Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Phoa3jQrb-IAQlE__NnFYPNGCpo.roa
File: Phoa3jQrb-IAQlE__NnFYPNGCpo.roa (raw, json)
Hash identifier: 5/LqeNO2exBAtlkIFuYX7BpsVeWT5htyWi5rl3zfpx0=
Subject key identifier: 3E:1A:1A:DE:34:2B:6F:E2:00:42:51:3F:FC:D9:C5:60:F3:46:0A:9A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0C4DF108507C5E61CD1B9A9640A0418EE
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Phoa3jQrb-IAQlE__NnFYPNGCpo.roa
Signing time: Mon 21 Sep 2026 16:49:07 +0000
ROA not before: Mon 21 Sep 2026 16:49:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207590
IP address blocks: 13.143.254.0/24 maxlen: 24
31.77.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:df:10:85:07:c5:e6:1c:d1:b9:a9:64:0a:04:18:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 21 16:49:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e1a1ade342b6fe20042513ffcd9c560f3460a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bd:de:8b:15:ec:f0:96:2a:52:31:fb:1f:31:
e9:31:49:6d:dc:bd:25:3d:c4:de:b9:9a:3d:2b:1e:
65:ed:6e:fe:4f:26:50:a8:86:07:77:62:84:ac:7f:
94:44:e3:f8:0e:cc:3c:fd:cf:be:f1:d7:d9:72:f4:
13:1d:5e:37:6a:a8:b9:ff:ae:ef:73:63:4e:23:1a:
7c:3a:04:df:d1:51:c4:d2:9d:fe:6c:55:e7:74:74:
d3:2f:6c:e1:6d:8b:b3:e3:19:5b:ef:b7:9f:39:0b:
64:a5:e9:14:7a:c3:1e:4d:a3:ac:b2:ad:cc:b4:be:
57:92:94:f9:d8:5f:e9:c8:65:3c:fe:59:1c:78:69:
2c:0f:24:47:b8:db:86:0e:cd:66:1e:4f:c9:08:8a:
18:24:74:1c:20:5e:b6:a0:24:a9:93:1c:aa:ff:20:
6c:c2:bc:05:45:7b:06:62:fe:08:03:37:05:e8:8b:
92:c2:b4:c7:c6:1b:8e:5b:d8:12:b2:fe:3c:41:02:
a7:11:23:cc:68:1a:42:fb:1b:12:af:d9:bd:78:af:
d8:f5:5f:6b:b5:90:bc:f3:8c:ee:01:e4:c6:70:a5:
ab:c5:90:56:7f:7f:7e:f5:48:b6:d2:be:88:89:0c:
cf:9e:58:ad:ce:75:1b:ea:b9:bb:5f:d4:28:1e:a9:
b3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1A:1A:DE:34:2B:6F:E2:00:42:51:3F:FC:D9:C5:60:F3:46:0A:9A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Phoa3jQrb-IAQlE__NnFYPNGCpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.254.0/24
31.77.171.0/24
Signature Algorithm: sha256WithRSAEncryption
26:a7:d4:50:30:d7:81:f5:7c:91:59:c8:90:3b:85:7c:ad:52:
81:d2:cb:55:dd:b0:be:44:03:3f:ee:d2:8a:40:b9:c8:44:e6:
86:4f:98:38:6c:48:bb:88:3f:9e:99:86:e3:da:53:75:34:71:
02:e5:d7:b5:26:4d:3f:2b:81:18:d2:8a:89:0c:1b:89:e4:0e:
f0:06:37:01:be:d3:01:ff:66:8a:1f:7f:43:3e:1f:83:62:10:
d0:fd:d4:af:59:c9:a5:de:22:32:b8:5d:c4:c7:a2:9f:ad:9b:
2c:2a:e2:27:ca:df:82:7b:57:68:9e:ee:d0:31:48:3d:f3:ba:
5f:a1:8d:37:e0:ad:ee:02:0c:85:28:ef:90:99:1a:39:c3:3a:
30:30:ce:7f:b9:c7:22:e2:0e:94:bf:68:e0:b6:e5:c0:dc:ee:
c9:6b:a1:c6:4d:f8:f1:9e:9a:b4:16:4a:5d:ee:08:d8:bb:fe:
61:5b:43:6f:41:29:6c:3e:9d:a4:4e:19:9b:0e:4d:03:57:6d:
2b:ed:80:e7:a0:55:85:eb:44:15:c4:22:0e:df:29:eb:10:4d:
23:97:60:b0:9b:72:6b:04:9b:26:cb:38:0d:50:14:35:d6:f7:
30:23:bf:b9:91:88:87:86:72:9e:31:16:b7:db:88:dc:a3:f8:
3b:a9:e6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:49:49 2026 by rpki-client