Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/L-3m9mN0qHr9jRQ1yJ8NenXXG1U.roa
File: L-3m9mN0qHr9jRQ1yJ8NenXXG1U.roa (raw, json)
Hash identifier: Epr1YamLHu5TwN8f47+I94RFpSRTsm1CvRlVQBrh8oM=
Subject key identifier: 2F:ED:E6:F6:63:74:A8:7A:FD:8D:14:35:C8:9F:0D:7A:75:D7:1B:55
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F42F167E4E44362ACF1583330AB2A9ED9
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/L-3m9mN0qHr9jRQ1yJ8NenXXG1U.roa
Signing time: Wed 08 Jul 2026 18:15:44 +0000
ROA not before: Wed 08 Jul 2026 18:15:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15731
IP address blocks: 13.143.211.0/24 maxlen: 24
13.143.219.0/24 maxlen: 24
13.143.227.0/24 maxlen: 24
13.143.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:f1:67:e4:e4:43:62:ac:f1:58:33:30:ab:2a:9e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 8 18:15:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fede6f66374a87afd8d1435c89f0d7a75d71b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:23:b1:1e:68:97:30:eb:db:f8:54:5d:e6:72:
66:1b:52:9a:80:a0:ca:d9:6e:db:95:45:6a:93:db:
b7:9f:9e:a7:85:18:c8:01:15:95:87:d5:de:53:34:
0f:33:d2:13:79:38:22:9f:04:bd:a6:53:61:51:7d:
4f:84:ab:99:e5:85:9d:38:4c:7b:6e:20:6d:8a:fa:
36:57:23:d3:39:06:0e:0a:28:d7:e1:71:d2:10:a1:
ac:b5:ff:08:15:3c:31:da:77:95:5a:f5:1e:08:1a:
7f:80:ec:da:db:21:2f:d6:ec:1f:60:c2:10:91:be:
f3:4b:a9:ec:43:cd:01:2f:34:d0:98:bf:35:e1:34:
a3:62:9c:9a:7d:d9:22:3f:9c:ed:75:9d:2a:9b:a2:
30:6d:83:06:06:15:ba:41:dc:74:be:f2:d5:e1:46:
b2:3c:89:c0:bb:fe:97:82:4e:5c:4d:cf:8e:77:63:
8a:4f:5c:01:8c:97:9e:81:97:0c:33:71:39:8a:67:
2f:73:3d:ad:7f:3e:fd:37:00:9b:57:34:b7:c6:cc:
33:f2:c3:72:0f:29:9e:9f:0b:4d:05:e1:16:e9:fc:
b0:12:76:75:55:78:52:5c:15:58:f9:2c:e8:38:61:
cd:81:aa:c8:53:35:78:86:13:28:a9:88:35:f7:74:
02:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:ED:E6:F6:63:74:A8:7A:FD:8D:14:35:C8:9F:0D:7A:75:D7:1B:55
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/L-3m9mN0qHr9jRQ1yJ8NenXXG1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.211.0/24
13.143.219.0/24
13.143.227.0/24
13.143.248.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:92:b8:1b:ae:ad:52:a6:7a:74:91:f3:ca:ec:e2:10:3f:6f:
da:ec:0e:0c:d1:32:0f:af:b5:03:33:e7:e3:e1:78:ff:8c:45:
aa:d7:63:67:35:65:71:36:de:6f:ca:ea:31:8a:e7:6c:25:a6:
d0:a6:07:6e:f7:e8:20:5c:e1:2b:9c:6a:ca:6b:17:a3:fe:47:
17:7b:f3:fb:e0:78:26:76:fe:bd:80:8c:13:cf:08:f1:a5:67:
83:e1:f0:58:ef:ff:ee:63:b1:9a:67:a4:f3:71:cf:c4:c6:3a:
5f:d3:8b:a7:be:94:f2:ce:d3:ac:0c:2a:a6:ef:f8:30:5e:4c:
56:47:a2:fb:2c:4a:35:78:1b:df:5d:ca:0b:ed:31:1b:f2:98:
53:cd:b4:06:7b:35:da:9d:d0:fe:28:1f:99:f3:25:26:05:46:
fa:a8:70:94:72:35:dc:43:04:fa:06:b2:b8:45:3a:71:10:e7:
da:00:e0:4a:e0:57:88:cd:6a:64:4b:5f:23:15:e9:b7:15:3f:
12:16:e5:d6:fd:1c:30:63:4a:42:3d:81:c3:42:f2:bc:58:b5:
f1:ca:c2:80:d2:21:4b:e1:32:66:66:de:7f:2d:f7:6d:07:dd:
21:06:85:27:e3:7d:da:8b:b8:b2:8d:8b:ff:af:d8:59:c4:4a:
31:a5:e5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:54:40 2026 by rpki-client