Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/PDszqDQSGoNw9Rfs698MY-y4qvs.roa
File: PDszqDQSGoNw9Rfs698MY-y4qvs.roa (raw, json)
Hash identifier: PGUUFEPMdBh4lyOAFiyYsWYSIGGcOirWjhaxeR+x2SQ=
Subject key identifier: 3C:3B:33:A8:34:12:1A:83:70:F5:17:EC:EB:DF:0C:63:EC:B8:AA:FB
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F8115292D18DB80BC94EF9B4FC0915A1D
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/PDszqDQSGoNw9Rfs698MY-y4qvs.roa
Signing time: Mon 20 Jul 2026 19:51:15 +0000
ROA not before: Mon 20 Jul 2026 19:51:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219429
IP address blocks: 2.27.68.0/22 maxlen: 24
13.143.206.0/23 maxlen: 24
13.143.220.0/23 maxlen: 24
13.143.230.0/23 maxlen: 24
13.143.234.0/23 maxlen: 24
13.143.246.0/23 maxlen: 24
31.77.46.0/23 maxlen: 24
179.254.112.0/23 maxlen: 24
201.10.84.0/23 maxlen: 24
201.10.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:15:29:2d:18:db:80:bc:94:ef:9b:4f:c0:91:5a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 20 19:51:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c3b33a834121a8370f517ecebdf0c63ecb8aafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:52:ea:6f:cc:51:bc:89:4b:7e:e1:e2:9a:62:
e4:f8:c2:ab:63:b1:24:0f:f9:c6:29:63:15:7e:29:
15:93:f6:7f:b7:9a:b7:60:d5:04:f3:ce:9e:06:42:
d7:79:76:f9:6f:05:fd:5d:f8:e7:ce:ce:69:24:e9:
46:45:44:17:e6:d3:95:55:fe:db:ba:91:16:af:36:
8e:d5:6b:4a:d7:6c:b1:58:05:ab:39:03:74:03:07:
87:95:3f:ed:9a:f4:28:fe:3f:c0:82:df:f3:ae:26:
83:a4:11:11:28:a7:3f:78:7e:03:e8:e5:37:ef:cb:
5a:79:22:f1:7f:f9:52:c2:7c:25:44:50:28:c0:c5:
6f:51:23:1d:b2:1b:c9:71:48:46:88:8a:9e:1a:04:
0a:49:3f:db:1b:00:be:4b:87:29:a9:7e:18:aa:35:
b0:f6:ac:0b:e9:b0:12:16:d7:2e:35:d6:ea:6d:1d:
85:1f:d2:93:b8:f4:39:ae:6b:96:7e:26:2a:e4:8a:
f9:81:4c:4d:a5:98:91:7d:67:77:1c:29:80:81:e1:
db:80:5e:8c:4b:0f:03:3b:0f:1b:dc:98:4e:4a:9b:
d5:30:f0:31:32:60:60:0a:ce:b7:9c:3b:fb:6a:df:
b9:68:65:08:3e:86:40:a4:65:40:a2:68:11:54:fb:
79:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3B:33:A8:34:12:1A:83:70:F5:17:EC:EB:DF:0C:63:EC:B8:AA:FB
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/PDszqDQSGoNw9Rfs698MY-y4qvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.68.0/22
13.143.206.0/23
13.143.220.0/23
13.143.230.0/23
13.143.234.0/23
13.143.246.0/23
31.77.46.0/23
179.254.112.0/23
201.10.84.0/23
201.10.92.0/23
Signature Algorithm: sha256WithRSAEncryption
17:9b:dd:c6:8e:e1:d8:00:41:09:7d:ca:8a:9a:80:3c:8a:a0:
a7:65:cc:2e:b4:48:37:f5:3b:94:ec:91:54:98:44:5a:5d:40:
d7:df:ae:b6:ce:7f:81:80:0b:f5:75:02:ee:b8:fd:b8:d8:53:
80:64:cc:33:f7:dd:4b:76:1e:fa:87:b4:19:ee:64:b6:de:39:
f2:96:b9:9a:e4:dd:2a:42:94:ba:3d:7e:10:ec:20:d7:c6:81:
e1:18:28:25:d3:ad:c5:e5:9f:50:37:4b:04:73:bf:e3:51:cc:
62:07:a0:67:db:ed:f4:bf:e2:0c:a0:ef:17:58:d4:3a:6b:ef:
ef:81:48:ca:ca:44:e6:c7:a7:db:4f:8e:82:bd:b4:11:5c:a5:
4e:5b:3f:e5:17:f7:7b:a6:e2:d3:07:34:0d:79:c2:78:1b:82:
b6:1e:d8:ba:85:5f:90:ea:de:6a:6f:9e:c5:f9:46:31:1d:58:
04:a9:2d:af:0f:d5:9e:8f:54:aa:9f:ea:4c:58:70:0d:f8:ff:
72:34:54:bb:c9:a9:ac:09:cb:42:c2:bd:8c:95:d0:d2:46:c6:
d4:c8:ca:fe:c4:0c:1b:94:31:98:ca:dc:f4:bf:38:3f:3f:8b:
47:75:c8:48:10:ba:4b:91:52:cf:79:09:14:b6:fd:4a:25:36:
37:d4:f3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:20 2026 by rpki-client