Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GHYOrFPyEfzGv5m0rWcFmfbg6MA.roa
File: GHYOrFPyEfzGv5m0rWcFmfbg6MA.roa (raw, json)
Hash identifier: xlcdrJ24UAzn90vO6opUQCkZrLn1cCyIZiqAJ1AvoIE=
Subject key identifier: 18:76:0E:AC:53:F2:11:FC:C6:BF:99:B4:AD:67:05:99:F6:E0:E8:C0
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F4DCEC76506D59B23B6CB8CFF1FE4CF4C
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GHYOrFPyEfzGv5m0rWcFmfbg6MA.roa
Signing time: Fri 10 Jul 2026 20:53:44 +0000
ROA not before: Fri 10 Jul 2026 20:53:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 13.143.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4d:ce:c7:65:06:d5:9b:23:b6:cb:8c:ff:1f:e4:cf:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 10 20:53:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18760eac53f211fcc6bf99b4ad670599f6e0e8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5e:ed:17:1d:47:87:d2:46:5b:9b:81:81:bd:
01:e9:78:7a:2a:8d:f9:10:ec:ad:04:c9:2d:14:3c:
51:25:25:cb:7c:f7:84:85:e0:e9:41:01:eb:2a:20:
28:c1:48:ad:a7:bc:85:35:09:ad:50:f4:11:21:7c:
3a:09:7b:8a:bc:8b:0d:13:2c:dd:53:76:76:93:d9:
22:17:fe:55:a7:12:9a:80:39:92:1a:3e:7d:f2:c3:
7e:2d:14:4f:bf:7c:16:10:d5:42:1a:3d:81:2d:7e:
a6:bc:a2:9c:84:58:87:45:44:69:a3:e6:38:33:55:
e1:df:12:ab:52:c9:b9:f9:72:b1:0d:23:e1:03:71:
89:bd:3d:d0:4a:e0:b7:cc:88:05:e9:3d:02:b8:ee:
39:aa:f1:dc:7d:04:25:84:aa:ea:d5:42:c2:e6:8d:
14:ae:9f:78:a2:70:ca:94:bb:3e:72:5b:94:cf:c1:
26:30:96:8f:b3:5c:42:59:59:1e:34:6e:f9:5d:4b:
91:19:e1:10:99:c4:da:de:03:61:c7:ee:d4:03:05:
7c:3a:ab:b2:4b:d7:2c:67:c5:78:a6:fd:27:a8:43:
da:27:49:b3:e5:37:82:e3:8e:4e:da:a4:ff:c9:ba:
f3:fc:72:ca:05:1a:4c:66:98:4b:65:96:0e:54:55:
50:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:76:0E:AC:53:F2:11:FC:C6:BF:99:B4:AD:67:05:99:F6:E0:E8:C0
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GHYOrFPyEfzGv5m0rWcFmfbg6MA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.252.0/24
Signature Algorithm: sha256WithRSAEncryption
59:f1:d3:2d:ba:67:d9:61:56:8f:b1:8d:30:ef:2d:09:3c:f9:
20:bd:d6:44:57:74:ad:68:93:5b:11:7d:9e:b6:2f:61:60:87:
7b:0a:b8:cd:6c:47:50:ea:56:e1:98:83:fb:ea:63:7d:49:93:
74:37:1e:ff:cd:0d:bc:43:de:37:b9:66:7e:71:98:13:1d:48:
71:88:c0:97:a4:3b:48:b1:86:5f:65:7d:b1:ef:18:c1:96:8b:
fc:dc:f5:2a:d6:38:49:cf:0d:73:0b:33:a1:ca:ee:88:1a:e6:
d2:51:57:be:a3:b0:3a:5e:30:6f:12:96:bc:ad:90:27:ac:90:
a1:f5:eb:6e:e9:0b:df:51:91:9b:aa:cb:10:8c:78:6a:9a:8d:
97:8d:c3:ae:ea:86:1e:13:fd:5a:79:de:9f:f8:d2:ae:05:34:
e9:57:9d:ae:c3:ff:51:43:9a:37:cd:d7:12:b6:cf:8a:34:3f:
e5:ae:1c:fb:66:a6:35:9f:7b:ba:e3:91:14:f1:35:c8:61:0a:
97:9a:4b:58:75:8d:98:9a:2e:24:f7:c8:43:25:7d:29:1a:0d:
d7:fa:a9:c0:f4:7e:40:e7:34:56:80:e6:7f:70:2c:e8:e1:fe:
23:07:ef:57:15:28:7f:a2:75:9f:3d:f0:a4:4d:5d:95:d5:05:
db:cd:9b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:19:00 2026 by rpki-client