Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hOTN7rPjmpHAvNflMUkLYxNAsyg.roa
File: hOTN7rPjmpHAvNflMUkLYxNAsyg.roa (raw, json)
Hash identifier: o8siD+uAaHC3dHBh8XnWbwL6cmUvMHP1h++YyP9lLUc=
Subject key identifier: 84:E4:CD:EE:B3:E3:9A:91:C0:BC:D7:E5:31:49:0B:63:13:40:B3:28
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F29F588977D4E852B818C7447D05583F5
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hOTN7rPjmpHAvNflMUkLYxNAsyg.roa
Signing time: Fri 03 Jul 2026 21:49:44 +0000
ROA not before: Fri 03 Jul 2026 21:49:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211919
IP address blocks: 13.143.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:f5:88:97:7d:4e:85:2b:81:8c:74:47:d0:55:83:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 3 21:49:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84e4cdeeb3e39a91c0bcd7e531490b631340b328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:c3:17:09:63:18:2c:a2:c8:62:32:2a:6d:
be:3b:7f:85:ac:fa:ea:06:b5:34:73:3a:6b:60:18:
86:61:51:70:57:68:96:24:69:c7:ca:3c:3d:5a:66:
54:10:1b:59:1a:bc:b2:c0:51:13:6d:63:ed:de:1b:
62:db:72:2a:b3:93:4a:30:f1:10:71:c7:a7:e9:c4:
e2:c1:6d:b3:ae:3a:cf:82:e2:e8:8d:f9:15:36:d5:
d5:55:82:73:3a:30:11:6e:73:bd:50:29:13:e1:5b:
ae:bc:4b:b5:b8:98:ca:1b:ae:8e:5b:39:57:1b:55:
10:bc:a4:54:1a:d4:51:36:2a:ed:7c:73:bb:68:b8:
18:54:d3:75:6c:93:bc:a6:b7:36:54:c6:3e:7a:23:
1a:2f:a7:05:27:b9:3b:3e:ef:4c:12:24:18:a3:53:
ea:ac:92:4e:4d:37:a9:30:7a:22:a1:a0:f8:f2:18:
ac:b8:5b:d7:26:bd:6a:31:c9:04:0c:2b:de:8a:04:
be:3a:b6:b9:07:dc:3e:f1:2c:c0:b0:15:f4:a2:2a:
51:0a:a1:72:47:8e:0f:e9:37:c8:d4:40:d7:28:98:
61:6b:db:c9:76:60:0b:48:d9:5a:a2:70:a8:57:cb:
f7:ed:ed:eb:5e:3f:af:d4:e9:12:2b:fc:4f:91:70:
9c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E4:CD:EE:B3:E3:9A:91:C0:BC:D7:E5:31:49:0B:63:13:40:B3:28
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/hOTN7rPjmpHAvNflMUkLYxNAsyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.250.0/24
Signature Algorithm: sha256WithRSAEncryption
59:8d:7c:e1:e3:5c:f9:03:e1:95:ce:ec:11:81:f8:47:be:14:
16:d8:d0:a8:87:8b:00:20:0d:1c:56:a7:ef:2f:e2:6c:85:3e:
c9:65:d9:b1:c5:68:9f:12:b5:ff:10:c8:9c:4c:e3:8b:4f:d3:
d0:09:23:ce:1b:d2:11:11:4a:95:25:94:f3:38:cd:99:a0:5e:
8e:26:9a:08:c0:05:be:3a:e9:bb:49:c0:93:cd:6b:a4:0e:bd:
24:6d:b6:2f:23:9f:a2:3c:5c:60:87:bc:6a:27:f9:c8:ba:c8:
8d:13:27:01:6b:09:a7:2c:7e:d8:45:d6:be:c3:7f:3c:6c:d7:
ba:d5:ea:9d:9c:1d:18:31:57:f4:15:9f:dd:aa:12:00:0e:fd:
af:04:8d:e4:51:22:fa:f7:fe:9a:3e:9e:d5:86:cb:43:1d:97:
64:ad:90:37:b8:8f:43:b2:eb:57:58:69:ab:74:35:29:9b:6b:
cf:69:ad:29:79:11:e2:74:76:ea:82:33:40:97:cf:54:95:3a:
cd:48:15:56:3b:fe:85:5c:ce:41:41:78:bb:ed:f5:9e:68:03:
d6:e4:a5:40:7e:bc:6e:a0:b1:af:f6:29:14:7c:c5:4d:8d:13:
5b:21:85:8b:ed:d0:cd:54:d6:a3:c0:36:b3:e7:89:40:07:d7:
ca:98:d9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:58:46 2026 by rpki-client