Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zubaC7MoETQ3vfmU_E--aG9jGtc.roa
File: zubaC7MoETQ3vfmU_E--aG9jGtc.roa (raw, json)
Hash identifier: M7C1DApQUaAF93RZ0RXjUM4rdqOvhIlBeHUc1xHjCzI=
Subject key identifier: CE:E6:DA:0B:B3:28:11:34:37:BD:F9:94:FC:4F:BE:68:6F:63:1A:D7
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0918E79223AB8D441B5E7AF0938A7A013
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zubaC7MoETQ3vfmU_E--aG9jGtc.roa
Signing time: Fri 11 Sep 2026 17:40:28 +0000
ROA not before: Fri 11 Sep 2026 17:40:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4637
IP address blocks: 13.142.0.0/16 maxlen: 16
13.143.0.0/20 maxlen: 24
13.143.32.0/20 maxlen: 24
144.31.208.0/22 maxlen: 22
179.198.56.0/21 maxlen: 21
179.236.148.0/22 maxlen: 22
179.236.152.0/21 maxlen: 21
179.236.160.0/19 maxlen: 19
191.223.144.0/20 maxlen: 20
201.8.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:8e:79:22:3a:b8:d4:41:b5:e7:af:09:38:a7:a0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 11 17:40:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cee6da0bb328113437bdf994fc4fbe686f631ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:28:9b:93:73:91:d7:b7:40:a0:42:e9:e6:dc:
80:6a:ff:0e:6d:8b:16:f3:07:53:8b:57:a9:83:9d:
94:ca:d8:94:f8:28:74:a0:58:12:2c:f2:a6:1b:0a:
c2:7a:48:6f:2f:1b:f8:b2:bf:11:39:33:ad:41:6c:
1c:4a:fe:49:d9:7f:03:9d:ae:45:2c:56:0a:e3:35:
be:c9:27:a2:92:e4:3c:63:90:83:0d:01:42:1a:bd:
69:3b:f1:89:f0:00:97:fd:cd:18:90:0e:d3:87:7e:
69:38:10:3e:55:74:70:05:de:7a:cb:5f:80:aa:ad:
84:a5:a2:bb:aa:10:c7:b9:c0:43:db:3b:f3:39:48:
0c:c2:0f:45:36:2f:73:f7:c4:a0:a5:23:29:5a:e5:
f3:dd:8b:47:7e:f7:f3:68:20:aa:e1:da:07:63:04:
a7:e7:4b:96:e6:66:72:d8:32:b2:69:c4:a6:fc:2f:
f5:18:2d:0a:86:8a:a5:47:4d:c2:3e:c7:b2:fd:22:
23:d5:39:bb:04:2e:f4:a1:a1:39:cf:dd:91:2d:55:
da:28:d8:d2:72:b3:ed:ba:a7:a4:6c:09:d7:14:11:
cd:36:e6:2d:df:84:42:01:96:2e:34:29:fb:7f:da:
e8:97:59:50:3b:86:42:38:70:69:da:6d:ed:5c:83:
ec:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E6:DA:0B:B3:28:11:34:37:BD:F9:94:FC:4F:BE:68:6F:63:1A:D7
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zubaC7MoETQ3vfmU_E--aG9jGtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.142.0.0-13.143.15.255
13.143.32.0/20
144.31.208.0/22
179.198.56.0/21
179.236.148.0-179.236.191.255
191.223.144.0/20
201.8.96.0/19
Signature Algorithm: sha256WithRSAEncryption
55:0a:8f:3e:8f:c0:e0:48:1c:d4:99:b5:38:20:fb:2e:49:6b:
b5:5b:b4:72:8a:0a:47:4f:d8:9a:69:10:d8:d5:29:dd:ee:43:
fa:8e:9e:a5:22:86:01:79:a3:f0:8f:e8:75:80:44:5f:b1:56:
63:9c:2c:c6:ce:54:54:ec:ad:1e:a0:0e:2f:52:30:b0:01:dc:
c8:39:b8:97:d9:fe:74:33:46:c0:b6:16:87:32:cf:7c:6e:37:
43:3c:ad:9a:f3:17:09:58:ee:27:75:01:74:6e:3a:4d:3f:a6:
a2:d3:e1:5d:d9:74:c9:07:14:0a:11:da:4d:6a:57:b3:f8:9e:
29:26:a2:55:ed:05:e4:3f:97:0f:77:ae:ac:bb:62:86:34:a4:
15:0e:e3:b9:4c:45:5b:4b:71:d1:11:4e:cb:9c:21:c0:1b:ef:
da:f7:ed:2b:3a:19:d9:f9:09:62:a4:e0:c0:83:a3:c3:96:e8:
ec:3a:07:42:7a:3f:53:91:e3:59:55:fb:56:ab:56:1a:42:b3:
9b:1a:72:56:9d:f7:e8:aa:5a:1f:ee:f1:20:4c:86:ff:25:fd:
d2:1f:44:6a:2b:28:13:a3:6c:c4:8f:c1:bf:fc:8c:f8:76:e9:
33:86:a6:8e:48:be:68:a0:74:f8:3c:2d:5c:82:13:ec:f2:2d:
16:84:80:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:46 2026 by rpki-client