Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OifniCxtYWswuNOo-Kh4zbZkZ3s.roa
File: OifniCxtYWswuNOo-Kh4zbZkZ3s.roa (raw, json)
Hash identifier: B0x58ePMHsmCPEHBEKD17cAsI5s1Sv5NpGMLA2wcXy8=
Subject key identifier: 3A:27:E7:88:2C:6D:61:6B:30:B8:D3:A8:F8:A8:78:CD:B6:64:67:7B
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F7179CB1CE21D883966227C63E094BF97
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OifniCxtYWswuNOo-Kh4zbZkZ3s.roa
Signing time: Fri 17 Jul 2026 19:07:15 +0000
ROA not before: Fri 17 Jul 2026 19:07:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219443
IP address blocks: 13.143.140.0/24 maxlen: 24
177.1.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:71:79:cb:1c:e2:1d:88:39:66:22:7c:63:e0:94:bf:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 17 19:07:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a27e7882c6d616b30b8d3a8f8a878cdb664677b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:65:7a:8b:5f:81:72:a4:c1:19:bc:6e:46:6a:
6c:8e:8c:3d:5f:ef:59:1a:62:74:b5:73:49:4f:45:
5b:1f:6f:1b:63:6a:3f:af:3c:9b:84:54:40:4b:0f:
46:3b:14:5f:fb:6c:0d:25:cf:10:a3:fb:f2:a5:82:
7f:76:d9:48:9d:49:9c:3a:51:5e:c2:3b:23:96:b5:
8a:68:09:f7:91:31:c6:b9:08:cb:83:c0:17:a7:0d:
0d:b2:6b:28:2e:5f:34:59:38:90:a8:a5:3d:30:df:
09:5b:ee:b3:35:9f:e5:4a:0c:c0:8e:0b:f5:95:89:
35:bd:26:58:32:6d:af:da:4b:82:38:80:4b:83:29:
79:eb:64:60:37:f5:91:7b:7e:5a:47:fb:88:9a:a8:
cc:32:a6:57:77:ff:06:c5:91:a9:a1:36:4e:6b:0a:
02:7f:3d:41:62:6f:9b:e2:f8:b2:9a:b2:8c:74:3d:
c6:8d:7b:8d:b9:1a:1e:1c:5d:79:fc:70:e6:34:37:
eb:e7:d9:4f:9e:80:91:be:a8:40:6f:e1:6b:36:14:
a1:bd:bf:62:ca:b4:4a:16:bb:16:4a:c5:70:54:69:
9b:2c:e6:a5:af:03:05:85:1f:89:a7:c9:d9:8e:df:
be:c9:13:7e:47:30:42:55:9f:f5:9e:87:be:ea:f5:
eb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:27:E7:88:2C:6D:61:6B:30:B8:D3:A8:F8:A8:78:CD:B6:64:67:7B
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/OifniCxtYWswuNOo-Kh4zbZkZ3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.140.0/24
177.1.194.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:23:c9:f8:3a:7a:31:9b:25:bd:fd:10:df:42:81:ba:80:a0:
9d:ce:e4:8a:03:9a:9c:bf:46:bf:56:3c:bc:39:87:d9:86:80:
45:39:cb:96:9e:ec:9f:08:6d:94:59:b5:c2:8a:af:ef:04:fa:
b7:1f:c9:e6:05:2f:98:8a:96:25:e2:de:ff:b5:88:fc:55:cd:
5f:31:9e:d1:5b:f1:2e:2b:00:91:20:06:10:c4:e8:2e:ac:a0:
9c:ff:8c:1f:50:12:d9:a1:87:f8:e3:87:b7:c1:a6:d7:c1:03:
8c:cd:0e:e2:f7:01:b8:ae:1b:77:ff:ca:cf:b2:9c:26:84:91:
5f:c4:09:72:ac:6d:c5:78:60:4e:93:7b:28:c9:c8:25:81:84:
d4:e3:3f:63:27:56:b9:c4:d5:e0:51:df:43:ce:14:f1:da:fd:
e3:8a:91:4e:18:10:42:52:36:15:4f:84:4e:5d:35:4a:84:bb:
0a:df:fe:1f:73:8d:a8:ac:dd:1f:64:02:57:d9:eb:29:a1:42:
06:b4:4c:5c:e9:4a:15:b9:56:5c:99:7d:cb:02:fc:c5:e9:35:
32:19:c7:21:8c:fe:9c:c6:f6:77:c4:6c:0c:c8:9f:cb:49:51:
ea:59:71:3e:8f:13:d1:fb:3d:28:d2:2e:a2:60:51:99:2c:87:
13:a7:af:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:48:55 2026 by rpki-client