Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zNxPVP-esDEtmhP9IqmbdzFYbMY.roa
File: zNxPVP-esDEtmhP9IqmbdzFYbMY.roa (raw, json)
Hash identifier: XuFWf2ISKne3UMhB+V35B0o3eMcF6bU8D1yKtjAnDho=
Subject key identifier: CC:DC:4F:54:FF:9E:B0:31:2D:9A:13:FD:22:A9:9B:77:31:58:6C:C6
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FCE41F52D557E8A593F6AB126A71872CF
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zNxPVP-esDEtmhP9IqmbdzFYbMY.roa
Signing time: Tue 04 Aug 2026 19:30:56 +0000
ROA not before: Tue 04 Aug 2026 19:30:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 13.143.211.0/24 maxlen: 24
13.143.218.0/24 maxlen: 24
13.143.226.0/24 maxlen: 24
13.143.238.0/24 maxlen: 24
13.143.250.0/24 maxlen: 24
31.77.58.0/24 maxlen: 24
185.176.95.0/24 maxlen: 24
201.10.81.0/24 maxlen: 24
201.10.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 16:24:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ce:41:f5:2d:55:7e:8a:59:3f:6a:b1:26:a7:18:72:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 4 19:30:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ccdc4f54ff9eb0312d9a13fd22a99b7731586cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f4:a9:b6:71:fd:12:a4:42:54:4e:67:82:fe:
c8:8a:8d:80:b0:71:8b:3e:9e:73:62:eb:8a:cb:82:
a2:88:47:01:fc:8d:ee:2b:a7:8f:93:d9:f2:c2:2e:
d1:bc:fd:94:16:20:dc:7a:0a:d7:03:e8:cc:bc:08:
55:12:ed:24:d3:8d:a2:3c:f4:3e:a1:d0:40:b0:7b:
2a:3c:0d:38:69:87:f2:8c:f2:c8:08:7c:5d:7c:38:
7a:7e:5f:82:a6:c6:3b:c9:d0:38:4a:17:3b:91:d9:
40:ab:ba:80:56:ea:4e:e1:c4:79:8a:0e:e5:f1:ca:
51:e2:11:db:e6:43:c0:76:72:55:40:46:97:fb:4c:
f3:69:7d:05:62:0b:ec:08:68:9c:89:17:35:4c:1c:
c8:dd:5c:3e:e1:3b:80:10:c1:1f:9d:7f:d7:4d:32:
72:df:3b:d4:62:63:5b:50:94:87:35:8d:a4:ea:76:
27:fd:46:a9:df:cf:0a:b1:7e:56:b3:aa:db:a2:b1:
56:02:f2:0d:51:7c:a6:00:94:90:c4:ce:94:06:70:
75:07:55:24:81:d1:d0:26:50:87:81:0d:de:1f:3a:
fc:cf:f8:c3:bc:fb:64:8e:74:83:11:a5:00:1a:c5:
84:37:d2:50:78:a6:76:3d:93:9b:34:4d:e6:91:75:
bf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DC:4F:54:FF:9E:B0:31:2D:9A:13:FD:22:A9:9B:77:31:58:6C:C6
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zNxPVP-esDEtmhP9IqmbdzFYbMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.211.0/24
13.143.218.0/24
13.143.226.0/24
13.143.238.0/24
13.143.250.0/24
31.77.58.0/24
185.176.95.0/24
201.10.81.0/24
201.10.95.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:36:ae:e0:a6:7c:df:0d:aa:b8:61:9c:2d:8d:46:f3:5b:7c:
29:4b:38:77:ea:ad:1a:42:38:61:09:74:07:44:c1:8d:8d:74:
c3:6c:b5:5d:12:d4:33:11:8f:52:ba:36:5c:c3:42:71:1f:7e:
7d:33:0d:ba:c9:70:a1:ca:e0:9a:d4:e8:f9:d3:4c:29:4f:6a:
c7:85:b2:94:46:b6:16:e5:12:16:26:63:b9:7d:be:7d:a1:b6:
5d:59:cc:3d:f5:ff:fd:a9:f5:38:c0:f0:de:00:27:4e:31:93:
39:43:36:d1:f0:26:27:72:59:d0:79:25:98:ba:ad:a0:15:5f:
b5:09:47:1f:b8:3b:29:e0:1f:48:97:1c:11:cb:59:62:0d:3b:
77:01:60:dc:1c:07:57:e1:af:1d:d7:62:b7:09:5f:2b:58:c0:
c0:a2:f5:32:21:5d:32:1d:25:09:85:ec:8c:20:1e:c8:2f:a0:
a7:cb:83:60:85:03:1d:d0:4a:c5:fd:d5:68:dc:38:cb:f0:28:
08:6d:9d:17:ee:6f:71:5d:0e:40:d8:3b:86:3f:19:cd:fb:57:
08:60:c0:bd:09:7b:9e:85:13:38:8f:1c:3f:8d:3c:ad:e7:13:
9f:12:73:49:6e:fb:5d:47:42:b7:d1:f3:27:24:6e:ad:ff:5a:
83:0b:af:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 01:40:54 2026 by rpki-client