Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Rr6DgFbJ-PSlHEnZPh0MljwH_WM.roa
File: Rr6DgFbJ-PSlHEnZPh0MljwH_WM.roa (raw, json)
Hash identifier: qp97YZcPDchMe/XBe3rhZ/0RoNI5WZHcPiRFihjD5I8=
Subject key identifier: 46:BE:83:80:56:C9:F8:F4:A5:1C:49:D9:3E:1D:0C:96:3C:07:FD:63
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F426E7B9A73F0D2C22C73B8172B4781E4
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Rr6DgFbJ-PSlHEnZPh0MljwH_WM.roa
Signing time: Wed 08 Jul 2026 15:52:44 +0000
ROA not before: Wed 08 Jul 2026 15:52:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11404
IP address blocks: 13.143.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:6e:7b:9a:73:f0:d2:c2:2c:73:b8:17:2b:47:81:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 8 15:52:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46be838056c9f8f4a51c49d93e1d0c963c07fd63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:99:9a:19:56:47:22:69:c8:bc:80:f8:df:f7:
df:a7:98:78:f0:59:03:07:b3:6b:4e:37:11:1a:46:
39:d2:16:78:a3:14:54:d7:d7:2c:bb:f8:c0:bf:0a:
fb:3b:7f:cd:94:d1:3a:17:3f:79:70:0b:e3:41:2e:
f2:d0:18:4b:fe:68:4f:67:7f:34:78:cb:12:d9:55:
04:6b:ce:e9:6b:f4:99:e8:3d:01:e3:9c:f1:35:ad:
ac:6b:eb:7c:5e:f6:e4:13:91:56:22:3f:10:c8:38:
c2:53:cb:d2:09:8b:d5:3b:6e:30:97:1f:2e:93:9d:
30:d0:4c:72:a8:95:44:39:68:15:1b:51:70:44:38:
40:f3:8d:84:10:aa:58:d8:c3:8f:35:79:d1:70:7b:
7f:ba:bc:bd:6b:81:6b:2b:de:5c:50:55:d2:c5:8d:
df:d3:bc:ff:56:02:04:e5:3c:6f:53:3a:bd:9f:e0:
d7:c4:2e:61:52:8b:eb:ee:23:e7:b1:43:0b:29:3b:
04:9b:45:96:8a:76:77:50:a4:86:b0:5e:65:4f:f0:
eb:42:91:14:27:06:ff:b8:6c:e9:d7:74:15:96:c8:
32:f5:c5:d6:25:2e:e2:8b:49:d4:bc:90:d2:7a:a2:
0e:86:9b:66:80:41:de:41:5a:f7:5f:16:04:5d:37:
38:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BE:83:80:56:C9:F8:F4:A5:1C:49:D9:3E:1D:0C:96:3C:07:FD:63
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Rr6DgFbJ-PSlHEnZPh0MljwH_WM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.80.0/22
Signature Algorithm: sha256WithRSAEncryption
15:68:04:3c:34:d6:40:5d:13:7e:1e:b2:f0:7e:34:84:29:27:
24:0a:62:17:50:ec:58:6e:a3:0f:e3:97:19:c7:99:65:c2:f4:
1e:f6:c2:58:ca:2b:98:18:b1:f4:36:97:8a:66:35:80:37:b4:
f9:ec:97:7a:1a:42:94:cc:ce:78:b4:86:57:85:b1:31:33:21:
43:c1:2e:f8:0f:25:bc:08:be:64:a8:88:0d:14:bd:0a:b9:25:
da:4d:c4:1e:a6:14:e6:de:13:21:cb:81:82:4e:51:40:84:06:
e4:65:85:d1:90:0d:01:f9:1e:5d:6f:96:70:ae:07:70:9d:f6:
b7:af:fc:a8:33:69:a8:03:21:0b:9e:09:bd:8d:dc:46:4c:0e:
47:2f:81:7a:ed:56:8b:9c:3e:8a:e4:10:f4:3d:44:f2:86:da:
26:97:1f:2a:ad:f6:2c:1e:e4:71:e8:ff:90:07:c1:67:45:43:
97:fe:19:ee:59:4a:f2:7b:ca:8a:68:dd:e9:1e:42:6f:61:bb:
db:19:d9:26:77:b0:08:b5:31:49:3e:a2:76:ae:ba:85:de:84:
02:59:db:11:d0:e5:1e:37:90:8a:52:29:0a:be:3b:8a:83:4a:
f1:55:38:d7:ce:a6:52:99:86:57:04:1b:f5:2f:8a:04:9e:e5:
7c:2b:15:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:33:34 2026 by rpki-client