Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/WXjKMwbr5NuXmforDQA1MC1JhEc.roa
File: WXjKMwbr5NuXmforDQA1MC1JhEc.roa (raw, json)
Hash identifier: gE/L2cGz6y2Mn5xIOsUfaJmt2Vz5GNPYoYft7c7/Po0=
Subject key identifier: 59:78:CA:33:06:EB:E4:DB:97:99:FA:2B:0D:00:35:30:2D:49:84:47
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F9110A9302ADF80734AF5AD8A48477A39
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/WXjKMwbr5NuXmforDQA1MC1JhEc.roa
Signing time: Thu 23 Jul 2026 22:20:15 +0000
ROA not before: Thu 23 Jul 2026 22:20:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26969
IP address blocks: 13.142.0.0/17 maxlen: 24
13.142.128.0/18 maxlen: 24
13.142.192.0/18 maxlen: 24
13.143.0.0/20 maxlen: 24
13.143.32.0/20 maxlen: 24
13.143.52.0/22 maxlen: 24
13.143.72.0/22 maxlen: 24
13.143.128.0/23 maxlen: 24
152.234.192.0/18 maxlen: 24
177.1.180.0/22 maxlen: 24
177.1.184.0/23 maxlen: 24
177.1.186.0/23 maxlen: 24
177.1.188.0/23 maxlen: 24
177.1.190.0/23 maxlen: 24
177.1.196.0/24 maxlen: 24
177.1.197.0/24 maxlen: 24
177.1.198.0/24 maxlen: 24
177.1.199.0/24 maxlen: 24
177.1.201.0/24 maxlen: 24
177.1.204.0/24 maxlen: 24
177.1.205.0/24 maxlen: 24
177.1.206.0/24 maxlen: 24
177.1.207.0/24 maxlen: 24
177.3.192.0/20 maxlen: 24
177.3.208.0/21 maxlen: 24
177.3.216.0/21 maxlen: 24
177.3.224.0/21 maxlen: 24
177.3.232.0/22 maxlen: 24
177.3.236.0/22 maxlen: 24
177.3.240.0/22 maxlen: 24
177.3.244.0/22 maxlen: 24
177.3.248.0/22 maxlen: 24
177.3.252.0/22 maxlen: 24
177.202.64.0/19 maxlen: 24
177.202.96.0/21 maxlen: 24
177.202.104.0/21 maxlen: 24
177.202.112.0/21 maxlen: 24
179.67.128.0/20 maxlen: 24
179.67.144.0/20 maxlen: 24
179.67.160.0/21 maxlen: 24
179.67.168.0/21 maxlen: 24
179.67.176.0/23 maxlen: 24
179.67.178.0/23 maxlen: 24
179.67.180.0/23 maxlen: 24
179.67.182.0/23 maxlen: 24
179.67.184.0/23 maxlen: 24
179.67.186.0/23 maxlen: 24
179.67.188.0/23 maxlen: 24
179.67.190.0/23 maxlen: 24
179.198.48.0/23 maxlen: 24
179.198.50.0/23 maxlen: 24
179.198.52.0/23 maxlen: 24
179.198.54.0/23 maxlen: 24
179.198.56.0/23 maxlen: 24
179.198.58.0/23 maxlen: 24
179.198.60.0/23 maxlen: 24
179.236.128.0/22 maxlen: 24
179.236.132.0/22 maxlen: 24
179.236.136.0/22 maxlen: 24
179.236.140.0/22 maxlen: 24
179.236.144.0/23 maxlen: 24
179.236.146.0/23 maxlen: 24
179.236.148.0/23 maxlen: 24
179.236.150.0/23 maxlen: 24
179.236.152.0/23 maxlen: 24
179.236.154.0/23 maxlen: 24
179.236.156.0/23 maxlen: 24
179.236.158.0/23 maxlen: 24
179.236.160.0/24 maxlen: 24
179.236.161.0/24 maxlen: 24
179.236.162.0/24 maxlen: 24
179.236.163.0/24 maxlen: 24
179.236.164.0/24 maxlen: 24
179.236.165.0/24 maxlen: 24
179.236.166.0/24 maxlen: 24
179.236.167.0/24 maxlen: 24
179.236.168.0/24 maxlen: 24
179.236.169.0/24 maxlen: 24
179.236.170.0/24 maxlen: 24
179.236.171.0/24 maxlen: 24
179.236.172.0/24 maxlen: 24
179.236.173.0/24 maxlen: 24
179.236.174.0/24 maxlen: 24
179.236.175.0/24 maxlen: 24
179.236.176.0/24 maxlen: 24
179.236.177.0/24 maxlen: 24
179.236.178.0/24 maxlen: 24
179.236.179.0/24 maxlen: 24
179.236.180.0/24 maxlen: 24
179.236.181.0/24 maxlen: 24
179.236.182.0/24 maxlen: 24
179.236.183.0/24 maxlen: 24
179.236.184.0/24 maxlen: 24
179.236.185.0/24 maxlen: 24
179.236.186.0/24 maxlen: 24
179.236.187.0/24 maxlen: 24
179.236.188.0/24 maxlen: 24
179.236.189.0/24 maxlen: 24
179.236.190.0/24 maxlen: 24
179.236.191.0/24 maxlen: 24
179.253.64.0/21 maxlen: 24
179.253.72.0/21 maxlen: 24
179.253.80.0/21 maxlen: 24
179.253.88.0/21 maxlen: 24
179.253.96.0/22 maxlen: 24
179.253.100.0/22 maxlen: 24
179.253.104.0/22 maxlen: 24
179.253.108.0/22 maxlen: 24
179.253.112.0/22 maxlen: 24
179.253.116.0/22 maxlen: 24
179.253.120.0/22 maxlen: 24
179.253.124.0/22 maxlen: 24
179.253.128.0/20 maxlen: 24
179.253.144.0/20 maxlen: 24
179.253.160.0/22 maxlen: 24
179.253.164.0/22 maxlen: 24
179.253.168.0/22 maxlen: 24
179.253.172.0/22 maxlen: 24
179.253.176.0/22 maxlen: 24
179.253.180.0/22 maxlen: 24
179.253.184.0/22 maxlen: 24
179.253.188.0/22 maxlen: 24
179.254.128.0/18 maxlen: 24
191.217.192.0/18 maxlen: 24
191.223.136.0/22 maxlen: 24
191.223.140.0/22 maxlen: 24
191.223.144.0/24 maxlen: 24
191.223.145.0/24 maxlen: 24
191.223.146.0/24 maxlen: 24
191.223.147.0/24 maxlen: 24
191.223.148.0/24 maxlen: 24
191.223.149.0/24 maxlen: 24
191.223.150.0/24 maxlen: 24
191.223.151.0/24 maxlen: 24
191.223.152.0/24 maxlen: 24
191.223.153.0/24 maxlen: 24
191.223.154.0/24 maxlen: 24
191.223.155.0/24 maxlen: 24
191.223.156.0/24 maxlen: 24
191.223.157.0/24 maxlen: 24
191.223.158.0/24 maxlen: 24
191.223.159.0/24 maxlen: 24
201.58.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:10:a9:30:2a:df:80:73:4a:f5:ad:8a:48:47:7a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 23 22:20:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5978ca3306ebe4db9799fa2b0d0035302d498447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8f:c1:a8:e1:66:03:7d:c4:33:be:eb:36:53:
d9:10:e7:aa:7e:14:e2:7c:5d:a0:27:a8:b1:89:46:
fe:43:ed:8e:25:52:49:76:e5:3c:33:86:d1:e5:01:
fd:1e:1f:b8:c5:89:79:ee:fc:04:ce:dc:c8:2f:f5:
ee:3a:4c:08:84:3b:52:26:78:b9:2d:5f:d1:93:39:
c8:db:c9:df:3f:9e:4d:82:71:4f:58:fc:db:d9:7d:
0d:a5:17:e4:3e:2c:bd:0f:88:47:62:c6:82:88:b4:
13:d5:fb:e8:13:a2:1e:6c:49:f9:57:c3:c3:6f:31:
2e:b9:21:73:c1:52:8b:7f:b2:1d:3a:20:c4:de:ae:
e1:a6:9c:b5:1c:d6:ba:23:68:fe:18:85:f0:63:91:
38:ff:71:78:d9:e9:56:3a:28:5e:10:ee:8f:a5:82:
2a:ca:0a:b6:d2:69:a5:98:76:ba:f4:83:d3:d2:fd:
a2:15:44:ab:74:42:e3:9e:5b:a6:22:99:f4:37:31:
ed:5b:b5:37:c1:6e:9c:4f:be:66:68:6f:7a:a6:07:
77:ed:ed:1e:24:a4:c8:3c:c8:56:9e:37:92:10:6e:
c8:fd:ab:62:da:a1:05:4d:43:cf:f6:ba:81:b5:5d:
b3:d4:31:90:79:38:f6:cf:09:10:de:9c:51:2b:81:
00:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:78:CA:33:06:EB:E4:DB:97:99:FA:2B:0D:00:35:30:2D:49:84:47
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/WXjKMwbr5NuXmforDQA1MC1JhEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.142.0.0-13.143.15.255
13.143.32.0/20
13.143.52.0/22
13.143.72.0/22
13.143.128.0/23
152.234.192.0/18
177.1.180.0-177.1.191.255
177.1.196.0/22
177.1.201.0/24
177.1.204.0/22
177.3.192.0/18
177.202.64.0-177.202.119.255
179.67.128.0/18
179.198.48.0-179.198.61.255
179.236.128.0/18
179.253.64.0-179.253.191.255
179.254.128.0/18
191.217.192.0/18
191.223.136.0-191.223.159.255
201.58.128.0/18
Signature Algorithm: sha256WithRSAEncryption
86:9e:b0:e9:c6:89:ce:87:99:9f:73:f1:1f:73:3b:aa:ce:27:
36:96:79:21:47:7a:bd:a6:6d:62:2c:f9:84:45:43:22:83:3a:
11:82:a1:23:5f:7a:0d:c9:43:6c:9d:bc:dc:1a:d3:5f:55:e8:
d6:dd:6d:fa:a2:46:3e:f4:51:4f:b6:21:d3:c8:20:6b:2b:95:
44:89:1c:1a:ac:9d:5c:5f:fe:7c:8f:8d:05:81:fa:69:99:80:
9c:92:ef:c0:a9:9d:83:97:64:d9:a0:ca:1c:07:8b:00:be:ef:
2a:e7:aa:0a:44:e5:a4:e7:6c:af:a6:b2:00:cc:da:d4:ef:93:
57:0b:a9:f4:50:c3:5f:a6:9c:b1:cc:fd:b8:39:09:f7:66:63:
26:68:80:75:1a:0a:47:67:60:8a:af:53:ba:d9:9e:e8:38:8b:
e2:7f:fe:c0:e4:67:ed:8d:87:74:cd:38:ab:85:d9:6b:c4:a8:
8f:fd:43:f2:3c:41:2b:7c:bd:29:3a:ba:e2:c8:4d:1d:a7:69:
f6:e8:0f:1f:01:f9:ed:e4:a9:18:fc:72:b9:88:c4:6f:d2:8a:
25:34:5c:78:86:b7:6b:a4:64:7c:9e:46:16:60:40:1a:4f:85:
d1:74:b5:6e:af:c9:a3:dc:1d:24:3f:3c:74:c7:66:77:5c:5c:
f7:32:96:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:38:17 2026 by rpki-client