Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/FxsWcNm-fwTKuLbRp5GESRxZ8AY.roa
File: FxsWcNm-fwTKuLbRp5GESRxZ8AY.roa (raw, json)
Hash identifier: hfxGCzTkAy3pDx1GLeloJ25zApRTmJkeKYqUbWkkxl4=
Subject key identifier: 17:1B:16:70:D9:BE:7F:04:CA:B8:B6:D1:A7:91:84:49:1C:59:F0:06
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F5C5CF849E0D924A343F95AA80C02E7D0
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/FxsWcNm-fwTKuLbRp5GESRxZ8AY.roa
Signing time: Mon 13 Jul 2026 16:43:44 +0000
ROA not before: Mon 13 Jul 2026 16:43:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216334
IP address blocks: 13.143.243.0/24 maxlen: 24
13.143.244.0/24 maxlen: 24
31.77.78.0/24 maxlen: 24
31.77.169.0/24 maxlen: 24
31.77.171.0/24 maxlen: 24
31.77.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5c:5c:f8:49:e0:d9:24:a3:43:f9:5a:a8:0c:02:e7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 13 16:43:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=171b1670d9be7f04cab8b6d1a79184491c59f006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2f:47:18:ed:2e:4f:25:7b:a9:0b:2a:a8:9b:
8f:0f:4d:70:da:fd:c4:13:ea:e7:ff:be:e3:62:ac:
09:66:3b:44:81:71:b8:85:35:5a:90:e5:bd:fe:59:
3c:25:23:22:d6:8c:85:18:7f:2a:ad:ba:60:c5:06:
89:c6:93:ae:25:43:01:c3:51:31:28:d7:3b:3b:33:
34:c2:36:8c:c7:b7:a0:49:5b:2a:94:56:80:14:8b:
9c:07:c7:99:78:e5:4b:1b:7d:f6:21:be:13:06:d0:
15:ef:50:11:15:fd:f0:6a:c6:5a:c7:d0:b5:07:89:
01:08:46:3a:73:ab:b2:92:e2:aa:fe:2f:98:2c:88:
cd:a6:09:66:92:f3:1e:62:04:1b:82:00:28:cd:2b:
6b:bb:44:96:c3:1a:e8:ef:9c:cf:14:6a:7a:26:12:
a2:e8:24:11:c6:ac:b4:b2:ce:09:0d:b3:fd:7a:4c:
66:56:c1:a9:28:d3:11:a2:63:76:f9:82:ea:8f:18:
b9:35:6b:06:4e:a4:d4:01:33:a4:c0:96:d8:3a:7b:
2d:58:56:6a:c9:63:c5:fa:81:7b:20:64:f8:2e:a9:
17:93:43:c2:95:b5:27:cb:fd:15:8a:c5:cf:94:02:
53:39:4d:5e:a0:cc:83:ca:52:77:d5:26:a5:c8:c8:
25:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1B:16:70:D9:BE:7F:04:CA:B8:B6:D1:A7:91:84:49:1C:59:F0:06
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/FxsWcNm-fwTKuLbRp5GESRxZ8AY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.243.0-13.143.244.255
31.77.78.0/24
31.77.169.0/24
31.77.171.0/24
31.77.173.0/24
Signature Algorithm: sha256WithRSAEncryption
38:59:92:f5:9c:8e:6b:16:a0:9e:f6:5f:5b:f9:cf:a7:44:14:
91:37:c5:50:af:8d:f8:d6:e8:a3:12:bd:38:28:d5:09:4c:25:
14:a5:aa:71:17:42:a3:1f:61:47:8e:33:73:88:22:0f:14:94:
45:a4:64:be:59:06:57:aa:a4:da:49:b5:51:96:0c:47:03:c1:
1c:21:dc:60:54:09:1a:83:9f:c7:01:ab:c7:37:8f:68:f2:60:
30:8a:53:87:f2:31:d4:69:ee:1b:38:2c:9d:9a:67:d4:e6:c2:
20:6c:fa:51:56:32:da:b4:71:90:f5:9b:1d:56:52:be:f5:fb:
0a:d6:dc:d2:5f:8f:2c:67:d4:26:fd:a9:5a:69:9a:67:a0:df:
85:f1:1c:1f:7b:2d:e8:2d:46:f7:ad:87:e6:65:02:7e:17:c3:
59:41:43:a0:a1:d4:68:8e:10:e0:15:ae:99:57:72:14:24:31:
9f:2d:0a:07:c2:44:d9:c0:ba:c3:1d:7c:14:6d:f6:89:9b:67:
5e:f4:16:0b:8a:b6:2a:4f:f4:fe:d1:bb:4c:3d:f1:f2:26:90:
13:ac:bb:44:64:6a:4b:50:c1:78:6d:c4:c5:04:c4:c3:cc:fa:
28:77:27:a9:58:7e:d5:d3:dd:10:76:9d:7c:43:c7:01:7e:f7:
d3:7f:d5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:00:55 2026 by rpki-client