Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ZcC5WhqlGuQwsu_6ZInnGFwDJ6o.roa
File: ZcC5WhqlGuQwsu_6ZInnGFwDJ6o.roa (raw, json)
Hash identifier: P4am9nMnZBbR+ziT4YTnAVhIN/ULlp5fbn1mAm3DO9I=
Subject key identifier: 65:C0:B9:5A:1A:A5:1A:E4:30:B2:EF:FA:64:89:E7:18:5C:03:27:AA
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F90B25A882F86E282F68A81F60E339513
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ZcC5WhqlGuQwsu_6ZInnGFwDJ6o.roa
Signing time: Thu 23 Jul 2026 20:37:15 +0000
ROA not before: Thu 23 Jul 2026 20:37:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11798
IP address blocks: 13.143.16.0/20 maxlen: 20
13.143.56.0/21 maxlen: 21
13.143.124.0/24 maxlen: 24
13.143.135.0/24 maxlen: 24
31.76.136.0/21 maxlen: 24
31.76.144.0/21 maxlen: 24
31.76.152.0/21 maxlen: 24
31.76.160.0/21 maxlen: 24
31.77.200.0/24 maxlen: 24
31.77.221.0/24 maxlen: 24
185.207.135.0/24 maxlen: 24
185.216.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:b2:5a:88:2f:86:e2:82:f6:8a:81:f6:0e:33:95:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 23 20:37:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65c0b95a1aa51ae430b2effa6489e7185c0327aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e4:c8:b0:52:28:ea:b1:3b:30:ad:32:19:6d:
e1:e5:f7:3f:fa:f8:f1:bc:ea:ea:60:10:47:2c:61:
1e:52:27:0d:a0:6c:d9:9b:42:36:f4:ad:d2:5e:56:
59:62:62:bf:1c:c5:e3:b6:5a:fc:99:e7:cf:d3:82:
84:17:8c:e1:36:40:21:b0:54:41:80:49:ce:da:d8:
50:c1:a5:d7:d2:16:5f:4a:82:81:fd:96:0f:90:8c:
f5:78:4d:76:69:75:6a:8f:06:3a:58:6f:ca:fb:c8:
0c:7f:f7:ef:fe:c7:c4:6a:2d:a8:89:51:0f:27:e7:
cb:d7:c5:86:a8:84:d5:d5:e8:e9:a5:51:dd:07:03:
a0:6a:2a:7d:71:9d:e5:c8:49:14:b3:d1:e0:f5:78:
e5:99:9e:73:74:ca:69:20:94:c9:c9:86:3f:54:48:
ba:1e:fa:76:7f:ce:72:f9:da:ad:9b:21:71:5c:34:
1b:8d:0a:e7:68:1f:e9:88:84:f5:ee:52:61:bf:f2:
2e:df:9c:e4:a8:5f:e0:d0:17:5f:e0:e7:15:9d:df:
31:8a:06:94:e6:91:ee:65:e5:94:ad:8d:07:fc:b8:
52:85:f3:2e:28:12:48:f6:1d:b4:71:d3:53:5b:a8:
22:fb:be:15:e3:24:2e:cc:b5:39:12:94:e5:3f:c8:
02:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C0:B9:5A:1A:A5:1A:E4:30:B2:EF:FA:64:89:E7:18:5C:03:27:AA
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ZcC5WhqlGuQwsu_6ZInnGFwDJ6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.16.0/20
13.143.56.0/21
13.143.124.0/24
13.143.135.0/24
31.76.136.0-31.76.167.255
31.77.200.0/24
31.77.221.0/24
185.207.135.0/24
185.216.104.0/22
Signature Algorithm: sha256WithRSAEncryption
51:6d:24:90:4a:c8:06:13:93:c5:ae:79:67:b5:30:8c:7d:29:
0c:c7:5e:fd:a6:98:6d:f5:e2:5e:bc:43:27:9a:58:ae:e7:69:
8d:1e:e9:16:06:c3:61:e2:13:e9:b5:67:85:3e:0c:7e:d7:b7:
34:94:fb:fa:74:67:30:1c:4d:19:a6:24:77:5a:ab:ca:ac:34:
1b:80:92:f8:70:b0:3a:d9:ef:35:60:3d:c5:79:98:90:51:54:
5f:75:53:f7:2f:a0:8e:31:33:c4:64:96:0b:cd:ec:2c:82:eb:
c1:92:16:3c:94:fd:ff:e1:06:e6:d8:51:3b:9b:f6:f5:a7:95:
24:2e:4f:80:d8:75:51:db:b9:ad:3e:ea:eb:7d:cc:10:30:53:
4a:d8:76:d6:66:8a:26:4e:76:d4:fd:a7:24:1a:0a:6d:fc:05:
f9:ab:88:8d:ad:d9:7f:5e:46:12:c1:71:cd:a1:58:fa:66:da:
92:54:bb:a1:3f:6c:db:18:5f:66:30:29:8c:de:39:9b:28:85:
60:21:91:46:36:c9:2f:d0:12:57:e8:d7:d3:ee:80:6d:89:0a:
1e:ab:48:54:c4:7b:38:cf:fc:48:80:97:9e:d8:4f:d5:2d:06:
70:ea:a0:98:bb:64:e0:95:66:96:5d:b4:f1:c8:88:e4:8d:be:
5c:9c:f6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:22 2026 by rpki-client