Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Kem66tP8_yULEjJxbD-gTMiKzzk.roa
File: Kem66tP8_yULEjJxbD-gTMiKzzk.roa (raw, json)
Hash identifier: 6wxdBvYNhul8cQr8Yrduo6uVgKoynDzddp1/zWt5PkE=
Subject key identifier: 29:E9:BA:EA:D3:FC:FF:25:0B:12:32:71:6C:3F:A0:4C:C8:8A:CF:39
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F8663D0FE5977E065425B7609818B34C1
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Kem66tP8_yULEjJxbD-gTMiKzzk.roa
Signing time: Tue 21 Jul 2026 20:35:16 +0000
ROA not before: Tue 21 Jul 2026 20:35:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207590
IP address blocks: 13.143.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:63:d0:fe:59:77:e0:65:42:5b:76:09:81:8b:34:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 21 20:35:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29e9baead3fcff250b1232716c3fa04cc88acf39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:93:e0:92:f7:6d:10:87:a5:63:bf:05:fc:bf:
9f:e1:25:f8:33:eb:9a:41:65:bd:ed:67:d0:fc:c7:
7f:7d:51:3f:de:42:8c:ca:5a:5b:81:62:b0:33:cb:
7e:e3:a7:58:80:9e:80:6d:c2:00:eb:6e:95:91:48:
38:b0:35:7e:fa:cc:dd:49:03:18:5e:d7:3e:17:f2:
91:da:b0:17:4e:07:83:62:77:54:24:0a:5d:c5:dd:
26:c0:22:f1:3c:ad:23:ee:c7:7c:5e:5f:f3:a3:4a:
6a:e6:75:04:fc:c3:ff:44:59:91:e9:35:6a:66:19:
a6:07:21:40:65:58:1d:92:70:97:0d:1b:b9:eb:35:
a9:7e:90:b9:f1:91:07:f7:7e:ad:37:37:83:0e:e6:
f4:38:db:14:d3:12:0b:a8:34:31:0f:72:50:1e:c5:
c1:d6:91:2d:c4:72:d2:92:81:ec:fb:04:9a:c3:38:
00:3a:70:2b:f5:52:3e:82:c7:df:ac:a2:52:ef:fc:
26:b8:be:1f:72:18:a8:5d:14:6f:cd:21:df:9c:c1:
a0:28:5d:83:a6:94:35:e7:58:c9:5e:d1:70:f1:a2:
4f:a1:0b:73:05:20:04:10:11:d4:c8:ad:aa:47:c8:
31:56:62:74:41:ca:32:97:64:db:7c:fc:7b:f4:74:
bb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E9:BA:EA:D3:FC:FF:25:0B:12:32:71:6C:3F:A0:4C:C8:8A:CF:39
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Kem66tP8_yULEjJxbD-gTMiKzzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.254.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:1a:e4:30:ec:6e:1c:19:23:81:b2:8e:e4:b1:a9:1d:c1:e0:
f9:7f:b0:7d:f7:47:cd:35:4e:fe:b0:e9:a8:4e:06:8a:18:7a:
91:af:33:17:21:28:7b:5a:7e:91:53:19:17:b1:07:78:30:6d:
02:b4:80:2e:13:48:03:0b:4f:ff:ca:b9:6b:3f:7b:6c:19:b1:
12:30:f7:d8:13:53:f4:08:0d:3f:6b:0b:1f:3c:a5:db:53:dd:
db:e8:59:3f:81:4d:5f:47:4a:53:11:6d:5c:1c:b5:f2:f0:47:
7f:73:d6:bf:b0:b8:50:18:33:1c:cc:74:7e:12:e6:9a:5a:98:
25:b0:19:c1:35:91:06:60:f3:ff:c4:a5:bf:04:8b:a7:57:2d:
66:34:d7:af:51:f1:5d:0a:93:15:11:85:95:4e:04:76:47:59:
5f:60:70:cb:b4:bd:92:cf:c5:ec:a6:ed:47:e5:d9:57:8f:78:
d6:de:f6:e8:b3:30:1f:f9:54:03:06:f0:8a:ea:e9:fb:e1:f8:
20:23:5a:d8:67:78:50:8b:3f:38:88:44:15:62:6d:50:38:ec:
01:31:0e:60:d4:04:39:44:58:f7:d7:5b:00:a1:a9:8f:ab:a6:
3b:0f:33:b0:80:f5:dd:df:ed:47:53:8a:c4:ec:8e:b7:25:b3:
f3:84:fc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:32:51 2026 by rpki-client