Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/134HUBiNzae5HcM0xNWHToBwfr0.roa
File: 134HUBiNzae5HcM0xNWHToBwfr0.roa (raw, json)
Hash identifier: TsIi1XBACU75ajFNyDRoJYsiFut+RzsN5IMrTVhs2PA=
Subject key identifier: D7:7E:07:50:18:8D:CD:A7:B9:1D:C3:34:C4:D5:87:4E:80:70:7E:BD
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F812C0B993CED493F91CE98BAA2C54189
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/134HUBiNzae5HcM0xNWHToBwfr0.roa
Signing time: Mon 20 Jul 2026 20:16:15 +0000
ROA not before: Mon 20 Jul 2026 20:16:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50338
IP address blocks: 13.143.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:2c:0b:99:3c:ed:49:3f:91:ce:98:ba:a2:c5:41:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 20 20:16:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d77e0750188dcda7b91dc334c4d5874e80707ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ae:84:6d:db:b2:8d:7a:95:08:d6:31:a9:7a:
0a:d6:18:cb:9f:c4:2d:d7:25:89:1c:0d:2b:e1:ed:
82:7b:56:86:5e:e1:89:22:bd:f9:e5:d4:5c:e5:30:
57:09:dc:27:73:f5:94:58:67:9b:a6:d0:30:d4:0b:
f3:a6:0b:6e:5c:a7:c3:f5:ad:f2:fb:e3:34:07:98:
83:9b:a1:6a:20:53:41:66:ef:6f:43:4b:0d:34:36:
6a:2e:77:a0:88:a6:16:ac:ae:57:82:7a:3f:a4:b1:
6d:3c:9d:8f:01:b4:d0:50:c7:0e:f4:92:13:3f:54:
fd:1e:9a:0b:9d:be:31:45:7a:e9:f5:55:a3:13:bb:
94:5a:55:6e:b1:ea:54:28:e3:a9:06:f9:82:78:5d:
19:02:d8:58:2c:b5:53:8f:83:b8:53:61:56:91:b1:
67:5f:f9:5d:32:50:a2:b6:93:04:91:91:22:98:b0:
8a:86:41:7d:e7:b8:c9:24:78:1e:e0:7a:6f:ef:33:
15:0e:f0:00:f4:cf:47:32:50:ae:20:3c:5d:3b:cf:
68:3c:76:6e:b0:44:9b:5f:9b:1e:67:cb:70:44:0e:
06:35:55:4e:06:f5:3d:6b:4b:56:a5:92:cf:2d:7f:
e7:52:13:ba:48:1a:9e:58:b8:bb:05:8f:00:87:71:
ac:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7E:07:50:18:8D:CD:A7:B9:1D:C3:34:C4:D5:87:4E:80:70:7E:BD
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/134HUBiNzae5HcM0xNWHToBwfr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.68.0/22
Signature Algorithm: sha256WithRSAEncryption
62:8a:87:aa:5a:fc:45:ea:a9:63:a0:d1:19:56:77:df:d8:2f:
4b:e2:5d:68:96:69:7c:d0:64:d9:0b:55:a8:9d:59:30:37:35:
01:b7:ff:47:33:cd:f2:ed:11:c6:2e:a6:48:cf:91:ba:75:41:
ad:89:62:c4:56:02:b9:21:06:7c:d1:9e:20:fa:f1:b0:f5:23:
83:aa:fb:26:92:a5:7f:c8:29:af:07:49:fb:af:8f:0e:4f:d8:
7b:47:0d:30:29:c6:80:50:82:01:b2:4f:e7:4e:cb:f1:cc:94:
f0:15:1a:1d:05:cb:e6:2a:31:92:93:43:26:53:cd:7a:6c:6d:
a3:cd:c1:6e:6a:e9:19:66:b2:63:c2:c8:9e:cb:2a:06:49:31:
d9:ea:cf:06:c9:78:90:09:4f:c5:38:38:d7:f8:c3:50:3f:1b:
27:39:c4:6a:a5:1a:18:3b:bc:f1:88:4f:3a:b5:33:7d:91:c8:
64:57:67:e1:80:74:e1:5b:96:45:fb:ff:99:8f:ca:56:bc:79:
b6:7b:e1:99:81:db:a5:e3:22:e9:34:b6:85:78:92:4e:63:70:
4d:cc:3d:5f:7a:47:30:a4:0c:a7:d0:40:ea:40:35:d3:0f:e6:
53:6b:9c:9d:bd:8c:c6:ed:8f:7c:6f:a1:2b:ec:65:98:0d:9f:
6d:22:3f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:22:14 2026 by rpki-client