Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/s9dcEOl4ROIqk69tdic3uMFxCUE.roa
File: s9dcEOl4ROIqk69tdic3uMFxCUE.roa (raw, json)
Hash identifier: AMrJKSp8yBZ0iFl2K4JYGFy5hbL5L9WCk9QVtcsmJG4=
Subject key identifier: B3:D7:5C:10:E9:78:44:E2:2A:93:AF:6D:76:27:37:B8:C1:71:09:41
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F2E326E40EC7693FB3B2ACFF0A881DFF9
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/s9dcEOl4ROIqk69tdic3uMFxCUE.roa
Signing time: Sat 04 Jul 2026 17:34:44 +0000
ROA not before: Sat 04 Jul 2026 17:34:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58232
IP address blocks: 13.143.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2e:32:6e:40:ec:76:93:fb:3b:2a:cf:f0:a8:81:df:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 4 17:34:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3d75c10e97844e22a93af6d762737b8c1710941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f6:b1:ff:96:49:41:e7:db:05:bb:3b:de:a2:
d2:b4:44:ae:b9:a4:7d:2e:8c:36:6e:d0:5f:82:bb:
74:51:33:c2:73:59:bf:11:7d:fa:4d:0f:1d:ad:33:
8b:b1:29:ae:37:14:03:b7:f2:2a:31:7a:19:b4:69:
dc:a4:11:ac:d3:c4:49:28:47:58:e8:47:79:ae:36:
b0:8f:1a:0e:90:4b:06:9e:d3:0c:af:3f:aa:57:ee:
0f:d5:36:fc:7e:46:5c:7a:f6:09:8d:32:08:54:58:
55:88:36:c8:84:ac:3b:00:42:07:0f:5b:ba:29:13:
a1:7e:6e:a2:8b:ee:06:47:22:e8:42:e3:14:83:ae:
30:9d:9e:5b:81:e0:04:b4:07:f9:7f:79:86:97:67:
c3:20:c8:2e:38:11:b3:c1:96:d4:52:d6:27:9f:0e:
b3:2a:9a:54:69:f1:4a:07:d4:61:e5:d1:aa:ee:25:
b8:a6:de:8b:33:47:66:49:cf:92:a1:4d:21:4b:e6:
f4:09:ef:54:fe:e2:7c:ee:47:64:d9:fb:d6:18:9b:
67:ff:ef:15:9d:4c:97:f5:e0:b9:6b:ba:a1:d9:bc:
c6:1e:b6:ad:2b:ea:17:b4:9f:99:e1:ae:52:96:b7:
61:9c:e6:d0:79:b3:5d:2f:e8:3a:82:9b:82:39:cd:
d4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D7:5C:10:E9:78:44:E2:2A:93:AF:6D:76:27:37:B8:C1:71:09:41
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/s9dcEOl4ROIqk69tdic3uMFxCUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.253.0/24
Signature Algorithm: sha256WithRSAEncryption
97:44:cb:c5:42:e4:6f:eb:66:c0:94:63:14:42:77:fc:3a:bc:
63:67:43:39:eb:df:90:87:9f:18:44:9d:dd:d0:3f:08:79:ea:
2a:df:84:82:70:f3:b2:a9:4c:28:71:8d:54:9d:c8:f9:86:23:
68:ec:b5:50:ed:76:73:88:71:e8:ec:a2:36:b2:f5:9b:ac:47:
aa:fc:8c:c6:0d:85:d9:41:3e:f9:6f:6a:79:48:1a:09:da:de:
84:4e:93:72:0a:1c:64:d2:6e:59:b6:d9:6f:15:c7:7c:43:a9:
90:5b:ce:f1:1f:33:63:07:57:25:4b:f1:22:3c:df:10:f8:ad:
3f:05:44:f0:32:80:4d:b5:d2:6b:95:fd:89:05:91:ec:e9:7f:
70:8e:59:2d:c4:5c:62:2e:6d:88:b0:4d:49:9d:28:30:48:95:
6e:87:dd:13:2e:97:6f:71:cf:f8:af:45:84:a3:ea:f4:a8:aa:
92:b3:4e:78:f4:f9:22:21:ae:f7:a3:dc:09:e1:0b:46:34:c4:
c1:43:b7:6f:9d:a8:15:4d:77:6e:8b:70:e7:13:bc:36:b8:10:
04:cd:d4:aa:a0:fa:43:de:54:42:34:cb:d6:62:4a:40:92:f4:
9a:e6:35:10:2d:8a:7f:a2:7f:a9:1c:8a:f2:e1:13:fb:98:f7:
18:50:7c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:33:37 2026 by rpki-client