:1d:07:12:8a:68:30:ad:
01:45:44:7a:c6:14:f1:a5:77:59:c8:6f:e0:20:cd:
b7:85:79:ac:ca:81:69:a4:52:d3:1f:ab:d6:91:f3:
29:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C2:64:EE:A3:A8:02:DC:EF:9B:BF:61:EC:3B:FB:F3:25:E0:D7:30
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/xsJk7qOoAtzvm79h7Dv78yXg1zA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.57.0/24
13.143.139.0/24
13.143.143.0/24
144.31.13.0/24
144.31.29.0/24
144.31.91.0-144.31.92.255
144.31.100.0-144.31.102.255
144.31.111.0-144.31.113.255
144.31.144.0/24
144.31.248.0/24
150.241.80.0/24
177.1.202.0/23
179.254.82.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:37:a6:93:45:af:74:a6:15:40:6d:42:3c:af:15:be:7e:44:
08:c2:20:6f:de:6f:ac:47:be:ba:19:71:d6:cb:0e:65:bc:a3:
cb:78:67:99:fb:73:03:45:57:7e:2c:09:04:8b:2c:ea:0a:88:
79:37:94:8b:04:d0:08:5d:ff:bd:63:8a:dd:5c:74:51:f2:cd:
f1:6e:da:72:78:c2:c8:71:85:d4:e2:6d:1d:7b:60:66:2a:8d:
5e:c0:bf:d8:72:9a:60:c4:49:5c:22:dd:1f:49:b1:4e:7f:78:
ff:6d:e1:37:fa:6c:73:cd:cc:e5:e5:c8:16:2f:dd:78:f2:c9:
9c:45:cd:96:48:c2:08:ea:26:93:96:87:4d:ff:eb:d0:44:57:
52:a4:16:6d:87:f0:81:83:09:11:7f:c5:b5:df:4b:b6:e1:d5:
68:b3:d7:65:46:b3:3a:1a:2c:bd:4c:26:5c:e9:da:7d:d5:98:
41:76:a8:54:73:53:8d:9c:87:b1:5e:bd:ba:c2:95:4e:66:a9:
40:22:b6:ba:ec:d1:bf:7d:7f:c8:eb:3f:dc:9b:24:d4:8f:da:
57:74:1c:46:2b:79:8e:b0:f7:ef:8b:2c:67:05:26:58:fe:5e:
8b:d6:11:80:fb:00:96:9e:d2:c6:b2:9f:03:ca:0d:89:be:8f:
2f:a1:fe:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 13:43:01 2026 by rpki-client