Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/UExVCNWGJbikpP1ASqmlxwV9Ge8.roa
File: UExVCNWGJbikpP1ASqmlxwV9Ge8.roa (raw, json)
Hash identifier: BfVGUmMKkZUyU5A0sDV9sfGNN1uZj3/OXJfA4vEuZeM=
Subject key identifier: 50:4C:55:08:D5:86:25:B8:A4:A4:FD:40:4A:A9:A5:C7:05:7D:19:EF
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F8B3F1667B3C14B7384D2ACAFED44D201
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/UExVCNWGJbikpP1ASqmlxwV9Ge8.roa
Signing time: Wed 22 Jul 2026 19:13:15 +0000
ROA not before: Wed 22 Jul 2026 19:13:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 13.143.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8b:3f:16:67:b3:c1:4b:73:84:d2:ac:af:ed:44:d2:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 22 19:13:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=504c5508d58625b8a4a4fd404aa9a5c7057d19ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b2:9b:72:b0:6d:b7:25:d3:0c:e1:eb:e6:73:
93:bf:f4:60:a8:25:f1:82:8a:fa:c6:da:db:9b:9d:
0b:4a:ea:f5:29:6f:56:bd:c5:60:13:ff:96:86:2c:
66:ec:e5:4c:a6:80:7f:05:5e:53:d1:46:cd:76:42:
fe:62:0c:f5:52:8c:93:1d:cd:b0:3d:4c:2b:80:2a:
51:d7:5c:09:52:21:38:c9:a6:81:d6:1b:9d:78:7c:
1c:f6:a0:0d:ce:70:c3:22:cb:b8:c9:db:c8:ce:cd:
98:f2:c0:ab:f6:a4:fa:42:86:38:4c:22:f5:60:54:
ee:87:bc:a0:72:21:e4:68:08:10:21:2a:a5:0d:cb:
1e:5b:fa:26:f1:52:b7:49:22:f8:00:60:63:a1:42:
a2:8c:d5:58:9f:2d:a7:b3:47:fb:45:b1:37:14:4c:
9b:cb:ca:99:4a:97:7c:40:0d:4f:78:71:5c:ee:9c:
04:76:ed:59:25:80:12:d2:38:f8:a0:46:74:db:12:
cc:57:ec:37:88:74:5d:0f:cd:4e:3a:f6:b9:3b:d8:
cc:27:ec:85:e4:40:81:f9:5f:ab:a6:10:fc:e5:81:
b5:ad:fb:c9:de:2a:87:7b:14:21:02:18:4e:98:d4:
a0:83:c0:6f:f8:2f:1e:c6:ec:c9:0c:8d:b5:96:71:
17:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4C:55:08:D5:86:25:B8:A4:A4:FD:40:4A:A9:A5:C7:05:7D:19:EF
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/UExVCNWGJbikpP1ASqmlxwV9Ge8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.137.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:74:95:7f:a8:e7:49:fc:0e:c2:b6:97:e7:c2:d6:43:b8:75:
8b:18:df:c3:01:b2:9f:19:86:a3:cf:77:fe:8a:3d:ba:cc:9a:
e3:fd:33:e1:e5:35:a2:92:d4:24:fc:c6:85:f0:b2:54:3b:95:
76:fb:bf:fc:4d:65:9f:9f:3f:81:58:2e:51:33:d5:8c:2b:39:
49:b1:63:07:8a:37:7b:f8:07:6c:99:bb:a1:0e:46:bc:87:b7:
83:d1:14:81:95:cc:9e:2f:46:e6:39:3e:48:5e:91:55:28:2d:
aa:14:81:f0:f6:e5:da:c9:8e:09:47:31:8e:3a:b3:83:93:39:
e3:e9:48:18:1d:46:92:44:74:df:c3:17:b6:97:1d:65:36:cc:
bd:ba:70:3f:64:c4:33:f0:4f:a8:f9:23:6c:36:44:24:c9:2c:
ff:8d:35:88:ed:27:6c:d6:0f:d6:ff:7f:72:20:8f:e6:ba:34:
48:bd:2f:08:8f:4d:ee:7f:8e:c6:cf:39:49:60:f0:a3:19:3f:
03:75:55:71:44:e6:d7:11:a4:02:06:0b:ec:25:03:58:6d:cc:
9d:07:1a:e0:5b:71:8b:02:8c:c5:f5:ae:56:c2:37:04:23:85:
90:32:6e:a1:85:17:c9:85:65:1d:db:3c:09:b6:28:59:64:b6:
ba:f1:56:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+LPxZns8FLc4TSrK/tRNIBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNzIyMTkxMzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDRjNTUwOGQ1ODYyNWI4YTRhNGZkNDA0YWE5YTVjNzA1N2QxOWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbKbcrBttyXTDOHr5nOTv/RgqCXx
gor6xtrbm50LSur1KW9WvcVgE/+Whixm7OVMpoB/BV5T0UbNdkL+Ygz1UoyTHc2w
PUwrgCpR11wJUiE4yaaB1hudeHwc9qANznDDIsu4ydvIzs2Y8sCr9qT6QoY4TCL1
YFTuh7ygciHkaAgQISqlDcseW/om8VK3SSL4AGBjoUKijNVYny2ns0f7RbE3FEyb
y8qZSpd8QA1PeHFc7pwEdu1ZJYAS0jj4oEZ02xLMV+w3iHRdD81OOva5O9jMJ+yF
5ECB+V+rphD85YG1rfvJ3iqHexQhAhhOmNSgg8Bv+C8exuzJDI21lnEXpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFBMVQjVhiW4pKT9QEqppccFfRnvMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvVUV4VkNOV0dKYmlrcFAxQVNxbWx4d1Y5R2U4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADY+JMA0G
CSqGSIb3DQEBCwUAA4IBAQAtdJV/qOdJ/A7CtpfnwtZDuHWLGN/DAbKfGYajz3f+
ij26zJrj/TPh5TWiktQk/MaF8LJUO5V2+7/8TWWfnz+BWC5RM9WMKzlJsWMHijd7
+AdsmbuhDka8h7eD0RSBlcyeL0bmOT5IXpFVKC2qFIHw9uXayY4JRzGOOrODkznj
6UgYHUaSRHTfwxe2lx1lNsy9unA/ZMQz8E+o+SNsNkQkySz/jTWI7Sds1g/W/39y
II/mujRIvS8Ij03uf47GzzlJYPCjGT8DdVVxRObXEaQCBgvsJQNYbcydBxrgW3GL
AozF9a5WwjcEI4WQMm6hhRfJhWUd2zwJtihZZLa68VYk
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:17 2026 by rpki-client