Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Xjb8GaTrkkHBWOQ7DP9ba82L4gE.roa
File: Xjb8GaTrkkHBWOQ7DP9ba82L4gE.roa (raw, json)
Hash identifier: DBTcZ+cXDfBrIqB9pC5gvJH2Uwnc+LpuEFSeN27j0ZQ=
Subject key identifier: 5E:36:FC:19:A4:EB:92:41:C1:58:E4:3B:0C:FF:5B:6B:CD:8B:E2:01
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F34138F9F2C0111D2EBCBC58F80F34DCC
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Xjb8GaTrkkHBWOQ7DP9ba82L4gE.roa
Signing time: Sun 05 Jul 2026 20:58:44 +0000
ROA not before: Sun 05 Jul 2026 20:58:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215620
IP address blocks: 13.143.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:34:13:8f:9f:2c:01:11:d2:eb:cb:c5:8f:80:f3:4d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 5 20:58:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e36fc19a4eb9241c158e43b0cff5b6bcd8be201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:16:6f:5f:06:c7:74:1e:3e:69:95:f6:64:7b:
a8:ed:de:06:91:d1:c1:f5:1a:40:8a:73:d6:e8:31:
ed:84:dd:96:75:99:e9:b9:96:82:52:87:5e:5d:1d:
51:c6:2f:c0:c4:42:4f:08:ee:a8:06:19:1f:71:57:
0f:13:2c:10:a2:7f:49:84:64:a9:f8:c5:fc:17:64:
cc:28:f1:34:94:b5:51:98:b7:a1:eb:38:18:99:6e:
7e:23:f0:b2:91:15:5f:43:8e:76:b2:a1:5b:e6:37:
e9:4a:09:c6:14:40:0f:6a:90:4a:a8:ca:4a:6e:89:
74:59:91:e5:c9:cf:c2:84:a4:d8:a2:74:15:c3:48:
fe:25:34:7b:c7:ee:2b:a3:17:45:99:be:d1:a8:bb:
c0:25:c1:56:6b:a8:25:a7:d1:57:98:bc:88:02:3c:
5e:2f:86:36:9a:9b:ff:2b:16:30:41:5e:24:eb:14:
9d:76:6a:d2:c9:e0:5a:ba:04:ac:e9:71:51:1e:8a:
28:9d:e9:fb:eb:36:5f:6d:7f:2f:8a:ac:e1:61:ec:
da:e1:75:45:ae:2c:9b:a9:da:d7:88:58:f6:c7:29:
29:2a:d1:ba:ef:75:0c:db:4f:93:8f:70:00:3f:cc:
81:3d:f3:28:42:5d:cd:10:83:9c:58:ae:4e:07:89:
52:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:36:FC:19:A4:EB:92:41:C1:58:E4:3B:0C:FF:5B:6B:CD:8B:E2:01
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Xjb8GaTrkkHBWOQ7DP9ba82L4gE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.254.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:b0:eb:1c:b6:fa:95:0e:92:1f:5f:a5:28:1c:c2:50:d6:6a:
45:af:ea:15:cc:57:dc:8b:75:02:8f:81:53:88:69:d9:3c:ed:
d4:0b:ae:83:7e:a5:eb:f1:e1:4d:5f:e1:b1:07:c9:46:79:3a:
bd:e2:42:40:e8:83:82:1f:8f:1f:7a:05:26:bc:06:69:91:6b:
64:11:64:0e:39:d6:86:c5:bf:5b:6c:85:d9:42:6d:e4:68:aa:
fd:d9:23:df:95:05:bd:8c:e1:1a:74:14:72:74:76:e7:45:03:
d9:0a:df:eb:41:29:d0:e7:04:d4:30:f4:a3:d6:5d:b6:cc:27:
79:cb:a9:54:e5:06:1f:56:b9:4f:37:76:2a:97:78:88:68:85:
59:b7:56:ab:4f:dd:58:04:a4:56:d6:e5:2a:fe:b2:7f:40:eb:
68:42:23:06:5c:b2:99:d1:08:77:96:27:b0:f9:d1:ed:3e:a2:
ff:55:fd:c1:52:3a:5f:ea:f5:bf:15:00:43:82:d8:bd:c1:a2:
44:2d:7d:c8:e1:06:c7:a5:3c:bb:4b:5b:35:f5:17:05:2f:7f:
a0:0a:0a:f9:46:45:2f:32:dd:62:c6:cd:a3:cc:3a:c3:82:ec:
7e:cc:26:24:d5:c0:3c:bf:cf:9f:4a:7f:1c:06:a7:1a:9f:16:
b8:66:db:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:32:33 2026 by rpki-client