Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/z9CJL3Me9eCaMunUaQJifGkk3h0.roa
File: z9CJL3Me9eCaMunUaQJifGkk3h0.roa (raw, json)
Hash identifier: 8Dziu2l8VHaaSdtl3FAz8y2A42k4fbEiCJmilxXmu7U=
Subject key identifier: CF:D0:89:2F:73:1E:F5:E0:9A:32:E9:D4:69:02:62:7C:69:24:DE:1D
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0E532550947AD5AF7B53BC7D66348E715
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/z9CJL3Me9eCaMunUaQJifGkk3h0.roa
Signing time: Sun 27 Sep 2026 23:27:56 +0000
ROA not before: Sun 27 Sep 2026 23:27:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215102
IP address blocks: 13.143.246.0/24 maxlen: 24
31.77.0.0/24 maxlen: 24
31.77.139.0/24 maxlen: 24
179.254.104.0/24 maxlen: 24
201.10.80.0/24 maxlen: 24
201.10.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:32:55:09:47:ad:5a:f7:b5:3b:c7:d6:63:48:e7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 27 23:27:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cfd0892f731ef5e09a32e9d46902627c6924de1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9b:ac:6e:2c:92:b4:7e:5d:e4:1a:3d:6d:34:
64:6c:c5:1b:fd:7d:e0:44:4f:74:a5:4c:13:09:7f:
4f:4c:e8:f8:8e:96:e1:a1:1b:71:ab:35:fa:73:cb:
7e:55:10:56:36:7a:fc:7d:bc:65:c8:b3:b7:86:4a:
34:7f:c0:15:ed:62:35:86:f3:26:52:16:c8:61:b9:
bd:69:a8:8a:2e:b3:82:a7:ea:18:5e:73:71:24:df:
82:5a:76:4a:76:7d:95:16:38:03:de:f4:9f:bf:a3:
fe:d2:f3:63:6a:39:c6:b4:d5:1d:a4:10:52:43:96:
5f:85:84:9c:5a:b8:9e:49:5f:73:79:1e:5e:a5:b7:
ec:9f:11:b7:04:6b:d0:f5:2c:10:a1:49:b8:a4:7d:
17:f6:77:bc:13:b6:32:b5:56:be:8c:82:59:33:7e:
50:77:57:3b:6c:f4:a4:fa:1b:24:c1:18:7b:65:0e:
69:ea:60:ac:af:55:c7:7e:86:28:70:9a:4e:49:6f:
b0:67:7f:2e:5b:03:61:96:e2:be:59:cd:9c:8b:3c:
8d:a6:ae:b4:79:28:27:61:ab:c4:6c:8d:cb:c5:c8:
89:fa:cf:58:1c:ac:08:44:52:00:58:5c:23:26:86:
9a:4c:8e:c8:a9:7c:df:06:c8:f1:aa:e2:64:54:49:
f4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D0:89:2F:73:1E:F5:E0:9A:32:E9:D4:69:02:62:7C:69:24:DE:1D
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/z9CJL3Me9eCaMunUaQJifGkk3h0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.246.0/24
31.77.0.0/24
31.77.139.0/24
179.254.104.0/24
201.10.80.0/24
201.10.87.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:7f:48:07:cf:35:e9:a3:b0:86:ca:9b:af:1a:84:1f:82:dc:
6e:4f:24:05:38:bb:f1:69:de:c9:ad:f9:64:4c:92:ef:4e:6f:
61:0d:2e:1b:7e:95:b5:89:68:db:30:7e:37:f5:2f:22:56:97:
ee:09:4f:89:78:d3:52:43:25:f8:66:1a:2d:d5:45:31:e0:a9:
e2:bd:22:44:36:81:fa:32:d2:ea:92:ef:ae:fb:7f:75:58:e1:
67:f4:c5:2e:05:6a:43:b8:cd:a2:5c:86:24:cc:ef:47:47:e6:
82:af:e2:2c:fb:92:8a:d9:0e:d7:7e:4f:26:ff:88:ce:2b:09:
ef:8d:e0:e7:5b:3d:72:a3:72:a1:5e:26:af:a5:ec:39:66:5e:
6b:e6:e2:a1:94:f8:26:a4:79:7d:ab:b5:6a:4c:c4:75:4d:ae:
f7:76:d2:7f:54:86:0d:6a:7f:11:9e:8a:80:68:83:aa:3d:c0:
88:c4:b8:83:4d:9f:1e:7b:98:6c:02:17:86:a5:f0:de:da:cd:
d4:14:51:8a:d5:4a:cd:46:bf:8b:0e:d7:12:66:79:46:93:63:
47:bc:bd:14:66:01:55:c6:92:97:ed:26:f0:d9:e2:98:42:ca:
25:ae:b1:06:96:bd:f7:b4:97:f0:9b:9c:1d:50:7c:35:37:65:
9a:1d:8a:84
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAaDlMlUJR61a97U7x9ZjSOcVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwOTI3MjMyNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmQwODkyZjczMWVmNWUwOWEzMmU5ZDQ2OTAyNjI3YzY5MjRkZTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZusbiyStH5d5Bo9bTRkbMUb/X3g
RE90pUwTCX9PTOj4jpbhoRtxqzX6c8t+VRBWNnr8fbxlyLO3hko0f8AV7WI1hvMm
UhbIYbm9aaiKLrOCp+oYXnNxJN+CWnZKdn2VFjgD3vSfv6P+0vNjajnGtNUdpBBS
Q5ZfhYScWrieSV9zeR5epbfsnxG3BGvQ9SwQoUm4pH0X9ne8E7YytVa+jIJZM35Q
d1c7bPSk+hskwRh7ZQ5p6mCsr1XHfoYocJpOSW+wZ38uWwNhluK+Wc2cizyNpq60
eSgnYavEbI3LxciJ+s9YHKwIRFIAWFwjJoaaTI7IqXzfBsjxquJkVEn0nQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFM/QiS9zHvXgmjLp1GkCYnxpJN4dMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvejlDSkwzTWU5ZUNhTXVuVWFRSmlmR2trM2gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQADY/2AwQA
H00AAwQAH02LAwQAs/5oAwQAyQpQAwQAyQpXMA0GCSqGSIb3DQEBCwUAA4IBAQCe
f0gHzzXpo7CGypuvGoQfgtxuTyQFOLvxad7JrflkTJLvTm9hDS4bfpW1iWjbMH43
9S8iVpfuCU+JeNNSQyX4Zhot1UUx4KnivSJENoH6MtLqku+u+391WOFn9MUuBWpD
uM2iXIYkzO9HR+aCr+Is+5KK2Q7Xfk8m/4jOKwnvjeDnWz1yo3KhXiavpew5Zl5r
5uKhlPgmpHl9q7VqTMR1Ta73dtJ/VIYNan8RnoqAaIOqPcCIxLiDTZ8ee5hsAheG
pfDe2s3UFFGK1UrNRr+LDtcSZnlGk2NHvL0UZgFVxpKX7Sbw2eKYQsolrrEGlr33
tJfwm5wdUHw1N2WaHYqE
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:34:12 2026 by rpki-client