Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7Bjct6X4dCcEANaXeTHmWp-kc0I.roa
File: 7Bjct6X4dCcEANaXeTHmWp-kc0I.roa (raw, json)
Hash identifier: jHmzV8OA8N0gCrtd+XMkVrirvP7CjesT6byDIbY5aBA=
Subject key identifier: EC:18:DC:B7:A5:F8:74:27:04:00:D6:97:79:31:E6:5A:9F:A4:73:42
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F1F1652DBFF1E5C1722C9C3485374482A
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7Bjct6X4dCcEANaXeTHmWp-kc0I.roa
Signing time: Wed 01 Jul 2026 19:09:44 +0000
ROA not before: Wed 01 Jul 2026 19:09:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60404
IP address blocks: 13.143.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1f:16:52:db:ff:1e:5c:17:22:c9:c3:48:53:74:48:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 1 19:09:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec18dcb7a5f874270400d6977931e65a9fa47342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0c:eb:07:92:23:b7:69:ae:a7:3a:f6:ad:86:
68:40:3a:5d:6c:c5:75:28:1e:8e:36:0c:bc:3f:61:
ec:60:de:66:9d:49:51:0d:6a:4d:d2:45:40:14:18:
06:26:1a:e7:48:b5:e0:75:73:7d:e5:6e:d0:87:01:
0b:1a:ba:93:c7:f5:4c:8e:41:73:45:02:fa:28:20:
f3:ed:62:4e:44:02:a2:3d:e5:41:0c:98:56:4d:b6:
04:a5:f3:8b:d3:06:e3:31:65:6a:5a:3d:51:d4:05:
48:7b:80:f0:1d:5d:0d:b2:e5:61:35:71:f8:03:88:
7a:c1:b4:2d:a8:b7:e7:a1:8a:84:2a:dd:d0:ba:69:
97:39:57:dd:de:ad:c2:f1:0c:34:af:2e:88:51:89:
0c:b8:8a:15:4f:ef:fc:85:06:04:2b:72:d3:8c:aa:
b3:05:b6:e8:df:53:b4:2f:85:0b:af:96:8e:d4:f4:
f4:a0:4b:f1:5c:9a:54:18:f8:ce:a2:2e:93:88:b7:
1e:99:ba:cb:81:f8:74:26:8e:21:19:21:b1:29:d8:
1a:d3:be:c7:08:1e:c7:11:62:ae:98:a5:ec:f6:32:
22:3e:6b:7b:93:da:62:27:7d:b9:0a:38:b7:b7:a1:
cc:70:ca:32:be:36:dc:07:d7:6f:69:44:bc:ee:58:
7c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:18:DC:B7:A5:F8:74:27:04:00:D6:97:79:31:E6:5A:9F:A4:73:42
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7Bjct6X4dCcEANaXeTHmWp-kc0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.203.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:77:ec:26:13:0a:92:58:99:fd:b3:4f:4d:4c:75:8a:f9:a2:
48:32:f5:89:53:02:72:ba:52:be:56:0a:23:bf:f7:62:f3:16:
c6:80:e9:4e:84:e9:a6:ee:54:ea:ca:d3:e5:8e:04:66:63:1b:
83:34:39:93:41:2a:62:91:21:e1:96:42:b9:ca:5d:f7:e9:98:
d6:9b:4b:c1:2b:fa:4e:ea:f0:c0:d8:09:e4:c9:ec:29:08:7a:
e9:46:8f:53:52:a6:43:bb:ce:a2:97:88:70:8b:68:6e:89:7f:
50:1c:5b:25:84:87:a8:3d:74:b6:bd:04:85:c2:29:96:ef:8a:
c9:28:ce:c3:d6:96:94:40:d6:5d:e2:07:1c:eb:f0:b5:63:d7:
c3:cf:38:89:23:f6:4e:e4:68:ee:82:9f:0c:44:96:0e:8e:87:
8e:e3:27:c7:c7:52:08:5d:de:91:0c:b3:e0:52:6f:a4:1e:5d:
d1:bd:75:70:67:1e:3c:0e:2f:15:a1:04:87:96:f0:8d:ae:43:
5b:e3:24:55:17:36:f9:dc:b3:96:24:77:50:68:9b:fe:58:17:
b5:3f:e7:cd:69:50:41:bf:bf:9f:ca:1c:c2:87:a3:df:4d:0a:
05:8e:76:b2:06:1e:5d:51:01:bc:e7:fc:03:1b:05:0a:88:76:
50:20:67:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:27 2026 by rpki-client